Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
File:                     jZknGRkaiU0GjbqNChAG6f6tqmg.mft (raw, json)
Hash identifier:          cDyyJFinHDCMeOTJ7fbb3vXUw/H84k6fYZy3305OZZE=
Subject key identifier:   43:D9:30:D3:1D:E4:6B:D5:73:96:4D:EE:90:3A:2D:21:F6:0E:BE:BE
Authority key identifier: 8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
Certificate issuer:       /CN=8d992719191a894d068dba8d0a1006e9feadaa68
Certificate serial:       01936933F9914E97DF81BDC3226E45670A9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
Manifest number:          052B
Signing time:             Tue 26 Nov 2024 16:00:33 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:33 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:33 +0000
Files and hashes:         1: 0_Gu-CBTX3b09sLF_GTq520cJfI.roa (hash: dJs4E2o5e31rpvOC5ZRr5e+YDb4scutcb1yIK2v0TBk=)
                          2: EW_pzLNmdlcvQclT5EnSEWBlu5Y.roa (hash: EaDN8lpzr08i5oaTevLlQ8XPZI7h2z2VziUqjC50xOE=)
                          3: OhxF9-W5gVNwLH45-i_R6NlQvPQ.roa (hash: K9XchYXbqjxUXLP7NMZO3Q4ZusenFSsbttJ4B7LGtoM=)
                          4: jZknGRkaiU0GjbqNChAG6f6tqmg.crl (hash: O/JGu/kd/2Xw7Mc5pksXJkZL3NmQ19B2JOtgoXcmoxw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 16:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:33:f9:91:4e:97:df:81:bd:c3:22:6e:45:67:0a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d992719191a894d068dba8d0a1006e9feadaa68
        Validity
            Not Before: Nov 26 16:00:33 2024 GMT
            Not After : Nov 27 16:00:33 2024 GMT
        Subject: CN=43d930d31de46bd573964dee903a2d21f60ebebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6c:c1:eb:f8:8a:82:30:46:55:86:ab:5e:b5:
                    10:05:5a:09:6f:a3:b3:96:12:91:08:a4:51:17:83:
                    88:eb:bc:9b:cd:3e:db:f7:6f:c1:b8:b1:fa:3e:dd:
                    73:9e:26:d3:e2:60:df:2c:06:43:85:b5:7d:de:13:
                    50:17:7a:71:5c:ab:e7:8c:1b:f9:24:20:bd:f7:52:
                    6d:46:0e:e6:ba:d8:ed:f6:fb:7c:eb:26:34:29:59:
                    2c:bb:e2:e1:62:e9:8c:43:83:97:55:35:e3:08:1d:
                    81:d8:e8:39:9c:78:29:55:9a:72:be:70:f9:c0:6f:
                    72:98:31:0e:67:19:55:b4:e4:13:ba:c7:5b:7c:74:
                    20:4c:0b:fa:94:c1:4c:d7:28:9d:9a:ea:19:a2:ed:
                    6f:0b:75:0b:22:96:eb:01:8b:36:49:d0:d5:0d:61:
                    11:5b:91:80:26:f3:3b:2b:34:3e:fb:93:c0:67:85:
                    c4:07:a4:3a:de:31:82:0d:f2:e8:e0:d7:92:8e:b4:
                    06:46:71:53:e0:61:3d:5d:7b:f4:8d:7b:9c:47:f3:
                    ba:1c:76:71:ee:13:10:3b:fa:a9:13:74:50:6a:33:
                    df:36:49:d0:c4:38:57:f3:32:08:0e:3c:1f:4b:1f:
                    09:15:3f:33:c5:3d:91:ce:4f:4f:8e:5e:69:e7:28:
                    73:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D9:30:D3:1D:E4:6B:D5:73:96:4D:EE:90:3A:2D:21:F6:0E:BE:BE
            X509v3 Authority Key Identifier:
                keyid:8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:ec:50:b1:6b:ec:37:9e:c2:89:da:1b:14:d7:38:a7:f5:47:
         56:c4:33:39:ed:9c:7d:e9:70:6f:68:1d:49:36:d0:69:0a:e6:
         5f:8e:9b:77:4c:e3:d3:0b:95:cf:b6:61:01:34:ba:aa:21:59:
         a0:50:ca:37:c4:7c:db:3c:6a:75:cf:0d:f6:27:4b:0e:ad:44:
         7c:21:f1:10:a0:23:fa:7b:d2:c7:c0:24:ee:ab:80:99:46:ea:
         2a:08:f9:82:0c:b9:7e:f6:32:5c:1f:43:da:77:8e:43:c4:66:
         ff:c3:47:43:0f:5e:7f:02:e5:3f:08:3e:cb:05:c5:1f:bb:21:
         79:9b:95:32:f0:55:a4:34:d7:8b:e9:56:82:9d:86:a2:eb:90:
         b3:e5:c2:6d:58:1f:d5:a7:d0:88:ff:e6:01:03:82:88:14:6a:
         9b:d1:bf:1d:f9:5e:a2:ef:61:5e:a3:92:29:d3:eb:af:05:5a:
         6f:77:e4:76:51:fb:65:98:e9:b3:9d:53:4e:df:35:81:34:f4:
         04:df:69:e4:82:37:35:0a:c4:46:35:cf:cb:c3:47:49:1a:e9:
         c2:0b:ab:c2:11:ca:79:d1:ec:a8:e9:d1:4e:62:b4:18:6f:5e:
         4d:d6:e7:9a:ee:38:9d:05:a4:3a:21:a5:6a:95:51:15:17:98:
         65:6b:ff:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----