Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File:                     uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier:          AE8VE6eqbo1bJJRDsNtobRR4DIZMl53QNeXCg+HdoUo=
Subject key identifier:   BF:D0:98:32:83:63:30:6B:94:CE:3A:19:56:69:15:E4:D8:30:96:CA
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer:       /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial:       01935953541A5570AF11F54E91E07AC4AC8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number:          01B8
Signing time:             Sat 23 Nov 2024 14:00:53 +0000
Manifest this update:     Sat 23 Nov 2024 14:00:53 +0000
Manifest next update:     Sun 24 Nov 2024 14:00:53 +0000
Files and hashes:         1: rt9Fd4vhh2yB_PZGvPSik_mr1_U.roa (hash: vHvuEU/6KT1VDEfuN5RpMTWp02AiDP8fmQeE21wieSg=)
                          2: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: vjmr0HFynSC4dcuuEHHwanfONWX3d9ujyCcCA+72BdU=)
                          3: wWgm0ytoOaL1Ee7wWaFN5Lv5W8A.roa (hash: YG9tkvoK4LnKk1n1uumcCyB2Yy7zFVpLUXAA3CGtZGE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:53:54:1a:55:70:af:11:f5:4e:91:e0:7a:c4:ac:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
        Validity
            Not Before: Nov 23 14:00:53 2024 GMT
            Not After : Nov 24 14:00:53 2024 GMT
        Subject: CN=bfd098328363306b94ce3a19566915e4d83096ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7e:ac:99:ed:cb:a3:a3:76:70:3c:bf:27:7e:
                    2b:97:02:e6:aa:69:5b:f6:55:81:6c:cb:bf:7d:55:
                    be:d2:70:00:a6:24:ef:36:b9:a6:8b:b2:66:e6:e9:
                    fe:e1:d9:a8:81:64:1b:2b:93:eb:84:47:d0:60:1c:
                    0c:d4:23:98:07:2f:ad:58:d2:dd:00:01:7f:c0:11:
                    e0:bd:4a:71:7a:af:8b:63:6d:d5:3c:80:21:0f:90:
                    a0:a3:09:ed:09:ca:af:39:ba:2e:81:f0:09:e6:e3:
                    f2:15:0c:8b:bc:2c:a9:23:36:a1:ed:31:f2:e4:94:
                    4f:2f:3d:ca:88:1e:d3:0d:65:ae:5a:cd:60:e9:48:
                    aa:52:33:a7:dc:30:c9:c7:a3:22:e0:87:e7:f6:9c:
                    c6:54:94:c3:15:dd:fa:d7:6f:4e:ba:84:76:62:de:
                    27:56:9e:65:b6:b1:67:2e:08:fa:1c:c0:e4:47:ef:
                    bc:a7:41:02:f6:58:ef:78:43:fc:b3:a1:32:fb:7e:
                    40:0c:cf:71:c7:70:81:cc:ab:10:53:9f:d3:e0:6d:
                    9b:3b:44:f4:5c:9f:9d:7f:fa:cc:6e:81:80:3f:e0:
                    5d:8b:e9:1d:a2:1f:93:1c:4d:7e:64:a8:de:81:ba:
                    23:bc:a7:d6:4f:08:25:70:85:48:a7:0b:a7:13:ca:
                    bc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D0:98:32:83:63:30:6B:94:CE:3A:19:56:69:15:E4:D8:30:96:CA
            X509v3 Authority Key Identifier:
                keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:4d:4b:09:d3:09:98:71:95:ce:b1:cd:09:aa:b6:52:db:01:
         8c:94:90:a8:9d:32:86:e4:1a:af:2a:b0:3e:a0:07:c2:94:b9:
         31:a8:66:ae:d8:2b:e8:3e:9d:66:a0:2b:fd:ae:b6:99:47:28:
         ed:bc:df:6e:4c:f9:fa:d5:8c:cc:ad:61:d9:13:72:c0:97:d6:
         30:1e:23:e4:93:c7:89:cf:6c:b5:17:d7:3e:cf:17:17:a5:61:
         b0:e5:c6:bb:4f:92:90:4a:32:2b:ae:8e:36:4d:81:7e:8a:e2:
         80:5f:1d:fb:a4:ad:c0:9a:1f:56:2e:c3:8f:0e:05:50:2a:aa:
         67:f6:f5:b5:91:f2:07:14:72:84:d6:15:d1:ab:70:fa:2f:24:
         f2:91:ba:7c:e5:46:60:78:70:56:db:25:1c:32:16:2e:ff:0f:
         e1:7d:71:0b:e2:3c:35:7a:5e:1c:c8:d4:ab:de:4b:3f:ae:8d:
         2f:fc:ea:90:bb:6a:f3:22:21:cc:5b:43:d4:09:fa:92:d5:f4:
         2a:7f:c4:a8:4f:d9:2b:c1:af:67:65:3a:92:8d:5b:5c:56:ea:
         51:6e:c1:6f:5e:40:13:dd:9c:45:93:f6:5c:5a:69:a4:c8:ea:
         11:c7:52:8a:a3:58:89:23:f8:22:77:2a:f0:0b:34:94:8c:9b:
         5d:c6:77:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----