Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
File:                     VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft (raw, json)
Hash identifier:          TFQCxqXbNtRD4Lj41cbJuUT/EO3HhvbRsyxnmm1L/pU=
Subject key identifier:   A6:FA:24:B9:C5:D7:6A:C5:38:00:99:25:EC:A2:28:02:62:53:FE:56
Authority key identifier: 56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89
Certificate issuer:       /CN=5688b11c5f24f2e938c88a51cb49ceb135364389
Certificate serial:       0193549B51C89E3F9C9FA3B93D2A339B7673
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
Manifest number:          0B81
Signing time:             Fri 22 Nov 2024 16:01:25 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:25 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:25 +0000
Files and hashes:         1: UtdYA4fSVUJhiytFf3kl4UTKBt4.roa (hash: NvZm07/uSBAiKEwlNKUiE0shg8444Zcy8o7ZDwFJqBU=)
                          2: VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl (hash: Jvi3rUXaMUIeUEeoBYffgpAOCkadlYJHaeCCahkbjr0=)
                          3: o_koCbvlzbKUaSzUHZ3xPJlun_I.roa (hash: jfjXWWwktlnRWoSmtY8d68W8t7XCKBpPaySLQE1KDEs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:51:c8:9e:3f:9c:9f:a3:b9:3d:2a:33:9b:76:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5688b11c5f24f2e938c88a51cb49ceb135364389
        Validity
            Not Before: Nov 22 16:01:25 2024 GMT
            Not After : Nov 23 16:01:25 2024 GMT
        Subject: CN=a6fa24b9c5d76ac538009925eca228026253fe56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8b:87:35:5d:4f:3b:78:39:a9:f6:1e:9a:2c:
                    ed:87:07:9c:7a:a2:5c:60:60:c1:68:c3:fe:73:a1:
                    c3:ae:bd:e6:2b:c5:98:4a:25:e7:19:a4:5e:82:48:
                    95:bc:32:5e:bc:00:c9:87:2c:41:e7:e1:23:e0:de:
                    c0:e6:3a:29:a7:d1:3c:28:e9:08:05:18:34:b5:94:
                    33:83:ff:dd:38:b5:9d:93:a2:40:c7:3d:81:04:ed:
                    72:94:39:06:33:6a:61:c6:49:79:87:b5:8c:da:a3:
                    3f:e8:3c:fb:2d:e0:79:39:d3:bb:a5:30:fc:74:32:
                    57:01:7f:d6:e4:2c:84:9a:20:95:65:9c:b8:8c:c0:
                    d9:0c:54:e9:a4:7e:b1:62:bd:29:0c:30:da:67:98:
                    a1:42:90:9c:ae:01:ab:96:6a:af:ed:2a:26:2b:b4:
                    ce:11:6e:a3:d2:44:97:df:f7:3d:a9:01:70:6f:0e:
                    ab:f3:a7:ab:00:c3:ba:16:05:7e:38:1a:98:d9:3b:
                    64:73:f6:e1:d7:fa:bd:34:fe:9a:e4:a1:a1:8e:40:
                    d5:ee:c6:86:a2:c8:32:9a:4d:ea:4a:35:f1:47:98:
                    da:1f:44:52:6a:5b:f5:58:fd:7a:a2:72:ef:76:ea:
                    34:04:41:2d:66:df:8f:b5:b1:66:44:7a:7e:f4:b8:
                    3d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FA:24:B9:C5:D7:6A:C5:38:00:99:25:EC:A2:28:02:62:53:FE:56
            X509v3 Authority Key Identifier:
                keyid:56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:8e:b1:27:c7:c0:ee:34:79:70:32:d3:24:aa:50:ea:14:c6:
         ac:71:76:4e:40:17:8a:22:98:e2:54:eb:0f:cc:2d:8d:f5:00:
         c2:6d:c4:f3:80:14:cd:da:2e:92:3e:b6:24:92:e3:e6:2c:f1:
         b9:85:0b:07:fb:8f:9c:56:96:cc:19:56:65:4d:2a:ec:23:a1:
         dc:a2:ea:2c:d6:9f:a8:36:cb:db:e9:55:5f:d0:41:f2:4f:8c:
         29:f0:9a:c0:a4:f6:f6:a7:97:5d:1a:37:43:f0:87:01:36:c7:
         11:ce:f5:3f:17:2b:27:2a:a7:3a:95:53:b7:79:c1:4b:8e:4f:
         71:22:ad:d9:69:f3:9c:9f:c3:19:34:a3:f7:c0:c1:00:4f:e8:
         8d:24:ed:4e:3c:ee:a6:23:6c:bc:69:46:81:68:53:d9:2a:9c:
         c7:be:de:56:ac:18:8e:38:46:19:04:25:7e:b4:ee:34:cd:54:
         3f:8e:a2:ed:05:da:b6:e8:ec:9b:5e:d2:fd:19:c1:9c:d8:92:
         ca:e7:b7:ab:f2:c0:2b:5a:e3:d9:0c:e7:96:20:13:32:65:1a:
         d4:10:cf:b1:03:14:c7:2f:74:54:c7:28:8c:ea:d3:29:fa:45:
         77:13:4f:f2:b9:c5:ee:2d:5a:1c:8a:66:a8:de:b6:7b:a0:e6:
         92:cf:38:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----