Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
File:                     i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft (raw, json)
Hash identifier:          0kbS/na+g8a+d7xjOrk6hItm92qZQCL0TTi1p/OvpWg=
Subject key identifier:   23:8F:56:4D:6C:A0:64:77:DC:FB:F2:7A:17:B2:0E:16:2B:B3:CD:64
Authority key identifier: 8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
Certificate issuer:       /CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Certificate serial:       0193572DBA376F7705F312A83E0E6A171D6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 04:00:34 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:34 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:34 +0000
Files and hashes:         1: Fa-PsUVAo2LCYN6vvOHtJu-hRO8.roa (hash: 3PMn0wf5gDjVCAJoNNCoitD7qjf7aIRgLADbRD8hAB0=)
                          2: _UG76Zz_SvoSvzF0m3BhxDDOzCg.roa (hash: jQ/ossc1Zd8YPMpjJDRVtuEk5GqWJYWZlr7AslrreLY=)
                          3: i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl (hash: wunMi7f8Dwg2aR12lBBHg/hXCq1FcdL6NUNmQdFbq6s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:ba:37:6f:77:05:f3:12:a8:3e:0e:6a:17:1d:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
        Validity
            Not Before: Nov 23 04:00:34 2024 GMT
            Not After : Nov 24 04:00:34 2024 GMT
        Subject: CN=238f564d6ca06477dcfbf27a17b20e162bb3cd64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:53:83:04:0c:1a:8c:17:10:d4:84:08:ca:c7:
                    0a:05:52:47:cb:21:6d:71:26:82:a0:bf:f3:c1:2f:
                    84:0c:fb:10:8f:87:42:f2:50:0a:9b:e0:45:a3:7b:
                    4d:06:e5:ae:b2:0c:ad:26:2f:af:ef:ee:05:e9:d5:
                    25:6a:d2:7b:b4:c9:d8:87:dc:96:3c:2a:96:76:06:
                    9b:ab:2a:46:f2:ba:e2:4a:f5:98:97:01:8d:7b:7d:
                    1e:b3:63:a8:b8:6a:0f:13:db:38:7d:ee:fc:a8:e1:
                    40:29:a8:a4:d5:64:3a:71:0b:fc:c7:a0:6c:7a:90:
                    e8:32:cc:58:de:ae:1d:83:e5:f6:41:67:16:4c:63:
                    36:87:92:4f:3e:3e:2e:ab:bf:d5:76:99:d1:84:97:
                    11:1f:32:60:a2:49:d4:84:a8:2c:a6:d7:fd:e7:96:
                    5e:c1:7f:45:93:54:55:06:04:4f:83:4e:86:c6:42:
                    83:3e:0c:9f:5c:4f:74:4b:d5:0b:96:14:2c:cc:67:
                    8b:5e:6f:a1:f5:d4:11:6b:1d:00:0d:6b:ec:48:51:
                    de:8e:fe:47:c4:61:c1:08:94:42:92:70:3e:c0:12:
                    dd:48:63:7a:99:be:33:73:09:e2:77:aa:55:0d:d4:
                    ec:ce:7b:4e:5c:31:c9:48:10:67:a6:f2:ca:6d:b1:
                    c6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8F:56:4D:6C:A0:64:77:DC:FB:F2:7A:17:B2:0E:16:2B:B3:CD:64
            X509v3 Authority Key Identifier:
                keyid:8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:92:9b:2e:56:b1:4e:4f:bd:47:0f:85:78:97:f0:ea:5a:cb:
         17:50:bf:49:3e:be:5d:d4:27:e3:b7:28:79:da:9d:00:53:e2:
         17:33:15:6b:5d:83:48:ef:68:6b:57:31:32:0f:fb:0c:01:d1:
         c8:43:3a:6c:41:33:f2:a6:3f:62:cf:a6:e0:5c:7d:35:95:fe:
         1a:2b:7a:1b:b8:10:39:84:59:74:ae:c0:90:03:a2:84:68:ba:
         dc:58:23:79:6d:8f:6d:92:f0:22:59:3b:14:74:c2:37:49:a1:
         f2:91:12:41:ec:43:54:43:f9:ab:d8:72:98:96:f5:18:c3:c3:
         e0:35:79:24:ea:84:ef:22:89:37:dc:9b:f3:d8:37:26:8c:d9:
         0c:52:be:ff:5e:b9:bb:82:f8:db:63:de:34:d6:d3:43:40:80:
         6c:f7:68:98:57:45:8d:e6:9e:44:3e:e6:f7:73:9f:9d:20:33:
         c9:6f:a7:d7:d3:ff:c7:fd:24:9e:77:29:aa:8e:e3:ad:f6:b4:
         41:96:47:df:0d:b9:d6:8e:58:e2:83:90:85:e3:ae:6b:cd:76:
         27:e0:99:ba:74:7c:83:ae:e9:a8:51:6c:05:9b:92:39:e5:b2:
         d2:f8:17:5e:a8:ac:72:2e:a1:0c:1a:05:af:ab:7c:4a:bf:68:
         53:04:74:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----