Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft
File:                     F9vVrPH5x10YofdQMRFMSPCyM2M.mft (raw, json)
Hash identifier:          +pjONsn9T0CQ0Ed4ut1Uz/48WHPyjvgfEmpgyn6ZUfI=
Subject key identifier:   7C:E5:75:C4:9F:36:9B:D8:1E:FF:7A:95:F9:A6:E0:AE:C9:50:62:D4
Authority key identifier: 17:DB:D5:AC:F1:F9:C7:5D:18:A1:F7:50:31:11:4C:48:F0:B2:33:63
Certificate issuer:       /CN=17dbd5acf1f9c75d18a1f75031114c48f0b23363
Certificate serial:       0193568929614BB5DD3023E6E2818BC98024
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 01:00:49 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:49 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:49 +0000
Files and hashes:         1: 1-r2YH42SRoVFiIYfpX9dfOJc5-k.roa (hash: OiNMq8FZEpOgDgTyZtkm4smH0LJsIxEU7vjE8kIiqBg=)
                          2: 1FS0VoSubdhEQ399wLCks4MOU_E.roa (hash: w6duaT7EU6ALdQ3N1EX0bnDAcmcAmWDqE1ULKZhch9o=)
                          3: F9vVrPH5x10YofdQMRFMSPCyM2M.crl (hash: /BWgZM6vQmuszav9oST7P4RHwqb/51btRtF/C7T3soQ=)
                          4: N7jc_-UwG0He_UI7UPF4CSv8WrM.roa (hash: q0xsX4ohT7ePtc6+9uBVyHfygE4TSg/PbTnLZGFdYLw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:29:61:4b:b5:dd:30:23:e6:e2:81:8b:c9:80:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17dbd5acf1f9c75d18a1f75031114c48f0b23363
        Validity
            Not Before: Nov 23 01:00:49 2024 GMT
            Not After : Nov 24 01:00:49 2024 GMT
        Subject: CN=7ce575c49f369bd81eff7a95f9a6e0aec95062d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8f:02:ba:21:a5:e1:79:af:a0:f0:77:90:1d:
                    07:0e:ed:f4:fa:13:be:d2:6f:26:f4:58:9c:10:12:
                    a7:6b:ab:0b:18:ea:18:4f:f7:c4:c1:3b:fb:eb:f4:
                    c1:af:df:74:c5:79:cd:c1:60:25:74:8e:a2:1e:ca:
                    91:62:c3:c3:dd:ca:c6:05:da:7c:b2:40:75:40:9c:
                    09:73:72:34:5d:fb:1a:1a:73:e0:b0:3b:fa:b3:42:
                    69:9a:ae:b3:bc:00:36:f4:7a:3c:be:4a:07:c7:d3:
                    67:da:2b:1c:ac:8b:f0:00:0d:c9:b0:bf:5c:59:32:
                    4f:e2:9e:7f:03:62:c8:2d:93:c3:bc:8f:e5:99:70:
                    47:68:18:a9:df:7d:93:ca:26:38:e2:33:62:bf:17:
                    77:c9:0d:1d:35:2f:e7:35:d9:0a:8e:25:64:c5:3e:
                    27:b3:83:5c:4b:aa:54:cc:8e:6c:cd:5b:6e:84:13:
                    e1:72:c7:e6:8c:32:44:2a:10:87:f6:7c:c4:7e:d0:
                    ea:cb:d2:bd:10:76:b4:2d:d5:11:ee:f3:da:bd:93:
                    9b:e6:bc:e1:d8:67:0c:7e:b5:0c:17:66:87:4f:35:
                    f8:cc:33:ea:79:a1:d6:a0:f3:36:04:72:f7:d6:13:
                    aa:5b:12:e4:31:f7:2a:8f:8e:b7:86:52:09:ee:cf:
                    8d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E5:75:C4:9F:36:9B:D8:1E:FF:7A:95:F9:A6:E0:AE:C9:50:62:D4
            X509v3 Authority Key Identifier:
                keyid:17:DB:D5:AC:F1:F9:C7:5D:18:A1:F7:50:31:11:4C:48:F0:B2:33:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:29:62:7e:98:cc:c2:8d:a5:7b:bf:c8:f5:b5:5b:b5:db:70:
         b8:1e:91:73:7a:cc:42:b6:c6:ac:c6:b4:7a:90:00:17:16:7b:
         80:3b:ff:b4:de:f6:22:6f:58:75:70:44:d2:54:3d:2c:ec:f0:
         48:c5:6f:b4:70:6b:f3:ac:12:ff:e9:9c:43:44:0b:2a:8e:44:
         29:fe:94:15:d8:36:38:45:b3:7d:9f:fe:ab:26:e2:94:19:28:
         7c:17:2f:bc:16:db:55:d1:c4:c9:c1:80:56:e3:1c:35:a6:28:
         c2:36:85:fc:e4:bf:ad:ec:fc:4e:44:38:70:1b:78:d1:7b:da:
         8e:3e:25:1e:3f:c5:f7:0f:a5:25:eb:ac:bd:e2:84:2e:d9:57:
         a3:3a:f8:83:1b:db:2e:1e:cd:1d:22:aa:8a:b8:7e:9e:e1:3f:
         fa:06:49:27:09:34:e4:20:9c:37:6c:8e:ef:05:02:bc:ec:5b:
         03:fe:1c:26:25:66:01:7f:6b:00:4e:9c:93:c1:d9:bd:32:0d:
         e4:04:94:a9:94:fd:5d:87:47:41:00:72:90:a5:c0:bb:65:e5:
         db:2f:3e:9e:f9:02:6f:9e:8d:5f:3d:58:22:2e:04:c3:4b:c9:
         7d:28:0f:56:65:07:47:32:48:3e:40:a4:49:e6:34:3b:91:ef:
         2a:03:f8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----