Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File:                     clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier:          PoRF9hY3KURg4NlmvDobbXg4gif7+RTloe0jsZpKkpQ=
Subject key identifier:   F6:7D:21:90:43:27:A4:99:59:6C:94:64:0A:C2:90:54:C5:46:7D:3B
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer:       /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial:       019355AD82B0B926D9037962ECFB12F68A67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number:          1376
Signing time:             Fri 22 Nov 2024 21:00:54 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:54 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:54 +0000
Files and hashes:         1: 2F-LML9rBnBG08N1tLGP39G8ps4.roa (hash: d7AOReljssuypAE0DmU/LuL6jKnIf1g5hD50Cp5jJ7I=)
                          2: 9NXQVmlYsjW6BIiromR1Jkv7ZnY.roa (hash: RO3eSs9Yux2tRIek5DZwacPp1MID67DwVS0fxrd2wWE=)
                          3: XcsXGhQHPYypQyl2p-_Augn5OO8.roa (hash: lO8jH4UX/cSp8bgZ2cOrMzm+USmhAfgf2YJxKdvlXLU=)
                          4: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: tF1my2/Fl/sSabQBS0xl6d39xI/nXUv08nirBwFFQt4=)
                          5: sRwp4wkcyat-VD_6iWN_6BJFP9s.roa (hash: fiitcjz2N5DzPFb3Kem3tlILOCRrIXpcf4WMt3VTx2c=)
                          6: uBlvMciEOhOoE5GWBhg91Pne6p0.roa (hash: eua3wIKb+3Ze0KlMQ/Xy+fv/xWgWGQWNEJ/43dbevkY=)
                          7: vGDRaD0M2zQ0S_19EgotkQ-55Gg.roa (hash: CVuN3R6b2jI+N5xnnTuZWQEFrPWF5Kx5q+UbyK3ICzc=)
                          8: xS09c8meBokU8ZKN0XhODBRgaWI.roa (hash: DPHcqqc0ZyQ7tYPGBLBwkSdQYDh8/6Exs+WG64kYt2Y=)
                          9: z4MLRw_lxW4Qhi3UA0OSJgFGYzI.roa (hash: 1C2Gk+P6I8/iLX/MZ7xuhkpyifcZCLzbxFT8yZBdi70=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:82:b0:b9:26:d9:03:79:62:ec:fb:12:f6:8a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
        Validity
            Not Before: Nov 22 21:00:54 2024 GMT
            Not After : Nov 23 21:00:54 2024 GMT
        Subject: CN=f67d21904327a499596c94640ac29054c5467d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:41:8d:66:9e:eb:37:46:b6:d2:65:c8:21:a9:
                    10:70:1f:73:39:b3:65:7c:ff:f6:9e:9b:fd:95:3f:
                    1b:24:a9:f7:10:26:57:f1:6e:57:5f:f9:8f:b0:e1:
                    c4:f2:d8:9c:49:11:f1:e6:10:fd:37:91:be:ea:2d:
                    64:13:c8:d0:a5:b5:ff:2f:2b:e9:a2:d5:19:70:12:
                    2b:5f:b7:1a:75:2a:48:40:b3:39:06:95:d5:a6:c1:
                    9e:54:05:d1:2c:46:b1:c6:33:e4:4e:d0:12:2b:f2:
                    12:18:09:f2:6e:8a:1a:f5:53:09:ed:61:97:5c:d5:
                    d7:ff:37:62:f3:d6:14:07:0b:a5:04:1c:ea:02:ea:
                    7f:d3:96:23:e1:a3:d0:83:83:1c:43:3d:4f:c4:61:
                    38:c7:c9:3c:13:44:55:d4:1b:8d:8c:56:50:a2:99:
                    c5:c1:c8:5e:6b:94:66:10:33:70:35:05:9f:5b:5d:
                    2f:55:fb:36:3d:31:b3:e5:fc:38:cb:e4:66:44:46:
                    56:a7:f7:68:9c:2f:66:26:84:01:76:3a:a5:30:c4:
                    d2:af:ec:2f:0b:bd:c7:e5:45:39:8d:5d:1a:b7:2c:
                    b0:ed:e5:ce:da:2b:ee:09:0c:91:10:c3:6e:21:f1:
                    89:5e:71:57:0a:19:2f:6a:ee:99:ff:6c:5e:48:e2:
                    cc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7D:21:90:43:27:A4:99:59:6C:94:64:0A:C2:90:54:C5:46:7D:3B
            X509v3 Authority Key Identifier:
                keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:68:23:86:f8:02:65:d3:c3:76:43:68:16:95:a2:98:68:e8:
         b9:8b:2d:03:0b:2a:fa:c4:4f:7a:7b:54:c9:15:b3:af:7b:74:
         c2:1e:4b:68:3b:09:52:ac:dd:ae:63:87:a5:fb:73:30:9f:91:
         83:1b:a2:bd:98:3a:b4:e5:b8:a5:52:37:07:49:7c:07:76:f6:
         ea:e4:92:ce:97:ce:f4:84:a5:2c:6c:38:df:eb:86:69:9d:3c:
         05:47:87:8d:4b:f8:02:0c:f8:87:29:87:71:f4:87:a3:46:8b:
         88:f8:af:5f:54:49:39:93:2a:92:04:32:db:9c:0d:65:ea:a7:
         a0:e7:65:f3:9c:bf:3c:48:7d:9e:84:13:81:b5:6b:56:34:21:
         6e:72:f1:c7:b6:07:d6:44:f9:2f:91:ea:81:4f:96:e4:da:19:
         ed:18:70:ab:d3:0f:b8:15:72:71:60:4e:2d:88:cb:cd:0b:c9:
         8d:d0:1f:8b:22:a0:c0:ae:1e:37:39:cc:ee:dd:9d:00:34:0c:
         75:40:5c:3d:e5:9b:10:f3:21:30:bf:8d:cf:03:a1:f1:0f:3a:
         24:63:9b:74:8e:15:09:c9:e1:e3:e5:c4:4b:b1:2c:57:eb:30:
         ca:5f:c6:f7:c2:4e:d3:b2:54:32:ac:9b:2b:fd:ca:1e:db:c3:
         55:b9:f1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----