Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
File:                     j16oN5vKRPT2p_S2mGTNmwKiexI.mft (raw, json)
Hash identifier:          hLWzEOo3eg13HuXyFdw02DB5Sgo6Pmz6Tx6vSbz9YSI=
Subject key identifier:   73:65:24:B4:0B:37:9A:3C:AE:53:76:BA:3E:31:FA:F1:3A:EA:93:A8
Authority key identifier: 8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
Certificate issuer:       /CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Certificate serial:       0193572D89B7B29DD42431B6F2F8657368D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 04:00:22 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:22 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:22 +0000
Files and hashes:         1: _mu3Nwsdj-nHAKGg9-RIZ_NTDYo.roa (hash: 4UJwlsODohof+uGrJXuB2VaXTofXZzFFeWvNhMjbpZA=)
                          2: gKWIHALsVe4cTgaS4PR2XDC8OaE.roa (hash: GRJgAjisMVrhhiXDdU636s6jjXFgv6grt++sDe/Ft/Q=)
                          3: j16oN5vKRPT2p_S2mGTNmwKiexI.crl (hash: Tw/9oSmXjfFzW/ybKySXFGmrAtZcI1G3v4a43v6MJTw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:89:b7:b2:9d:d4:24:31:b6:f2:f8:65:73:68:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
        Validity
            Not Before: Nov 23 04:00:22 2024 GMT
            Not After : Nov 24 04:00:22 2024 GMT
        Subject: CN=736524b40b379a3cae5376ba3e31faf13aea93a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3c:36:7e:3b:05:2c:cf:c0:b1:f4:20:b2:f3:
                    36:10:14:e1:5d:95:94:20:5c:05:04:86:8f:92:13:
                    2d:43:96:f7:30:8d:5b:04:e8:51:82:b8:18:9b:13:
                    72:74:a1:05:da:56:35:45:a5:be:7d:92:c1:1d:e8:
                    9e:87:3e:7d:05:7c:8f:79:9c:62:9e:5a:21:5a:15:
                    91:ab:9a:1f:b0:36:35:dd:7e:13:76:5e:1f:b3:8f:
                    4d:a7:f8:aa:c9:75:e4:36:bb:ac:da:06:a6:32:7e:
                    04:fe:d4:a9:59:9d:2b:d6:33:6f:cc:8e:b8:5d:ff:
                    77:25:88:60:55:07:19:c2:42:8b:e2:3c:dc:3a:25:
                    4a:5c:16:9c:f9:fd:bc:82:8c:55:46:ac:c2:dc:7a:
                    56:40:fb:5c:d9:57:b0:6d:7a:25:ac:c0:74:e8:e8:
                    07:ff:52:21:52:34:e3:3b:25:ad:ed:b5:97:57:4d:
                    0b:3c:b3:eb:46:14:dc:46:12:ab:f6:e9:d9:02:07:
                    7e:59:58:76:d4:2c:e0:5e:ef:8a:99:a8:b2:c8:ee:
                    ee:20:f4:79:51:07:10:d2:16:73:7a:87:86:89:f9:
                    05:ed:48:c8:4b:4b:bf:6f:b0:0e:3e:13:93:1d:12:
                    a5:a2:33:66:f9:31:f4:7a:03:87:4d:55:ae:4c:90:
                    07:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:65:24:B4:0B:37:9A:3C:AE:53:76:BA:3E:31:FA:F1:3A:EA:93:A8
            X509v3 Authority Key Identifier:
                keyid:8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:fb:e7:f6:b2:6c:cc:4b:6c:7c:75:97:92:08:e4:04:11:77:
         09:55:97:a0:e8:19:03:7f:fb:e8:83:3f:1f:21:a4:35:ba:d9:
         ef:fb:37:ad:47:42:70:83:67:18:71:ba:22:eb:dd:a9:a9:9d:
         70:c9:ea:ef:5b:eb:72:b4:5f:50:06:38:fc:e6:33:79:03:a9:
         b3:55:55:c5:c3:2a:ae:cb:f7:64:86:f6:6c:63:02:26:f6:12:
         d8:ce:4a:de:db:af:07:4c:04:27:ae:75:55:33:ee:a5:56:43:
         21:c3:f2:0e:d6:a4:9e:27:e3:8d:48:c3:0a:bf:bd:58:28:e0:
         2f:d9:1b:4a:13:d8:2d:f4:98:ad:b9:b9:9f:f1:c0:3a:e5:62:
         67:17:43:ea:92:3b:49:5a:f2:a4:b4:ca:e3:6f:a8:cb:13:02:
         68:67:4b:90:53:92:41:a4:ce:b9:f7:34:3b:84:91:ad:b0:b9:
         98:01:a4:8a:b7:2c:0b:19:7f:1b:d5:d9:e6:be:6c:81:25:c8:
         2e:29:73:08:bc:43:86:df:ec:8f:37:86:82:ef:1d:07:e5:05:
         04:41:75:f3:65:db:f4:7a:a4:e1:12:ed:d4:f8:cf:14:f1:ba:
         37:27:08:f1:a5:29:33:d5:4c:c5:ca:28:27:b1:f5:02:ae:dc:
         41:7f:96:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----