Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
File:                     bPmyTywIR9BBweZqEvAeq6R4tPw.mft (raw, json)
Hash identifier:          l2oPYkB1onOWK8O9wac05ZxzGYK5i3nZB08ui7hmxVA=
Subject key identifier:   32:E7:00:CB:17:60:F7:32:1E:2A:7E:0E:5D:EA:A9:DF:99:2F:4B:04
Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
Certificate issuer:       /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Certificate serial:       01935651C166B85F9DB9446BB3A8294A79EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
Manifest number:          10BC
Signing time:             Sat 23 Nov 2024 00:00:18 +0000
Manifest this update:     Sat 23 Nov 2024 00:00:18 +0000
Manifest next update:     Sun 24 Nov 2024 00:00:18 +0000
Files and hashes:         1: J4KXloaCMP2UDZiDCqkUKvTWBbo.roa (hash: 30RmeVS4RZ18Pc5MOAdCS+cUOWDS9MZ2FqI9hgnQs6o=)
                          2: bPmyTywIR9BBweZqEvAeq6R4tPw.crl (hash: yjgR8CRmPspBcmoKRb/+XvkJPAirW5cU3cgAyoGYXzg=)
                          3: fgO0Wedq6Z3jIfTFoARfa3YT_zY.roa (hash: InBeXouiyy3TiQsZAXYTmj/YQ0SUPG856iIXQZG2jxE=)
                          4: i_-XUVQMgSyCFbx1tsU7767j5p0.roa (hash: KDekDkOWxEwaRiy4KzggtQJt9FoZ/7lD6Z5zynu9CPs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:51:c1:66:b8:5f:9d:b9:44:6b:b3:a8:29:4a:79:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
        Validity
            Not Before: Nov 23 00:00:18 2024 GMT
            Not After : Nov 24 00:00:18 2024 GMT
        Subject: CN=32e700cb1760f7321e2a7e0e5deaa9df992f4b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a4:ee:a8:8f:5d:42:12:65:1d:91:1b:df:34:
                    d0:aa:81:a6:c6:c9:94:c9:63:6c:ac:38:0b:d8:5c:
                    1f:a6:b0:a2:84:f6:79:31:12:64:41:a0:f0:02:93:
                    9d:bb:0a:9e:82:10:8b:e5:89:9e:35:3d:86:42:c4:
                    53:05:cb:c8:04:24:17:23:76:00:29:22:c4:5f:c2:
                    46:ea:cc:c3:2b:7f:86:e4:d4:20:60:4a:b2:f6:1f:
                    39:c9:1d:37:f2:be:eb:f0:28:8d:d0:a1:ba:9d:c0:
                    f2:03:9f:f7:e9:8d:6a:27:85:a2:0d:e8:5e:27:07:
                    5f:2d:34:2f:93:66:d3:6d:d7:49:a6:67:59:cc:b4:
                    e1:db:75:da:8e:33:1f:c4:f9:08:be:57:21:ba:6e:
                    4e:b1:d1:bd:05:ab:3f:03:8f:b3:8e:96:6e:5d:74:
                    ce:d8:33:18:01:45:4d:53:6e:78:48:9e:ac:af:29:
                    10:29:87:2a:7e:dd:1b:63:b8:e7:6f:83:61:c3:1b:
                    4e:88:ca:fb:2a:3f:fb:9c:2e:45:24:99:d9:fb:09:
                    8f:3f:45:4e:ea:79:48:33:93:4b:bb:02:26:1f:42:
                    c0:dd:f9:fc:5a:4a:16:78:70:db:a7:1a:ca:e6:3e:
                    99:df:d2:74:87:17:33:1a:3d:21:a1:28:5c:bc:dd:
                    92:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E7:00:CB:17:60:F7:32:1E:2A:7E:0E:5D:EA:A9:DF:99:2F:4B:04
            X509v3 Authority Key Identifier:
                keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:99:4f:4f:6a:2e:ab:91:87:1f:c7:a8:89:01:5b:41:cb:46:
         e4:3a:88:3c:06:e4:4c:fa:59:9c:12:a2:76:b6:6f:d9:d7:58:
         73:18:2a:3f:b3:94:a1:50:39:a0:ee:53:5f:60:bd:5a:8c:57:
         91:6f:41:3a:23:b4:75:ea:2b:66:ac:19:5f:c8:a9:5d:50:67:
         7b:a4:cd:32:1c:d8:45:c2:54:05:78:1f:38:01:2b:0f:d2:1b:
         14:f5:3c:27:ec:9f:21:ab:54:a7:51:23:a7:29:18:14:c0:b1:
         41:94:8c:73:90:cb:39:7b:a9:98:b4:69:12:a7:32:28:cf:dc:
         81:df:71:6e:ba:05:e3:58:fa:49:15:30:cc:60:5e:b8:73:3a:
         52:63:00:13:4b:37:7d:12:46:e1:07:12:8c:93:15:ff:cc:35:
         d3:4b:7b:c7:30:3b:96:c0:c0:e2:fe:d9:3b:3c:6b:4b:43:48:
         bc:dc:81:5a:92:71:4e:93:74:7f:ea:76:86:8e:fd:84:a6:94:
         93:bc:15:79:a6:42:2c:bf:98:c0:60:0b:f9:ce:4c:fe:57:2e:
         63:45:ee:95:80:91:90:46:9e:9f:86:fd:03:0c:95:ec:0f:20:
         a8:a0:21:53:a4:c7:eb:36:3d:72:bc:28:ff:76:64:ef:cb:eb:
         0c:b3:99:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----