Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft
File:                     st8A84zO2SGXmTB2yzaFvzK8Xmk.mft (raw, json)
Hash identifier:          BHd2GlmdVcT0JQB1D5uSGxXd0siPK+gdANq9z+lgGd0=
Subject key identifier:   D3:BF:C5:04:F6:2A:74:8D:B8:47:39:02:34:C8:4D:47:84:4F:E4:4D
Authority key identifier: B2:DF:00:F3:8C:CE:D9:21:97:99:30:76:CB:36:85:BF:32:BC:5E:69
Certificate issuer:       /CN=b2df00f38cced92197993076cb3685bf32bc5e69
Certificate serial:       01935809512DCB818CC521E7041A1B551156
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft
Manifest number:          0EDA
Signing time:             Sat 23 Nov 2024 08:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:25 +0000
Files and hashes:         1: WaGwxjJjuW9nvL-QyY8pEix6kUI.roa (hash: CRi8QwGHjEF2xOqUoscohQLb4XXNbPLpBebMiQPiJIU=)
                          2: st8A84zO2SGXmTB2yzaFvzK8Xmk.crl (hash: UMpvTjQPmBpqNfvaeKx4Vr6Lh2BO1w/V83Deh4NZivA=)
                          3: yKa16hm2ff-Ca3Sx-UbTaOCD05E.roa (hash: 3HR4qTMsAPkvFWmMyqpaM7lK1f7bFMIjx4Gl++XMPUk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:51:2d:cb:81:8c:c5:21:e7:04:1a:1b:55:11:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2df00f38cced92197993076cb3685bf32bc5e69
        Validity
            Not Before: Nov 23 08:00:25 2024 GMT
            Not After : Nov 24 08:00:25 2024 GMT
        Subject: CN=d3bfc504f62a748db847390234c84d47844fe44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:61:ed:4c:58:c3:80:d1:fb:ed:86:0f:53:96:
                    20:be:60:2a:91:87:8d:ff:84:ad:36:61:c2:c8:70:
                    78:6a:11:3f:49:d6:aa:98:e3:44:24:e3:0a:86:f1:
                    23:55:f8:94:cb:44:5e:22:ee:3d:ba:e9:c2:6a:b6:
                    fa:b4:2b:4e:10:e3:70:84:77:e3:f2:3b:92:e3:eb:
                    c7:95:47:ec:7d:66:3a:ad:e5:37:81:cd:4f:5c:cc:
                    7b:74:db:72:4d:19:0c:e0:7d:c7:c6:73:1a:63:cf:
                    67:c1:b8:02:ee:24:72:4f:bb:56:4b:5e:1e:ca:a6:
                    d4:f0:87:3e:a9:7f:5d:ad:8c:da:3f:61:15:ea:b8:
                    f6:9e:b5:b7:42:1c:68:0f:f8:af:70:d7:8a:58:3b:
                    56:d7:e1:cf:bf:af:f0:35:86:7c:26:ef:70:31:3c:
                    93:f1:a2:74:0f:95:52:c9:20:41:b0:00:58:a8:ad:
                    81:4e:ed:c3:a0:b0:d3:85:0e:8a:a3:8e:d0:80:f7:
                    9a:ca:a1:7a:e2:ad:4b:59:42:dd:d4:06:46:ae:16:
                    56:f8:c6:14:49:16:7d:7b:a8:f7:b8:6e:a1:9c:98:
                    dd:86:f6:c4:ed:b6:31:c8:b2:ad:94:07:36:2b:a7:
                    47:a3:76:74:20:62:ae:ad:4f:14:d8:2d:e6:a8:85:
                    f9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BF:C5:04:F6:2A:74:8D:B8:47:39:02:34:C8:4D:47:84:4F:E4:4D
            X509v3 Authority Key Identifier:
                keyid:B2:DF:00:F3:8C:CE:D9:21:97:99:30:76:CB:36:85:BF:32:BC:5E:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:cc:7c:08:b6:93:6c:f1:98:51:2a:53:98:41:c2:a0:4c:d4:
         37:9a:6c:b1:b7:9c:58:a3:ca:44:d4:5f:88:41:45:91:9a:75:
         27:a7:37:42:4d:81:57:6c:39:ee:87:94:b8:a6:cc:f5:f4:99:
         79:71:c9:30:0e:c8:23:a8:0b:a5:94:d9:28:30:47:5f:34:2e:
         0a:e0:51:5a:da:fc:07:20:cf:d1:eb:d8:b5:d9:7f:d7:ab:0d:
         b6:72:d7:12:59:32:5c:eb:0d:a5:5a:94:1f:47:04:c5:f9:23:
         2f:64:4f:06:a0:53:6d:42:78:dd:8e:e3:04:f2:70:4b:09:f8:
         ac:0d:fa:e6:f6:e5:a6:21:7d:88:9a:fc:12:6e:e3:fa:51:b4:
         7e:7e:88:2d:00:a0:53:21:2b:0f:c6:25:51:b2:42:cd:34:8c:
         01:6c:65:d5:f9:94:98:2a:e3:2b:c9:04:b7:3b:df:f7:58:5a:
         72:70:6a:db:0c:06:07:ec:0e:b5:71:9b:05:6a:4b:99:c5:9f:
         5d:bd:f1:8e:93:59:ff:5e:28:27:3b:db:f8:1f:0b:9e:cf:92:
         50:5b:f7:1d:5b:4b:42:7c:85:43:84:a2:26:1f:69:b9:4d:bd:
         e3:4e:21:d7:00:7a:28:7e:62:41:db:dd:0c:7d:b0:51:7d:8e:
         7b:75:69:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----