Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.mft
File:                     bgRq62oBykikl1DYgbefenjVEIk.mft (raw, json)
Hash identifier:          Wc2jlPZlZNHaYAsNlo0nTrWduKzWJIQgzFB6BQe8efI=
Subject key identifier:   53:E1:D5:3C:9A:A5:E1:63:D1:B3:3F:A9:DE:F7:9D:F2:4D:3A:D9:F7
Authority key identifier: 6E:04:6A:EB:6A:01:CA:48:A4:97:50:D8:81:B7:9F:7A:78:D5:10:89
Certificate issuer:       /CN=6e046aeb6a01ca48a49750d881b79f7a78d51089
Certificate serial:       0193549C5BC3B60D0B4A1ED321AD605FE7D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bgRq62oBykikl1DYgbefenjVEIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.mft
Manifest number:          1374
Signing time:             Fri 22 Nov 2024 16:02:33 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:33 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:33 +0000
Files and hashes:         1: P2udyw1TmB2zCZHc3eNi4smQM7k.roa (hash: 5jKAbWDGxBtTEUuIVrzx8KljOhp/dwp4LiAXWy/6Qb4=)
                          2: bgRq62oBykikl1DYgbefenjVEIk.crl (hash: WYYX10OCNYNBHPWM35f9wmPpdMrDZrS2nPJuOThyp2Y=)
                          3: mcdIdvmUU5nV-vcx4OPw7JJ4Q9c.roa (hash: CsRbXXTqQoyK2Jjgv8/RJ7qUhQkAhyRC+3n7nY7ercg=)
                          4: zHIjUOUlLwVKCWcUnjdPw6fYKcs.roa (hash: l/K0aRwblL6EhPlKXVV/sxOdByhdqzWrLirpIBYjqhw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bgRq62oBykikl1DYgbefenjVEIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:5b:c3:b6:0d:0b:4a:1e:d3:21:ad:60:5f:e7:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e046aeb6a01ca48a49750d881b79f7a78d51089
        Validity
            Not Before: Nov 22 16:02:33 2024 GMT
            Not After : Nov 23 16:02:33 2024 GMT
        Subject: CN=53e1d53c9aa5e163d1b33fa9def79df24d3ad9f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fc:a7:fb:05:7d:6c:56:ba:08:28:fb:7d:63:
                    20:f1:b4:f4:a6:f2:19:72:57:c7:c0:59:d9:54:99:
                    bd:7b:02:ff:a4:ed:55:5f:f7:36:31:32:2c:b6:82:
                    4f:0e:89:eb:ba:93:dd:ac:8e:de:6d:63:0a:68:f9:
                    2f:f2:3e:dd:13:0f:68:5b:14:c9:10:bb:0e:ed:fc:
                    38:53:0a:d1:7e:eb:c4:17:82:ce:6e:37:38:01:32:
                    5c:44:33:21:c9:f2:6a:82:f8:d1:ab:cf:f2:fa:9e:
                    c3:27:f0:2e:fa:a6:0d:7b:cf:9c:ab:8b:ec:00:3b:
                    e0:c3:0b:32:8b:02:07:4c:22:cc:39:f4:5c:dc:8f:
                    da:41:b7:46:61:de:e1:84:ad:e2:b4:13:fc:22:d2:
                    58:65:f2:b1:76:d5:43:ad:8c:a9:be:8d:d7:21:60:
                    4b:e5:f4:8c:a9:a4:4d:b4:33:c8:ee:6e:95:f3:69:
                    82:81:1d:a3:53:f9:0b:05:69:00:e7:33:9a:19:d3:
                    0a:f0:a2:71:97:02:83:d2:96:50:4d:cf:e5:de:4b:
                    ab:57:1d:69:e7:23:cf:46:5b:57:75:e2:44:f1:c1:
                    45:d8:cb:f8:0a:7d:b1:4c:ff:3f:43:68:04:92:c3:
                    a9:cd:97:7e:29:e0:34:36:3f:a1:e4:5a:dd:95:9a:
                    a8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E1:D5:3C:9A:A5:E1:63:D1:B3:3F:A9:DE:F7:9D:F2:4D:3A:D9:F7
            X509v3 Authority Key Identifier:
                keyid:6E:04:6A:EB:6A:01:CA:48:A4:97:50:D8:81:B7:9F:7A:78:D5:10:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgRq62oBykikl1DYgbefenjVEIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:c7:3e:7e:16:17:50:19:01:34:20:43:af:b8:fb:b4:42:41:
         3b:56:f9:8d:d5:e7:5c:27:9b:a0:56:cd:40:52:59:d7:da:1a:
         5d:22:d4:e6:56:ae:ff:e7:cb:c1:f3:44:37:a2:30:d6:a5:fa:
         13:0a:68:2b:5f:a8:7b:aa:14:fc:1c:69:8e:cd:ef:ca:8b:c3:
         d5:b7:8e:68:5e:15:bc:de:c7:ae:af:bc:cf:55:f2:16:a8:e0:
         b6:e1:70:1d:a0:5a:e9:b7:9c:19:77:fb:7e:24:72:4a:84:69:
         f7:c4:fc:ce:3c:9b:4e:6f:b3:a8:8b:17:14:2a:da:9c:43:a4:
         91:ab:cb:00:76:92:ad:51:fa:ef:9c:2e:e2:4a:1a:89:f6:12:
         55:36:4b:77:65:08:eb:7a:c0:cf:e4:73:81:94:4d:7d:21:68:
         bf:d3:bf:03:21:9c:df:51:05:cb:4c:43:31:1f:5e:35:79:ac:
         06:4a:b5:16:b7:e0:df:04:3c:63:2b:7a:9b:3d:59:1e:66:65:
         51:03:31:c5:cb:7f:c5:33:f3:a5:7b:26:4a:c6:42:05:ea:55:
         75:da:23:36:55:ab:85:87:50:6b:48:1e:d6:fd:a2:1a:47:93:
         a4:76:f5:59:c2:ac:24:31:d0:17:11:ee:63:ba:76:d4:74:75:
         19:8c:0f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----