Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
File:                     bXt5YErx85CPSBeVZiY1Pub_wfQ.mft (raw, json)
Hash identifier:          pYgRNcSD68OpOZS9dX3D+unmQIK3wEjLG6Q8oMDxIhk=
Subject key identifier:   5D:F8:D8:23:3D:79:D4:EF:84:9B:9C:A5:A1:85:84:17:D9:A1:D6:04
Authority key identifier: 6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
Certificate issuer:       /CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
Certificate serial:       01935809311614C54591726A6A514C46B5FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 08:00:17 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:17 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:17 +0000
Files and hashes:         1: bXt5YErx85CPSBeVZiY1Pub_wfQ.crl (hash: wVPcs5a47ufhPCSDRlajhCegpbVgpXptA9OrFPGk9SU=)
                          2: yuTZq7IyvkWyf-SDq6nhfFf_KN0.roa (hash: N3BfiRk6NEPQczm8ajES6MDhqpR474l0JE4svqw9icc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:31:16:14:c5:45:91:72:6a:6a:51:4c:46:b5:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
        Validity
            Not Before: Nov 23 08:00:17 2024 GMT
            Not After : Nov 24 08:00:17 2024 GMT
        Subject: CN=5df8d8233d79d4ef849b9ca5a1858417d9a1d604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e8:ce:c1:ed:4a:6b:4a:a9:40:74:4a:2e:c2:
                    fd:3d:f1:c3:c0:f6:cb:2b:af:4a:e2:65:c2:a4:5a:
                    49:6c:e1:fa:d9:2c:e4:08:dd:10:4a:01:bb:05:12:
                    95:87:97:79:5f:0e:75:3c:52:9f:a0:f9:99:7f:bd:
                    99:08:f2:35:41:f8:6c:81:9f:b2:13:79:44:eb:95:
                    d2:c5:5e:dc:d1:89:81:79:74:f0:ad:d4:a7:f8:8a:
                    6a:2c:21:3c:15:25:b9:66:cc:e7:97:20:fc:02:2b:
                    70:af:ac:22:ec:e1:ee:84:f7:3d:d9:11:c8:29:c3:
                    2a:2c:23:44:5f:7c:b8:6e:7d:0c:ef:38:7f:24:72:
                    f4:99:c1:75:a0:b2:ec:a8:21:52:2a:79:35:a9:52:
                    d3:1c:5a:9c:3d:28:fe:d5:14:ed:67:c2:c3:9e:56:
                    d9:c2:f9:e1:4c:d4:72:fb:d9:86:46:98:05:16:20:
                    77:0d:ef:4b:31:a3:2b:a4:06:b1:c5:01:07:0a:29:
                    3f:ff:5d:06:dd:fb:45:cc:c3:03:9b:b2:57:6a:64:
                    a0:79:d8:06:97:2c:23:3b:7d:aa:e3:9b:8a:2f:f8:
                    16:42:c4:1f:9e:7b:fc:49:d9:aa:48:f5:c7:75:e2:
                    50:a1:a2:cf:f3:16:d3:c9:17:e8:c1:2d:b3:f6:2a:
                    1e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F8:D8:23:3D:79:D4:EF:84:9B:9C:A5:A1:85:84:17:D9:A1:D6:04
            X509v3 Authority Key Identifier:
                keyid:6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:48:63:48:51:85:93:97:a5:ab:9f:15:3b:cb:66:91:86:89:
         ee:4a:91:93:de:25:82:63:97:4a:83:1b:6c:cc:f2:21:02:88:
         f4:c6:2a:15:83:7d:35:0a:5c:ca:2f:0f:47:c3:a6:b3:77:6c:
         ca:89:a5:97:c7:2b:c2:5a:5c:c7:56:42:ab:3e:70:a6:6e:45:
         c6:30:c8:ce:06:d8:ba:1b:f0:4e:0f:ad:d6:0a:3a:d7:31:6c:
         6e:77:c2:a6:e0:27:48:2e:4f:a8:83:1f:43:6f:ed:d8:3a:3a:
         d0:d9:d8:da:08:55:c7:22:75:42:7b:fa:77:cf:6f:83:9a:69:
         f5:91:a8:91:a1:00:59:ab:a5:bc:d7:a7:34:81:b6:ae:e2:de:
         e9:fa:1c:4d:82:d4:bb:96:ee:c5:e0:ec:38:c8:d5:28:d9:d5:
         4b:85:38:16:24:6d:32:f7:64:35:33:79:8e:08:03:ea:0f:f7:
         f2:a8:f6:0c:e9:f0:5e:e4:f8:d3:00:8d:9c:96:21:c7:85:50:
         81:03:1d:78:6b:d9:14:2a:fb:a7:ab:39:94:63:af:2a:95:a1:
         2b:13:26:23:ee:a0:c1:be:00:22:fe:85:52:1a:ed:b0:8e:2d:
         18:36:3f:d6:d0:0b:92:66:60:b9:e3:52:73:74:e6:de:7a:57:
         a8:6e:84:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----