Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
File:                     FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft (raw, json)
Hash identifier:          BhyjruYOKik/KNsT/7ORCkpQCILwj/k7DYeRFrbYRUc=
Subject key identifier:   38:96:0A:4A:CE:1E:A9:2F:A0:DF:38:14:5C:42:2F:9D:42:5B:F0:6F
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Certificate issuer:       /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial:       01935508873F851CF11E1D9A0F04BDE53FE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
Manifest number:          1377
Signing time:             Fri 22 Nov 2024 18:00:42 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:42 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:42 +0000
Files and hashes:         1: 8LR7E753kWKwrVyCsTuWcl7GCQo.roa (hash: xv7Kn/nHHoBfzHD+tyVsPM12ZkSeUwVtaFSTL+V9ySU=)
                          2: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl (hash: 7CXhjvzHsL4pKZyW7Lb7gmL1ZotKeHoAs5xivB6XeN0=)
                          3: h_YrV4QYJDycTbMNinIqkJM98jU.roa (hash: K/5eavavoEeO1AMKLJlqfNwHelf/dktijMmlFiGnwd4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:87:3f:85:1c:f1:1e:1d:9a:0f:04:bd:e5:3f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
        Validity
            Not Before: Nov 22 18:00:42 2024 GMT
            Not After : Nov 23 18:00:42 2024 GMT
        Subject: CN=38960a4ace1ea92fa0df38145c422f9d425bf06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0b:7a:88:72:66:f9:a0:55:1c:ee:a8:95:76:
                    b1:fc:7d:8e:9b:1a:71:17:b3:3e:da:db:4c:46:3f:
                    e1:13:ae:b3:a3:1d:e5:4f:5d:9f:cd:5d:01:74:77:
                    3f:72:35:b2:d8:7b:9c:2e:f8:0e:1b:f3:33:33:1b:
                    62:9d:46:e1:b8:5d:fe:7f:37:98:42:55:67:5c:7f:
                    be:9d:8f:f2:9d:70:de:14:c2:f2:f9:1b:ba:58:bf:
                    71:5b:08:85:a2:a5:5e:da:a8:62:14:41:48:61:21:
                    05:cf:d2:d8:d5:c0:a6:c2:65:0e:01:f3:84:80:da:
                    ea:fb:92:e2:00:bc:73:33:dc:51:1c:d2:05:89:d9:
                    80:9f:3e:62:64:20:c2:5a:8d:f6:d5:8a:1c:0c:9b:
                    d8:d4:58:2a:46:5a:e5:10:85:c8:2f:76:1a:78:18:
                    6e:8e:e5:72:d9:5e:92:12:49:70:48:29:c7:32:94:
                    5e:3f:11:c4:84:9a:d6:fb:1d:b8:af:29:30:57:e8:
                    3b:f5:0c:0a:d5:88:ac:a2:e6:3c:3c:cb:dd:5c:80:
                    85:6b:00:84:75:c8:c8:9e:a4:ed:ec:64:4a:1c:17:
                    8a:e5:0a:3c:f1:95:28:9d:92:8f:f4:bd:90:b9:f0:
                    ba:bc:4f:a8:ee:c4:d3:57:91:dd:34:80:91:ee:dc:
                    72:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:96:0A:4A:CE:1E:A9:2F:A0:DF:38:14:5C:42:2F:9D:42:5B:F0:6F
            X509v3 Authority Key Identifier:
                keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:26:70:c1:fb:9b:66:6f:66:32:61:ef:8b:0c:b8:19:c2:14:
         54:f6:d1:59:51:2b:3f:64:f6:bf:3d:5e:7e:28:37:f0:ca:d4:
         9a:67:fd:36:ea:d8:ee:3b:e0:1c:73:29:ff:f3:71:3d:99:28:
         82:39:a9:cc:05:8a:fb:bd:57:b9:14:9f:f8:ea:1b:b6:62:1a:
         fb:0a:fd:5f:54:0a:4a:ad:23:aa:08:32:ca:b2:fb:bd:72:a4:
         3f:e9:4e:66:ba:a5:a1:d0:39:87:69:38:70:ff:2a:46:40:27:
         4e:a1:2a:4a:a2:4c:f1:21:53:24:87:3b:47:bf:2e:32:50:47:
         6a:0c:df:7c:aa:a4:0a:cc:63:d3:93:0d:0f:9e:55:92:0c:ee:
         04:46:4d:1f:9d:a0:f8:df:05:87:93:ea:8a:8f:81:a6:b8:a8:
         4e:be:f3:55:08:cf:ab:b3:52:d5:4b:c8:a4:63:b2:47:89:37:
         3d:85:63:91:60:fe:49:5d:7c:f8:6a:d9:40:40:e9:f1:36:e5:
         9e:4d:f3:c3:7e:43:2b:39:a5:84:56:f0:14:56:6e:49:30:be:
         c3:d7:3c:ad:78:2c:8f:7e:17:70:f7:66:7b:31:92:ee:3f:47:
         7a:4b:66:2b:ba:a2:a9:41:ce:90:2e:ac:98:36:d5:e3:ae:13:
         aa:c0:5b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----