Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
File:                     p5860xQqLAL5krlqsLm2OQr3_gI.mft (raw, json)
Hash identifier:          ABU76I9/VyKIbCZ9aJZUIuQyI+KNXgec8jniu+g+3Tc=
Subject key identifier:   1E:7D:72:77:32:71:CC:41:00:75:36:40:94:AF:3D:C2:D3:C8:0C:D2
Authority key identifier: A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
Certificate issuer:       /CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Certificate serial:       0193572D98676CE95DBF2B14702250927A25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
Manifest number:          03C5
Signing time:             Sat 23 Nov 2024 04:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:25 +0000
Files and hashes:         1: Nb7Qhw-3_RkiehRYzB7YOYhzs4I.roa (hash: 3hoQDB9rBGroRZJbahEJ2i88Gup8jCXmqicyYiPOvF8=)
                          2: p5860xQqLAL5krlqsLm2OQr3_gI.crl (hash: 7O6RgXcvculSYJq3YG1024M/yeq4hNxlEItT82HviLA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:98:67:6c:e9:5d:bf:2b:14:70:22:50:92:7a:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
        Validity
            Not Before: Nov 23 04:00:25 2024 GMT
            Not After : Nov 24 04:00:25 2024 GMT
        Subject: CN=1e7d72773271cc410075364094af3dc2d3c80cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f9:44:48:6b:6c:33:c5:0d:2c:e8:32:4b:ad:
                    fe:25:b0:8a:29:b4:06:9c:97:a2:2d:d6:c3:67:ee:
                    a5:28:18:8d:ab:27:22:7e:02:58:f6:98:b9:73:af:
                    b6:63:02:33:3a:dc:5e:a7:fb:60:51:19:05:26:97:
                    7b:51:fc:96:1c:94:ca:99:57:e4:f3:fc:13:42:bf:
                    f9:62:b3:aa:e8:1b:bb:18:20:d5:2f:3c:8c:7e:5f:
                    70:a8:78:b4:d5:2d:b2:ff:74:b3:fa:f1:73:0b:9f:
                    00:bb:18:f5:f7:1e:4f:7e:c9:52:15:71:30:8d:00:
                    e6:2e:df:b2:7d:9b:1e:1e:f5:c5:3f:44:7f:ba:b3:
                    10:60:49:3e:c7:c6:3e:02:70:34:46:28:b0:e3:74:
                    4d:f1:8b:20:94:25:8f:fd:2b:76:a8:64:97:ae:8f:
                    ee:c6:d4:a8:71:a1:b3:e8:01:a9:a2:ae:7a:bf:54:
                    c7:43:a2:49:29:0a:2a:de:b0:7d:bc:a4:0c:7b:f6:
                    6c:33:73:e0:2f:ed:7a:84:08:1d:b3:45:f6:96:b2:
                    12:6d:12:2a:60:e4:0d:21:13:1c:0c:84:44:2c:d7:
                    80:e0:fd:2a:96:55:c2:48:f6:f7:df:e2:36:7f:73:
                    7f:b5:61:d3:88:ef:c7:7f:14:1c:e7:d4:30:87:6f:
                    5c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7D:72:77:32:71:CC:41:00:75:36:40:94:AF:3D:C2:D3:C8:0C:D2
            X509v3 Authority Key Identifier:
                keyid:A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:67:cc:66:40:ab:8f:8c:72:b9:0a:f5:7b:36:da:88:1d:a6:
         18:04:d4:68:ba:a9:9d:7e:c4:8d:1b:7d:56:5a:c3:e5:80:fb:
         93:3a:53:20:f2:e7:af:e6:6a:9c:3e:06:c3:0a:78:d1:0d:54:
         83:ed:80:2e:5d:c8:2e:fa:72:69:80:16:2b:d4:3f:f4:71:d8:
         8a:be:49:a6:20:45:55:8d:05:96:bc:8e:33:7c:9f:61:12:a4:
         f7:e4:d6:39:5b:69:d9:0c:4c:73:c2:e6:75:6d:75:3c:cd:2f:
         50:f4:1d:7e:23:e0:9f:16:6b:e0:44:1d:33:7b:10:46:3b:2f:
         72:51:4d:9c:02:1e:e7:33:38:6a:7c:ed:ea:ae:d7:75:dd:07:
         9e:a5:0e:19:86:5f:95:06:d7:7c:c0:e1:67:11:fe:3c:db:5c:
         61:7c:3c:34:1e:f1:e3:96:7f:4a:c3:fd:1d:72:29:43:c5:c5:
         d4:c7:55:4f:41:3f:7c:ec:f1:f7:1f:a2:bb:01:bd:b0:f0:9b:
         20:62:c1:76:d5:f8:d0:ec:9f:67:92:12:da:a5:cf:d3:b4:3c:
         8a:b2:8d:9f:48:05:12:11:3c:e0:55:ce:35:fd:d7:0c:be:d0:
         f0:9d:18:92:cc:7c:b2:51:de:26:ba:b8:a7:ce:33:8d:71:44:
         db:3e:ba:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----