Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
File:                     i9S8vzXbf-LvZjUipaOjl5pPH_g.mft (raw, json)
Hash identifier:          f3RkhuUkVWPMv8AoTOfjOlZx/Q8rHz429WuzYc4MBms=
Subject key identifier:   8C:1C:B5:FE:91:8C:9B:A7:52:B8:07:F3:E0:38:72:2B:0A:89:06:A1
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Certificate issuer:       /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial:       01936A7DB63C0E5F5A7FD1B61D4C4D1B692B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
Manifest number:          1147
Signing time:             Tue 26 Nov 2024 22:00:43 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:43 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:43 +0000
Files and hashes:         1: i9S8vzXbf-LvZjUipaOjl5pPH_g.crl (hash: stoZHbvGm9UfT9dg9fZlrOP9/er4FPmMFCBF1gZ1p4w=)
                          2: wiNGVDDIv5ZHpLpyXyovMGfFU3A.roa (hash: ZKLu6UiMMmyZXer45QHDVSJWJYLolaDxwNV7YeOcoNc=)
                          3: xztdvHZdEwmJOpL7Zwdew4htxe8.roa (hash: ueSQpVHIPNpaqo1C9GS5kjreXxSFOetnCH2ivICAdwM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:b6:3c:0e:5f:5a:7f:d1:b6:1d:4c:4d:1b:69:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
        Validity
            Not Before: Nov 26 22:00:43 2024 GMT
            Not After : Nov 27 22:00:43 2024 GMT
        Subject: CN=8c1cb5fe918c9ba752b807f3e038722b0a8906a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:32:5f:1d:d5:08:dd:f5:b7:3f:76:fe:7f:8b:
                    3e:64:f4:b6:61:2c:f5:33:ac:b5:71:b7:4e:86:9e:
                    5e:5e:19:97:9b:94:30:40:a3:16:07:63:3f:34:e1:
                    7f:13:7b:66:d3:8f:d4:72:52:ba:45:65:7f:26:d5:
                    b2:59:35:d2:91:ab:79:90:62:20:4e:0c:08:a6:9e:
                    81:03:b2:5e:54:af:29:f4:ad:b3:55:47:c5:c5:d9:
                    22:41:ed:8e:80:2b:0b:bf:08:50:9a:bb:6c:09:ba:
                    86:61:62:cc:97:32:ce:37:04:89:fb:f7:3c:ce:77:
                    36:97:34:da:4c:f9:07:07:6f:16:5c:3d:51:39:68:
                    01:65:21:c8:ad:67:93:83:ac:bd:84:a4:05:22:2f:
                    15:f6:28:bb:8f:89:0c:91:d9:ad:1c:0a:7d:79:00:
                    3d:db:8a:18:71:6d:64:aa:9c:0b:64:87:38:f5:19:
                    51:95:f6:60:2e:c2:11:59:a0:be:ee:9d:30:06:f4:
                    2a:0b:b5:db:f2:84:7f:7f:11:20:5b:5c:c6:37:0d:
                    93:7b:76:aa:2e:20:21:3e:0c:1b:29:18:26:5c:4a:
                    29:27:27:91:35:7a:42:97:c5:70:91:db:a1:92:1e:
                    66:96:f5:d3:dc:4a:ca:4d:2c:49:84:c8:03:ef:86:
                    00:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1C:B5:FE:91:8C:9B:A7:52:B8:07:F3:E0:38:72:2B:0A:89:06:A1
            X509v3 Authority Key Identifier:
                keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:1a:c6:10:ed:c8:50:cc:43:8f:be:30:58:94:36:6c:dd:34:
         8a:1b:52:56:1f:91:40:67:91:86:8c:1d:1d:92:c9:10:72:68:
         e5:a5:03:06:04:91:63:97:26:71:cc:d4:d2:66:ba:4d:41:0c:
         64:a8:df:70:84:c2:b4:e8:e0:e3:2d:6f:ab:5f:74:12:71:83:
         00:92:2b:56:93:4c:5e:0e:f8:97:05:e5:8d:ec:72:ff:43:11:
         cd:42:cc:67:78:45:99:2c:e4:bb:25:bd:8c:2e:bd:d3:1c:0e:
         43:c2:61:ea:a3:1e:a2:e5:90:b2:29:8e:ce:91:97:f7:56:dd:
         94:69:11:02:3e:e4:b9:bc:04:1b:62:81:81:da:90:51:0b:07:
         38:a7:e5:97:cb:cc:e2:fa:2a:e0:06:73:a2:db:10:9e:f3:19:
         68:96:6f:16:a3:2f:4f:90:e2:d3:5e:25:7b:55:6f:b2:e3:12:
         57:14:aa:15:05:ec:61:fa:d5:fe:46:88:e1:dd:be:5e:11:56:
         63:6d:d8:77:45:bc:61:69:39:6d:c1:86:aa:68:37:9e:a0:a4:
         6c:2c:01:8d:20:9f:df:ae:0a:51:52:33:68:3f:0e:a8:28:c3:
         a9:c6:59:f8:c6:55:ba:f9:20:9d:23:92:8d:7d:02:8d:e0:11:
         a7:8d:79:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----