Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
File:                     MseO7vestFH8N1df65EU38zBzfs.mft (raw, json)
Hash identifier:          JTS91aWwROjL+hiPDLw52nt/svdhixV6IuELS/6legM=
Subject key identifier:   DB:9D:3F:7E:7C:FB:BA:29:53:F1:4C:15:04:6B:F9:77:6F:97:72:93
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Certificate issuer:       /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial:       019358403103FEF2D3802E5BF865F1757C9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
Manifest number:          0EB1
Signing time:             Sat 23 Nov 2024 09:00:21 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:21 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:21 +0000
Files and hashes:         1: 1dY32L0GnOL37LmUkfrBg0w1FGI.roa (hash: 7C7TiU3kGLOR5S7CEL8GH0PUhlAny0cWW385ZAc69oA=)
                          2: MseO7vestFH8N1df65EU38zBzfs.crl (hash: n6IEiriPsQqKl2Ra/2IrItTenKl89YMKnh6EUn+OlPc=)
                          3: UZ4jkhAgMuMxyfaO1x9I3ph_Ues.roa (hash: iXAsXW6jbjOeiYn98epOZJoTfYuUbzyhQIB4l2Nw/bo=)
                          4: akWhVKICoJPrPTRQa2jis5mxwdQ.roa (hash: wqPwuHoOUwj/mvwfuquGTTtnBqLqXhWdDMrSxQYFSbU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:31:03:fe:f2:d3:80:2e:5b:f8:65:f1:75:7c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
        Validity
            Not Before: Nov 23 09:00:21 2024 GMT
            Not After : Nov 24 09:00:21 2024 GMT
        Subject: CN=db9d3f7e7cfbba2953f14c15046bf9776f977293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f2:bd:4a:75:60:63:29:55:d4:78:6a:53:c5:
                    a9:b9:f4:46:dd:ff:3f:5d:5f:e5:4e:2b:84:eb:fb:
                    7f:7a:ce:e2:64:ac:80:aa:33:55:02:5e:27:0f:30:
                    68:98:26:ce:d2:2e:c0:be:41:7c:78:6f:01:38:e3:
                    07:9a:cd:79:dd:5b:d8:99:28:75:8b:de:d2:93:5d:
                    66:fa:9e:39:f1:d5:06:97:04:67:8b:da:ab:7d:8c:
                    7d:63:09:f4:12:ae:d1:25:25:e0:6e:dc:88:2c:59:
                    30:da:50:1e:e6:e8:48:a5:a1:a0:99:08:92:44:fd:
                    81:fa:78:07:51:e1:1a:bf:5d:d6:65:da:46:2d:b1:
                    4c:f5:ce:0f:e5:bf:f2:eb:c7:b8:02:20:71:c8:de:
                    2e:08:f5:46:bf:27:f8:87:8b:5c:18:c2:86:3a:db:
                    ab:c6:ce:12:f6:53:4b:8d:08:e6:bc:17:b6:39:33:
                    25:05:ba:4f:fd:56:43:7c:19:19:27:66:11:1a:d4:
                    47:b5:08:6e:30:48:42:f7:8b:f4:82:a9:0d:31:41:
                    b8:e9:28:11:e0:b9:82:02:3d:13:3b:04:29:5b:c4:
                    44:84:44:06:b4:f9:f5:b7:02:93:d4:00:75:1c:56:
                    c1:b9:2a:09:23:8b:dc:1e:2a:3a:54:8d:38:68:2c:
                    a7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9D:3F:7E:7C:FB:BA:29:53:F1:4C:15:04:6B:F9:77:6F:97:72:93
            X509v3 Authority Key Identifier:
                keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c4:63:f0:0f:13:0f:23:91:b2:3c:40:91:d6:cb:66:cc:97:
         c3:c3:2f:71:ac:bb:01:66:e3:48:45:60:96:93:16:0f:78:ea:
         86:19:e6:65:c7:6f:6e:f4:e9:59:28:0a:ae:78:8a:11:3d:aa:
         bb:17:21:03:d8:ee:d9:1c:5f:db:22:9b:6d:f7:fb:97:98:9a:
         32:3c:93:ef:e0:27:28:c2:dd:6c:f2:9e:b6:f9:01:4e:ca:6f:
         4f:6b:63:8c:31:67:7e:8a:a7:1d:a8:2e:9a:5f:70:e0:6d:e6:
         fa:8b:01:ad:ed:67:da:8a:59:13:6e:bc:e8:a3:e3:88:b1:d8:
         0d:85:0e:30:6a:56:5a:3f:d8:f0:8c:f8:a5:4d:d5:b6:33:c3:
         0f:78:56:16:db:6f:20:4c:b7:78:9f:2a:92:8c:78:22:66:0b:
         a5:e2:85:49:f9:b6:0c:fd:1a:2a:61:9d:91:a8:b2:87:ba:f1:
         44:39:95:0c:59:d4:75:41:67:3f:96:70:9e:b7:31:20:d0:db:
         6e:c6:5f:0c:27:72:d0:e2:8e:01:b9:b5:dd:3f:dd:ac:48:f3:
         b0:b9:19:eb:3f:da:ca:fb:f4:e1:3a:21:0e:f4:9a:90:ec:c9:
         4a:b3:cf:d4:8f:8b:09:47:8f:35:c0:36:7c:60:f0:2b:db:95:
         ae:d3:70:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----