Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
File:                     j3iWOzxPLdGHwgQ33x19nBaMq4E.mft (raw, json)
Hash identifier:          AFUkRR4yhFuNMJjFkdHh1OTgfp6XUuf8M08F0DrI1eY=
Subject key identifier:   72:35:BE:A9:69:EA:7A:6D:7E:9F:78:37:0E:6A:08:B2:6A:09:65:0F
Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
Certificate issuer:       /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Certificate serial:       019355AD6CEFD50A12B0F3695D305F1A3339
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
Manifest number:          136E
Signing time:             Fri 22 Nov 2024 21:00:49 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:49 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:49 +0000
Files and hashes:         1: Bwpo3AuQDFZZjzOqzw96c4RCM6w.roa (hash: KrpqkQj4Vx1BGUR1GsE1cpTWh1FfMq6S2AExEzi4G9U=)
                          2: j3iWOzxPLdGHwgQ33x19nBaMq4E.crl (hash: 78VpMY4z0mcSjO7fwmCIOg5YbeGKbtxJSRPS8mUNxIM=)
                          3: xe4g2mjE5OdhWMQ3zVUUtErcYV8.roa (hash: 63HNHO9dwV04E6PbAw2CAVjAe5GcYrWB7WZ1+FpvR9k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:6c:ef:d5:0a:12:b0:f3:69:5d:30:5f:1a:33:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
        Validity
            Not Before: Nov 22 21:00:49 2024 GMT
            Not After : Nov 23 21:00:49 2024 GMT
        Subject: CN=7235bea969ea7a6d7e9f78370e6a08b26a09650f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:03:a7:39:b0:86:16:5b:13:19:ed:db:5a:28:
                    67:ae:a5:4a:36:ff:08:8f:9a:2e:c4:fa:73:11:6b:
                    17:08:a1:a6:c5:49:b3:2b:02:dd:14:1a:96:60:d8:
                    91:7d:15:93:da:6f:b2:8c:9f:2a:0a:58:2e:f9:97:
                    6d:d0:7c:88:77:6f:59:47:04:47:2b:6f:67:62:a9:
                    ff:cc:2d:f1:8d:5f:33:b4:8f:1d:86:cc:64:15:67:
                    95:5a:d9:ae:f6:82:8b:b3:6f:8e:38:69:21:c1:db:
                    9c:24:a1:65:e4:ca:fa:34:3c:ea:31:b6:78:93:69:
                    bb:fe:73:5b:e4:1c:17:ac:f5:ed:31:22:39:27:f3:
                    02:85:9c:1e:64:da:35:8a:26:32:ad:c7:92:c2:9f:
                    e4:1e:eb:0d:f4:fd:29:88:84:46:bd:e7:2a:5e:f0:
                    bc:bc:fc:5e:e4:09:35:0f:02:86:20:13:c8:de:45:
                    ac:9c:52:d5:43:62:2e:41:c7:ca:a8:26:f7:44:5f:
                    f8:b4:2f:2d:45:68:22:52:39:65:e4:26:ca:2f:7c:
                    51:63:3d:4c:03:3b:bf:ae:ca:ad:b4:70:8d:64:30:
                    03:36:c4:67:16:e7:8f:f8:08:e9:b9:00:55:92:34:
                    a5:cf:c4:2a:c6:0b:d1:6d:12:5f:e8:9c:13:e8:50:
                    c9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:35:BE:A9:69:EA:7A:6D:7E:9F:78:37:0E:6A:08:B2:6A:09:65:0F
            X509v3 Authority Key Identifier:
                keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:c2:e9:4a:81:ca:f8:6c:63:c3:54:2f:99:2e:83:95:c4:12:
         ae:ae:9e:7b:b7:ff:cc:4c:05:cc:96:01:92:59:61:b8:29:89:
         0f:31:36:83:09:75:19:ec:ae:f6:31:d8:14:3d:fd:73:60:b3:
         bb:73:fb:3b:64:ed:78:bf:e1:fc:e8:ca:d8:c3:15:31:79:e2:
         1e:c1:0c:47:ec:56:dc:e2:1f:13:fd:40:9d:35:53:63:1d:a3:
         d1:25:6f:e5:19:86:de:68:89:bd:64:57:98:36:b7:74:44:d6:
         33:bb:4f:4e:45:c3:fb:bc:97:7e:03:e8:29:94:ab:6f:7e:10:
         0f:b3:5a:a9:11:2a:aa:dc:94:bf:ab:be:fb:e1:da:df:e1:c6:
         41:39:9a:19:1c:e4:65:a1:8e:51:a0:b3:99:3d:87:3a:b5:1f:
         72:4d:9d:45:1f:40:ee:d5:44:98:dd:f9:45:94:7e:87:5b:01:
         67:c4:ce:86:10:a5:89:f4:db:4c:51:1c:5d:31:49:27:6f:97:
         05:8b:9d:37:a2:91:c9:b1:3c:81:df:99:c7:38:6b:0e:0d:a8:
         8f:d8:8e:d2:ee:7f:0f:5a:f2:c1:5a:2b:ab:15:e3:da:13:62:
         10:b5:36:92:43:0d:ad:f0:d2:b9:ee:68:33:ae:84:3c:e8:21:
         71:14:8d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----