Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
File:                     XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft (raw, json)
Hash identifier:          eYks17fXXDKz37cDAdZi9llnvWu3eHdTWTlmI7SeGZY=
Subject key identifier:   76:66:A1:DF:50:E7:6F:80:46:BB:74:12:57:BD:80:E3:C2:86:D7:3A
Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
Certificate issuer:       /CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Certificate serial:       01923437137B4E6F92C38CA635EBC5296DC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
Manifest number:          12DC
Signing time:             Fri 27 Sep 2024 16:01:17 +0000
Manifest this update:     Fri 27 Sep 2024 16:01:17 +0000
Manifest next update:     Sat 28 Sep 2024 16:01:17 +0000
Files and hashes:         1: 86GDzxR4i-ntXsEjVx1DqpFWVvI.roa (hash: prNtSh0x3JQ5Z79ZzoGVnff1Xkp2ptFpVmjIp//A1Lk=)
                          2: Me5r2Nm9YJCMcMuL7P_zmlrKaDM.roa (hash: OPyK3AmzDouuv3s3J7TbAA/anm1D/IXyhrI34EjdiHk=)
                          3: XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl (hash: Y7HUt2U/Fz+j77j4e3qq8FoXz/GaTdqu3Dzy8L9lmik=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:34:37:13:7b:4e:6f:92:c3:8c:a6:35:eb:c5:29:6d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748
        Validity
            Not Before: Sep 27 16:01:17 2024 GMT
            Not After : Sep 28 16:01:17 2024 GMT
        Subject: CN=7666a1df50e76f8046bb741257bd80e3c286d73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1d:89:25:db:fb:a6:bb:bb:1e:82:f9:21:87:
                    56:02:61:71:4a:0a:23:f8:a1:33:ea:16:64:34:c6:
                    2e:1f:25:08:f5:28:af:a8:50:09:16:36:4f:d5:ca:
                    f6:ea:8c:d1:1d:fd:d6:ac:1d:31:8f:e8:38:62:9f:
                    cc:fc:77:e1:3f:46:ed:85:35:88:c1:9a:76:98:19:
                    0a:bb:4b:34:07:69:cd:57:fc:b5:70:9f:ce:54:5b:
                    dd:e6:c7:30:12:aa:65:7f:f8:8a:b9:9d:f8:42:50:
                    53:90:c7:86:63:fd:23:50:eb:c1:fd:3b:f9:87:4b:
                    06:cb:a6:ad:14:f3:e4:a6:6e:91:02:b0:bb:52:a7:
                    96:44:7b:69:63:08:84:77:59:38:fa:96:56:dd:44:
                    90:b5:b6:ad:3e:c4:14:30:63:18:33:5e:a6:ed:b5:
                    36:32:ed:b9:75:16:7b:15:13:2c:e1:41:ae:42:2d:
                    ea:e4:89:b2:2c:c9:2d:6c:19:d9:60:d9:cb:91:72:
                    f8:f5:c5:31:f4:b6:e9:00:c3:b9:a9:d9:91:3e:5d:
                    b1:55:6e:41:91:63:50:d9:fd:fd:f0:a4:80:30:ba:
                    fb:0b:51:fc:05:5c:7d:b7:03:68:f0:e7:4e:bb:3b:
                    c9:62:76:b0:92:b5:c6:bb:81:3e:ee:d1:21:7e:35:
                    69:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:66:A1:DF:50:E7:6F:80:46:BB:74:12:57:BD:80:E3:C2:86:D7:3A
            X509v3 Authority Key Identifier:
                keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:20:6f:91:13:13:30:99:2c:c8:2b:af:48:e4:cd:fd:d6:11:
         7a:c0:ef:10:4d:d6:d9:9f:fc:2f:4c:30:3b:75:8e:1f:6c:18:
         4b:b6:52:1e:7d:5e:56:95:90:5d:6b:f7:e8:62:ec:c4:6a:cb:
         42:e1:28:35:1c:59:fe:1e:bd:8b:2e:dc:1f:94:ab:50:28:95:
         30:33:e9:df:f5:41:8d:1d:9c:f7:80:9e:98:b6:ef:30:1a:b9:
         e2:ee:f0:0d:07:50:8d:50:c4:8a:01:c2:7d:3e:77:f4:2d:84:
         69:4c:aa:ab:d9:74:e4:40:96:39:40:a4:fa:6c:24:20:ed:e7:
         e4:d5:79:20:3d:64:cb:60:6d:09:81:0b:af:52:8b:46:bd:37:
         69:66:38:1f:29:fd:b5:54:69:51:a6:ab:53:a0:a1:16:fa:63:
         9f:9f:bb:fe:c5:96:cc:0a:39:c2:d9:43:38:af:76:8c:66:30:
         5c:22:bb:6c:d6:46:d7:f5:00:7a:ee:86:d4:e3:8a:e5:e1:5f:
         46:f9:80:d1:c7:7c:db:72:9f:a9:89:bb:44:2a:b0:de:23:7e:
         2f:74:74:f8:85:d1:20:57:23:ae:90:06:36:c3:a5:32:b8:ca:
         23:de:93:27:3a:c7:18:b6:08:49:96:8b:92:93:74:63:d6:2e:
         36:c2:93:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----