Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File:                     1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier:          ahtYa+QV1CDW+nIi2bOvzU/5Y/kh/AUjI8TbnRYvgdg=
Subject key identifier:   EA:BA:B4:1B:2A:7B:04:98:0B:78:A5:CB:D8:52:6B:FA:4D:CD:97:0A
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer:       /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial:       018FB6EBC2456E0BE25B69707ACFEC45F245
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number:          0972
Signing time:             Sun 26 May 2024 22:00:54 +0000
Manifest this update:     Sun 26 May 2024 22:00:54 +0000
Manifest next update:     Mon 27 May 2024 22:00:54 +0000
Files and hashes:         1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: Lt0ipaqb9Tf4QX+oEFipNriY0rsyW4ruZtXbWHIpncc=)
                          2: MOo_Xp_bK2aAdK5Wek5UjElrTFY.roa (hash: MXVe85r5JFdnbCFKavZD1XEy/Qlf9T5E2nxBfYuGKlI=)
                          3: zD6mW9ybAuJJLOo1VDLuqLqqZ2I.roa (hash: jsrTajcYiWS9v+IrS0azpIUIvvi2tyyM3RZH9wopo14=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 22:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b6:eb:c2:45:6e:0b:e2:5b:69:70:7a:cf:ec:45:f2:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
        Validity
            Not Before: May 26 22:00:54 2024 GMT
            Not After : May 27 22:00:54 2024 GMT
        Subject: CN=eabab41b2a7b04980b78a5cbd8526bfa4dcd970a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:64:e2:f9:a9:8f:d8:25:3c:f6:fa:8a:09:88:
                    d8:14:bc:c9:47:f6:1c:c8:b5:be:81:a7:1b:11:ff:
                    7f:84:07:01:e3:d9:76:85:af:50:07:3c:31:cb:c3:
                    7c:3a:ee:6d:d0:2c:c4:8e:78:bc:b5:fc:78:fc:b0:
                    13:4a:1e:33:74:ea:0b:c7:3a:a6:22:fb:ee:c5:09:
                    c5:d9:52:4f:ff:fd:99:12:02:de:47:26:e6:f4:e0:
                    b5:5a:b0:01:16:fb:4e:2d:bd:ec:36:1b:b1:51:62:
                    3d:12:5e:35:f2:66:f7:ab:f3:02:11:96:5a:2b:01:
                    97:21:d6:3c:79:ec:dc:2d:24:50:ef:ec:c2:48:83:
                    f3:80:0b:40:02:6e:ff:c7:29:2d:60:7a:b8:19:1b:
                    18:6f:8a:75:4b:7c:75:5f:34:05:b4:e5:7f:cc:86:
                    9c:09:11:c4:57:83:39:52:f0:36:e7:9d:19:d4:f7:
                    c9:db:e4:98:aa:2d:3e:31:39:0e:47:a1:a8:2f:91:
                    30:55:76:2e:e3:e8:33:48:b5:74:41:74:eb:96:9b:
                    6e:7b:f8:0e:3e:b9:1c:c6:1f:d7:20:e7:e2:84:e4:
                    99:82:d8:c9:80:25:38:36:9a:87:94:37:7e:cf:18:
                    cc:df:dd:16:40:b0:3a:73:96:d3:8d:bf:12:56:e9:
                    6f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BA:B4:1B:2A:7B:04:98:0B:78:A5:CB:D8:52:6B:FA:4D:CD:97:0A
            X509v3 Authority Key Identifier:
                keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:c5:9d:8f:39:b5:26:eb:52:38:77:6c:e6:2a:40:1b:21:b1:
         eb:11:55:00:e2:c1:33:b5:d3:fe:47:9f:8b:54:09:dc:f2:95:
         bc:f1:68:d9:dc:aa:5c:db:ab:f4:ce:05:e2:ae:19:6b:af:d9:
         c0:e1:01:60:16:0b:60:5f:ae:5e:32:95:38:a2:c8:0f:8f:ed:
         37:66:a7:5d:20:1d:54:33:70:12:42:7a:43:d6:ad:c4:d6:78:
         61:06:26:11:0a:01:47:bd:f6:31:03:5e:30:e1:17:8e:f0:31:
         93:3a:42:ac:5c:08:94:cc:d7:83:7a:c2:fa:48:ce:b4:9f:0c:
         07:af:f8:c0:65:c0:1b:f3:1d:4f:b5:03:60:64:f3:a8:9f:7c:
         95:70:b1:a6:39:e4:d4:ce:69:40:b7:cb:ed:30:7a:18:7e:d9:
         74:7a:ae:cc:84:9c:e7:4b:1c:8c:0b:93:9b:67:99:10:03:73:
         d2:52:cd:18:1f:49:ed:65:07:53:43:92:90:72:8f:3f:16:29:
         f7:2f:d8:65:c1:97:d4:bb:67:a1:49:6c:23:de:87:51:dc:70:
         5a:d8:1c:5b:fb:33:12:a0:f1:47:10:69:2f:c0:7b:2e:0e:06:
         68:cf:ce:42:48:5b:2e:a5:6d:90:41:3d:a0:e2:e3:e5:8d:c1:
         3c:c5:67:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----