Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
File:                     _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json)
Hash identifier:          NoTjAc5hJVxy04EXyP+cdkIABUCZ39r3XsYw6R+Uru0=
Subject key identifier:   BA:84:2B:B4:9C:7D:5A:B5:8D:B7:86:32:C1:2C:9B:B1:0C:BA:5E:BC
Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
Certificate issuer:       /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Certificate serial:       019369D9782710B98272A323DCE9E23FA51A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 19:01:19 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:19 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:19 +0000
Files and hashes:         1: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: D3L/kkp2PqQiXAnqCI6rRgdzwtyxBz3vyoH4G9JsThE=)
                          2: sJQhejzANXmhjfA0SwICil3Vbvw.roa (hash: d9LT9p9rNWyYY2+R6D4n46INz03lFIXneCFJpTKkKbI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:78:27:10:b9:82:72:a3:23:dc:e9:e2:3f:a5:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
        Validity
            Not Before: Nov 26 19:01:19 2024 GMT
            Not After : Nov 27 19:01:19 2024 GMT
        Subject: CN=ba842bb49c7d5ab58db78632c12c9bb10cba5ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:16:33:d8:c3:62:d7:7d:b3:70:a3:16:e0:ef:
                    43:1e:06:8b:10:1e:fb:8a:7e:89:a3:a0:59:bc:8a:
                    62:d6:f7:d7:91:86:93:e0:2e:dd:87:d0:56:88:19:
                    0c:73:df:91:ca:b0:02:42:ae:58:87:90:54:80:63:
                    33:47:f2:75:1b:46:5b:7b:2b:67:6f:68:bb:a4:37:
                    63:16:3a:1b:12:07:22:63:ee:5f:b0:77:2f:b7:49:
                    58:1f:5b:ad:9f:94:d3:7a:53:97:f8:9c:dd:8f:f0:
                    d5:0a:e5:e2:52:32:9b:96:6d:b7:d0:44:2e:a7:ea:
                    79:f1:7f:fe:24:c9:59:f3:71:f1:63:1e:74:15:bb:
                    2d:19:18:f4:b4:3a:97:90:5f:7b:4f:7f:1f:66:89:
                    b3:15:82:16:04:58:bc:a7:8f:88:99:60:4b:67:2f:
                    b6:9b:d5:35:db:94:62:c1:57:ea:0a:99:1b:76:98:
                    d0:9d:44:68:6a:2f:8d:26:ba:a6:8d:27:56:61:60:
                    fd:17:54:22:6b:88:ff:d3:2b:0d:36:75:e7:90:80:
                    f6:1a:f0:7f:1d:29:01:fe:5e:4c:4e:e2:01:65:c4:
                    4f:78:91:00:0e:17:1a:00:7c:84:1d:3d:ef:c2:c3:
                    b7:9c:9f:db:9e:11:10:7b:a5:a8:bf:ef:4e:d2:53:
                    22:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:84:2B:B4:9C:7D:5A:B5:8D:B7:86:32:C1:2C:9B:B1:0C:BA:5E:BC
            X509v3 Authority Key Identifier:
                keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:2f:a6:47:dd:64:10:c7:9d:62:a3:ec:56:2d:c6:8e:91:18:
         04:c2:f7:58:86:1d:7c:5c:37:d7:8b:85:ab:e9:94:3d:16:21:
         6c:c7:13:fb:3e:f3:64:29:cb:d3:a4:19:b4:7b:3f:81:78:63:
         1b:80:79:03:02:db:ec:3d:38:d2:5e:dd:23:22:38:55:11:99:
         ba:61:44:82:9e:46:fd:4f:fa:56:e6:12:3c:ea:81:18:83:51:
         0b:69:c0:1c:ad:b1:2b:bd:7a:64:eb:1e:ca:52:f5:d2:3e:a4:
         c6:91:08:ce:03:09:ae:5f:23:b1:c0:4f:ec:ab:af:83:aa:da:
         1c:46:0b:c7:f6:85:fa:74:e3:b4:a8:fa:73:ad:da:5e:ae:bf:
         ef:eb:59:63:9e:e6:b7:cf:54:8f:79:c1:09:7c:f0:cd:4d:4d:
         d0:83:95:6c:fd:72:28:a0:4e:00:25:02:5e:91:b0:ac:81:6f:
         05:1c:ea:71:8b:81:91:a0:9b:76:41:c0:9d:97:13:9e:e0:f6:
         c5:0d:cc:76:b4:93:3a:37:b4:80:5c:88:91:0b:78:24:44:d2:
         e1:fd:81:e7:fb:c7:ac:55:cd:61:70:de:3e:63:72:31:79:37:
         b0:86:d8:ae:6d:a6:5e:55:05:c3:fa:b2:af:5b:5e:9d:25:46:
         0c:b5:c3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----