Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.mft
File:                     63ZBEa7_qGvR7DyohbY95_VlD24.mft (raw, json)
Hash identifier:          i4oSMj7zkEIULN3gjyn59FLrXyWkXmnXVmXujNuHULw=
Subject key identifier:   2F:47:0A:F8:2B:B0:7A:19:A9:7A:19:43:A3:89:6D:FB:D9:90:2A:A4
Authority key identifier: EB:76:41:11:AE:FF:A8:6B:D1:EC:3C:A8:85:B6:3D:E7:F5:65:0F:6E
Certificate issuer:       /CN=eb764111aeffa86bd1ec3ca885b63de7f5650f6e
Certificate serial:       019407220D54DE572D91B64A03A2A349A788
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.mft
Manifest number:          0858
Signing time:             Fri 27 Dec 2024 08:00:59 +0000
Manifest this update:     Fri 27 Dec 2024 08:00:59 +0000
Manifest next update:     Sat 28 Dec 2024 08:00:59 +0000
Files and hashes:         1: 3wmHgBjfBXKeXLPKx6Korh0fInc.roa (hash: dYu8Burt24BO7MSGwsuQlK6lRlqOxEOdHazQdnXNqo8=)
                          2: 63ZBEa7_qGvR7DyohbY95_VlD24.crl (hash: dmHGlAFWCXzRGm5rNrOLAqmMJFUq3UgBgBH4qQTd2d8=)
                          3: pcZOurX6XRmVi7QzM2ESWZ-Cpeg.roa (hash: NWxf4rQ6xdhe3cEu0aoNE6ek64/ODTaYvSS9FzjB4rs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:22:0d:54:de:57:2d:91:b6:4a:03:a2:a3:49:a7:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb764111aeffa86bd1ec3ca885b63de7f5650f6e
        Validity
            Not Before: Dec 27 08:00:59 2024 GMT
            Not After : Dec 28 08:00:59 2024 GMT
        Subject: CN=2f470af82bb07a19a97a1943a3896dfbd9902aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:93:51:f7:6d:98:13:1a:f5:0a:2e:58:14:51:
                    30:6f:36:89:c8:5f:4b:63:5a:1b:73:34:c8:0b:9f:
                    a4:d5:61:0f:ff:9a:38:ca:23:71:9b:a7:b2:85:6d:
                    ad:7e:21:64:0c:fb:18:36:c8:46:25:93:1a:3e:5e:
                    9f:00:b5:11:3f:d6:e1:ba:33:5e:21:ac:a5:0e:40:
                    3c:63:e3:85:de:03:48:77:62:ed:ed:b7:d8:83:10:
                    b3:4b:5d:73:6f:27:34:f7:6c:18:42:1e:25:e9:f0:
                    2e:69:06:df:71:6c:43:ea:6b:3f:37:69:8a:f2:42:
                    de:8a:e7:39:24:9c:77:b7:f6:46:28:13:48:d2:18:
                    56:e3:64:5e:00:e6:2e:69:82:84:be:10:24:16:36:
                    d1:76:a2:4b:8c:7f:ae:a2:ee:f1:f1:2b:ca:85:2d:
                    d8:f5:f5:8f:02:ae:25:a1:ef:57:5d:72:fe:16:bf:
                    a8:ab:ca:7c:25:d9:2f:46:c5:f4:53:32:27:d1:20:
                    38:4d:95:89:45:16:c7:87:08:40:f0:64:1e:3a:6a:
                    9e:8d:09:d3:68:22:79:3b:40:57:55:39:9a:c8:7e:
                    f2:73:88:17:bc:ee:b7:fc:25:1f:17:87:4d:63:1c:
                    41:d1:cd:09:5c:cc:50:a6:02:f9:2b:57:4c:44:e5:
                    b1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:47:0A:F8:2B:B0:7A:19:A9:7A:19:43:A3:89:6D:FB:D9:90:2A:A4
            X509v3 Authority Key Identifier:
                keyid:EB:76:41:11:AE:FF:A8:6B:D1:EC:3C:A8:85:B6:3D:E7:F5:65:0F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:73:60:e2:d6:16:43:25:73:d9:ef:a8:55:2c:85:45:f7:d4:
         ce:72:fe:43:65:90:bb:25:57:b3:b5:1f:93:a1:0a:91:3e:74:
         58:a0:53:dd:8c:0d:f2:c2:64:99:84:c5:1b:7e:24:67:48:d8:
         49:aa:ec:93:13:57:54:8f:a0:80:12:35:1a:8b:e7:d0:79:fc:
         61:99:32:85:fe:65:f6:f8:2d:3e:9c:d7:9b:7d:ef:a4:d8:1f:
         4e:cf:6c:21:ce:e0:6a:39:37:56:dc:f9:9a:53:39:f7:e2:d8:
         9a:7e:ad:9d:07:2a:66:6d:d6:dd:bc:bb:75:fa:dc:68:a7:74:
         8a:61:31:12:f8:14:bb:bb:7a:fd:d1:27:c9:33:2c:81:73:b4:
         94:98:fc:54:59:89:75:84:27:cd:23:da:9b:f2:78:a9:df:b6:
         50:b5:3c:92:39:0f:f8:1e:56:69:f5:07:d9:90:9d:a0:82:38:
         97:a4:3c:f0:9c:5a:21:55:14:f0:fe:c7:b2:af:67:93:25:fe:
         7d:94:c7:0f:9d:b6:a3:08:53:f6:88:77:39:df:62:bc:eb:b4:
         a1:66:a1:6a:cf:78:7d:8a:5f:ce:c0:47:28:e3:9e:5f:b0:05:
         3f:fd:70:93:c2:7b:f6:4b:80:68:63:41:68:59:e1:ca:15:44:
         2c:a7:22:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----