Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
File:                     wXLFrvM8BsSu8trI8FA_y92acoc.mft (raw, json)
Hash identifier:          7N3zf9jjX7e+CRinIRVOvCKbzolAWXpMoZWkEI1GR5U=
Subject key identifier:   1E:BB:A0:2B:BA:E8:9C:6A:F5:13:52:83:60:B4:0E:76:9C:81:19:01
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Certificate issuer:       /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial:       019355AD4C9A71C339E6A8ABA70058785E32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 21:00:40 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:40 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:40 +0000
Files and hashes:         1: AnE4imXJx9s_8FLYPpB-B9o_2-c.roa (hash: h7dgrIM0NgAVs6VhcFtrBlXobey51bgIC9Wi5N5UgdQ=)
                          2: kOS_zQ_9QdJrXsqqjiYllx1iudY.roa (hash: bVD5G0IDitRIoBDWuaz1X5lH42EalqII3gNqm9UQkh8=)
                          3: wXLFrvM8BsSu8trI8FA_y92acoc.crl (hash: 7OdBs0C5qozgwoxq8eRGPKt4YjcR4HTFQsbxvFzHDBI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:4c:9a:71:c3:39:e6:a8:ab:a7:00:58:78:5e:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
        Validity
            Not Before: Nov 22 21:00:40 2024 GMT
            Not After : Nov 23 21:00:40 2024 GMT
        Subject: CN=1ebba02bbae89c6af513528360b40e769c811901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:45:d6:76:b8:7e:f8:02:60:69:9a:57:a3:08:
                    52:70:03:a9:cb:cc:59:88:f4:26:a0:1e:36:8d:85:
                    a9:b9:b9:30:60:c7:5a:f6:ce:79:0b:fa:7f:1c:04:
                    09:ec:03:5b:c5:19:ea:00:9f:68:58:99:b3:b9:65:
                    6c:a7:cf:1e:86:9b:7f:c2:cf:ef:65:21:5c:9d:2b:
                    64:31:ee:c1:9d:e6:18:43:7a:fb:7a:7d:ab:5b:62:
                    70:c2:bf:5e:75:ad:2d:fa:0e:7d:da:90:61:74:8d:
                    ac:dc:00:26:23:ed:14:e5:d6:2e:2e:75:7e:92:3d:
                    c7:98:52:d5:76:a7:2f:0d:89:de:93:aa:39:1d:36:
                    10:b3:a8:15:65:f7:7e:a9:44:38:e1:55:8d:98:dd:
                    a1:94:50:ed:91:f3:00:1f:6a:75:0e:ca:44:b5:fe:
                    19:3e:ea:bb:42:f2:18:64:a5:e8:87:ea:7a:44:6b:
                    00:61:81:d0:4d:cc:27:c2:f6:35:ae:6e:5f:82:e9:
                    e5:c2:7c:64:ed:56:0a:27:43:00:6b:f7:36:a0:ec:
                    cb:97:d6:34:b0:62:a9:1d:cf:5b:77:ae:6d:a2:19:
                    fe:45:5e:48:6c:6e:74:b5:a0:43:72:72:6c:d1:67:
                    1e:d2:29:b6:51:a0:ac:e8:96:25:f8:a8:c7:b6:c8:
                    1e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BB:A0:2B:BA:E8:9C:6A:F5:13:52:83:60:B4:0E:76:9C:81:19:01
            X509v3 Authority Key Identifier:
                keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:4f:a1:8d:a7:d2:ce:ca:94:0e:ae:59:8b:79:5c:75:ee:64:
         10:89:34:a1:96:33:95:cb:71:ac:2a:21:ed:fe:6a:ad:15:ed:
         ef:c1:0d:fe:81:cf:3d:df:26:c7:0c:e5:0e:e1:d6:9a:ef:82:
         33:67:86:b3:a9:45:ad:32:39:e5:3d:85:18:4b:39:97:e6:74:
         80:15:e9:dd:24:27:42:f8:ed:0d:ed:43:ae:a7:2c:f6:3b:34:
         31:a2:9e:e1:2e:cd:e2:fe:3e:73:dc:a2:0b:06:dd:2a:52:2c:
         13:63:31:04:7a:42:f2:e9:9d:45:10:72:5e:a0:9b:dc:08:e8:
         6e:a9:08:35:67:c4:03:57:24:e6:2f:d0:c4:9e:49:1c:c5:9c:
         53:6a:53:41:e1:f5:33:c7:7b:c5:22:67:eb:f7:76:f9:c3:2e:
         dd:35:59:93:b8:e6:5e:59:6a:43:15:f0:75:87:48:48:40:4d:
         c2:08:bd:25:db:73:42:5f:e6:b4:41:ae:a5:ee:a3:5b:ce:f4:
         8e:af:f2:a9:8c:28:35:2c:7b:68:29:5e:9a:9b:88:07:a9:24:
         a5:9a:e4:39:77:ed:52:59:08:70:27:0a:a6:e8:60:18:ba:40:
         26:41:48:b7:c0:90:46:35:ad:26:ac:2c:8b:64:8b:db:35:f4:
         35:af:5c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----