Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
File:                     jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json)
Hash identifier:          Q3CBPsKCeuF3t0GcWlqzy3bYqlI+DpDEejnBRrLygGY=
Subject key identifier:   94:2C:0A:F6:12:BB:6C:84:F1:39:C4:BC:91:7D:0D:46:86:A7:7D:83
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Certificate issuer:       /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial:       01936A7D689357C9D6B02573FFF15CD69590
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
Manifest number:          0C8A
Signing time:             Tue 26 Nov 2024 22:00:23 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:23 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:23 +0000
Files and hashes:         1: byjFy0r8r9DoGn3RKk33_9-Gd_I.roa (hash: wsDC//kQOtMsxYACKqbD7vIOHMPQUxF2UHGIQOYk+g4=)
                          2: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: xl1WHQFygGQyfXI4MJQRRw4Y2qZn4KieelZcxgJTHW4=)
                          3: mu_txoTzYK0VDon_ub594dUiTVM.roa (hash: wd4Cw+X07/VpV0g+fAVzuocidqyoQmxdO/CZ2egr+4k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:68:93:57:c9:d6:b0:25:73:ff:f1:5c:d6:95:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
        Validity
            Not Before: Nov 26 22:00:23 2024 GMT
            Not After : Nov 27 22:00:23 2024 GMT
        Subject: CN=942c0af612bb6c84f139c4bc917d0d4686a77d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b9:74:19:9f:ec:71:61:cc:16:5f:ca:08:86:
                    04:f9:95:f2:31:b5:87:0f:dc:c8:4c:56:ef:b6:66:
                    bf:2b:37:ca:1e:32:ff:69:26:f2:d1:ac:e1:32:e9:
                    0c:6b:b7:6e:cd:32:2b:37:cd:cf:71:76:af:f9:3a:
                    7e:83:fe:94:81:d6:d5:23:ef:18:14:66:c8:6f:e0:
                    a4:db:0f:a6:04:43:bd:be:b7:ae:70:24:c4:89:7c:
                    54:33:4b:aa:fb:86:1e:16:4e:61:b6:47:c0:1e:ca:
                    23:f2:3b:5b:07:f7:32:82:f3:b1:63:15:9d:de:d1:
                    bc:a5:b4:e9:a3:ff:3d:2f:73:f9:7c:22:1f:33:e2:
                    af:08:94:9e:78:64:23:ee:2e:9d:d8:2c:4c:da:ba:
                    90:07:71:af:94:b2:89:61:55:8c:70:d9:dd:37:65:
                    dc:ee:39:4f:b2:17:98:e0:c8:88:72:d6:62:e7:ce:
                    5a:8a:00:38:47:a6:73:e2:a8:3d:64:7f:9d:5c:c6:
                    e2:ab:d2:c7:a0:50:f3:22:90:bd:b7:ff:53:79:13:
                    71:27:d2:65:a4:da:ff:83:32:89:70:8c:53:65:0b:
                    18:bf:bc:19:5b:a4:72:ea:28:c5:7e:d5:47:2e:fb:
                    cf:a9:5c:3f:a7:cf:dd:fb:49:8d:d3:73:a6:05:4d:
                    7c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2C:0A:F6:12:BB:6C:84:F1:39:C4:BC:91:7D:0D:46:86:A7:7D:83
            X509v3 Authority Key Identifier:
                keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:21:e8:a6:a2:6d:9e:8d:26:1d:82:39:8e:80:74:96:02:da:
         a0:5f:12:cd:94:bb:aa:ce:54:8a:ba:17:c7:74:c5:77:64:6f:
         26:39:31:db:61:6d:3e:b9:cb:4a:02:ab:4c:0b:5c:e7:58:75:
         32:2d:22:42:d8:2c:a7:29:62:93:97:4b:4d:af:b3:52:65:b1:
         6e:b9:9d:e2:08:9c:49:87:a2:48:ef:82:32:bd:a4:d8:54:83:
         48:c5:eb:b8:99:e3:09:65:25:14:3c:fa:bc:b7:9b:68:9a:3e:
         20:e3:60:fa:5f:79:c3:31:6d:70:ea:14:5d:dc:f4:4b:a7:95:
         a1:13:a1:6a:c5:39:1f:65:67:fc:a4:b4:25:17:b4:0f:58:65:
         97:cc:0e:17:8a:49:ef:df:65:f0:16:a7:23:e6:fa:b3:19:c2:
         84:f7:4d:9a:7f:88:03:c0:12:3f:86:33:21:84:b3:69:85:ef:
         80:ed:e7:c3:52:7d:7f:2c:1b:53:8b:cb:c5:32:e8:70:2d:8e:
         75:53:f5:82:6e:fa:00:91:31:03:48:31:f6:e2:4f:ab:43:35:
         38:0a:9c:26:f0:8f:6d:f1:63:cc:da:6c:72:ca:75:7a:74:02:
         07:eb:68:f3:50:4f:fc:ae:3a:a6:5c:81:67:db:21:fc:f0:53:
         98:1c:29:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----