Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
File:                     OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft (raw, json)
Hash identifier:          D/hcPDL6hIIe26orEhxK7qWKpTdkUIRPd7XuyQInlWE=
Subject key identifier:   FF:94:72:0B:4E:11:DE:42:3C:92:EB:4B:DB:60:E5:C1:73:1F:6D:2F
Authority key identifier: 38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43
Certificate issuer:       /CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
Certificate serial:       0193549C82141672DC07FD427E9205D38E4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
Manifest number:          1372
Signing time:             Fri 22 Nov 2024 16:02:43 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:43 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:43 +0000
Files and hashes:         1: K5MPNM_REsrL1Gzd6Ea-dQtNmpk.roa (hash: d8UKSCVvhO3P3PhNxkyDjTr1suZiirslIHJKZEMNrgk=)
                          2: LlwRjf77hNr3O3DXi61qwgGDLfQ.roa (hash: m2PzaDWZrdO4oNu4mPH/U2kv3SSh+OsP0MHKqEfAYMw=)
                          3: OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl (hash: xDxNTUQczBSnksOR6fN/swIUCIQAceC/XcsyqNLFfmE=)
                          4: VS-l_XfB7EQvo8I3V6K6fXm-eIU.roa (hash: kU2rVZ7mx12Ux/mRHTyd5gtKLL33qjysoKbAjkbVmT0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:82:14:16:72:dc:07:fd:42:7e:92:05:d3:8e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
        Validity
            Not Before: Nov 22 16:02:43 2024 GMT
            Not After : Nov 23 16:02:43 2024 GMT
        Subject: CN=ff94720b4e11de423c92eb4bdb60e5c1731f6d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:18:0e:52:df:d0:26:c8:bd:f8:a6:50:61:09:
                    fc:7d:9a:43:90:4b:dd:ac:3b:cb:89:80:3d:38:95:
                    04:6f:87:8d:df:ca:c6:25:f1:0f:07:36:99:c3:0d:
                    92:41:62:e3:1a:c4:bd:2f:0f:07:d9:e2:14:28:4e:
                    c8:65:e4:80:04:ec:58:8a:50:55:00:2c:83:06:c4:
                    3d:87:22:a9:da:95:b3:fd:47:c0:4b:62:4e:da:f2:
                    b9:9a:bf:9f:72:3b:1c:9a:f8:f0:c5:62:64:cf:12:
                    1c:cd:55:a5:b4:e2:3d:1e:0a:00:eb:df:08:df:2e:
                    52:0e:8d:39:a0:1d:14:36:20:77:cb:b4:ba:11:2b:
                    3d:dc:15:a5:c5:22:12:94:bb:91:99:6e:a8:2f:aa:
                    eb:e9:eb:18:82:97:dc:7c:26:7e:ec:c4:2e:8b:a4:
                    cb:5e:42:2e:c6:cd:54:a7:d1:8d:e3:d3:ec:ec:b5:
                    93:e0:f9:0c:a4:48:ed:bf:f7:59:b0:84:61:58:45:
                    25:08:07:34:ca:bc:77:99:4a:d9:05:7b:c8:93:0e:
                    78:c0:40:02:95:42:4e:7e:be:44:74:3a:47:ef:4a:
                    ad:24:2a:b6:73:f9:9e:a0:c6:f5:ae:1b:7b:b5:40:
                    b1:6e:db:29:af:39:a8:96:25:cc:ec:9e:5c:3b:98:
                    7e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:94:72:0B:4E:11:DE:42:3C:92:EB:4B:DB:60:E5:C1:73:1F:6D:2F
            X509v3 Authority Key Identifier:
                keyid:38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:af:53:bb:52:5b:fc:9c:7f:75:c1:9e:8b:5d:0d:9d:a4:2a:
         6c:d2:52:66:7d:4e:58:c3:12:07:e2:9b:6c:5d:9d:8e:db:87:
         91:3e:7f:58:b7:4f:0c:cd:7b:08:d6:ce:7e:5d:ca:4e:96:c1:
         42:e4:c6:9d:da:39:0e:e3:6c:56:1a:8b:f5:ac:a2:78:1f:a1:
         dc:6d:2e:24:f7:3f:0f:54:de:69:92:01:a6:8b:20:fd:2b:d1:
         a0:62:3e:d1:d7:1b:70:0d:5e:cb:ea:ac:84:96:b4:1a:d4:b6:
         67:42:af:2e:55:bb:f2:62:3f:2c:64:f8:75:cf:b1:78:2c:f7:
         e8:82:82:b1:43:7c:a9:4c:20:eb:94:18:00:53:05:49:ba:06:
         f3:08:16:db:96:18:97:56:cc:56:cf:80:41:51:4d:e5:5b:df:
         4d:0c:c7:79:08:6b:4c:b3:80:53:d7:8e:2c:f2:b9:79:18:43:
         02:92:28:7d:50:96:a9:98:5f:07:f6:88:30:91:e5:85:ee:fd:
         f3:71:95:b1:ea:fc:a4:40:4b:e2:68:10:15:ac:55:03:cf:a9:
         96:ce:52:a3:d2:d2:1a:d5:07:1b:98:f3:04:3b:28:de:1b:9f:
         f4:25:2d:60:ba:0b:1a:8a:a4:95:d9:e0:bf:c7:1b:95:b9:a3:
         c8:18:16:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----