Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
File:                     vlJx8OFYfBRDTySA-RQQGFUHz6E.mft (raw, json)
Hash identifier:          1INBx2mlXfzxIB1gKNbZMr5VEjJMwOJB3kdZmmNQRUA=
Subject key identifier:   F9:18:8C:44:15:E7:6C:CD:D5:24:60:64:A1:85:25:86:3E:90:5A:66
Authority key identifier: BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
Certificate issuer:       /CN=be5271f0e1587c14434f2480f91410185507cfa1
Certificate serial:       01936AEB1196E9B53F6E7E02A5C2555CF956
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
Manifest number:          130B
Signing time:             Wed 27 Nov 2024 00:00:10 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:10 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:10 +0000
Files and hashes:         1: kl1n2sovkkDb-pBgXB_qf8TTd0s.roa (hash: W+5sg5lSPngB+bUGCvcukK5bvem7Ip2LML2QRIBvqbo=)
                          2: vlJx8OFYfBRDTySA-RQQGFUHz6E.crl (hash: ihvUqbu2ZZjAP+xJKDomr8wLIL6WHsbc+tlQwmoFCX8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:11:96:e9:b5:3f:6e:7e:02:a5:c2:55:5c:f9:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be5271f0e1587c14434f2480f91410185507cfa1
        Validity
            Not Before: Nov 27 00:00:10 2024 GMT
            Not After : Nov 28 00:00:10 2024 GMT
        Subject: CN=f9188c4415e76ccdd5246064a18525863e905a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4d:c9:cd:67:9f:1d:3a:48:d9:c9:0f:5d:9b:
                    48:b7:6f:28:5c:78:8b:86:9d:92:89:27:bf:09:4e:
                    ce:ad:73:8f:26:50:91:63:8b:84:25:f2:60:4a:f9:
                    2a:73:22:67:91:1e:b6:47:08:e8:b9:9f:58:cc:11:
                    e1:1c:8d:a5:ef:9f:5b:0d:49:b7:1c:f5:95:5e:80:
                    74:be:02:aa:39:d5:ba:ea:7d:ab:5a:00:12:9d:cd:
                    12:ac:03:b1:85:be:8b:a7:2a:d4:5b:67:3a:70:61:
                    71:e5:b6:a4:a9:42:de:be:89:5e:28:d6:a3:24:80:
                    bd:21:ac:0b:7f:16:1d:b5:03:39:76:77:6f:f3:da:
                    31:02:f8:bd:12:a8:e0:62:f1:f5:2f:c3:21:41:a6:
                    c8:7d:6a:04:d6:98:c7:7a:79:df:88:b7:03:d9:0f:
                    be:32:cc:91:e4:2b:dd:1f:6e:85:26:90:5b:36:41:
                    ab:05:4e:11:f7:1b:34:26:ea:ab:71:57:e0:d2:41:
                    b7:23:a7:bf:c2:2e:98:86:33:79:1e:8b:da:03:92:
                    85:3e:db:a8:5c:d3:38:d6:d9:17:8e:b0:a9:c1:35:
                    c9:4d:0c:0b:67:b5:70:fc:da:b6:44:e1:5b:4c:de:
                    28:fd:43:c9:f5:7d:0f:2c:f5:a4:0d:0d:de:49:ff:
                    1c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:18:8C:44:15:E7:6C:CD:D5:24:60:64:A1:85:25:86:3E:90:5A:66
            X509v3 Authority Key Identifier:
                keyid:BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:e0:04:8a:d6:4c:7e:c9:b7:61:1e:36:2a:65:a8:78:61:39:
         68:d1:93:64:61:54:74:16:14:4a:a2:21:f8:8d:ac:c4:3b:22:
         e4:0f:c5:5b:5f:8f:f1:23:61:34:b8:1a:1f:5d:44:90:e5:53:
         10:ed:43:80:f6:6f:3f:78:52:03:4a:5a:a9:e5:69:5f:88:0b:
         d8:1e:85:2a:f7:a4:22:46:01:e7:2a:e5:86:8c:20:7a:f9:24:
         3e:c9:ab:38:01:3c:ae:d0:fb:74:5c:d7:a6:3e:d2:0a:33:79:
         80:6a:c5:50:22:d7:f2:f3:97:55:4f:d8:ea:bb:41:71:49:a1:
         26:81:4f:d9:84:dc:7b:6a:63:64:82:30:07:9d:ff:87:9f:95:
         70:8e:a7:7f:29:0e:70:7d:ae:d5:d8:1a:76:91:4e:df:c1:8c:
         18:d5:e2:ab:cf:92:31:02:18:0f:2a:6c:a6:30:05:47:57:53:
         06:79:ba:c5:8c:d6:66:d8:ba:26:3b:dc:20:85:2d:e1:b6:f8:
         8e:7f:8c:d6:72:da:14:39:ef:17:1c:65:c3:c4:f1:0d:b0:2f:
         8a:6a:06:79:0e:d2:30:eb:0d:99:cc:0e:56:18:31:93:8c:75:
         c8:9b:10:f6:f4:ca:41:9b:f1:59:6b:b3:6d:d6:e5:00:86:82:
         46:a2:1c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----