Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
File:                     kjorPddmcnXwmIbffaB591XO7Vk.mft (raw, json)
Hash identifier:          u6VeRqNNzwpJX9ySmts0njuRbwQLcDrTRNM9cmbVb88=
Subject key identifier:   EC:57:6C:11:74:07:8E:C2:0E:1E:C2:7E:79:41:40:93:FF:97:9E:79
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Certificate issuer:       /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial:       0193568A8D18BFD367C1C40F196F259A5892
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 01:02:20 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:20 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:20 +0000
Files and hashes:         1: K_9kIu6JLdYkmo8am721g_ghDHw.roa (hash: JZn9wVdTvQzYM0GpvOcXqVX0xxc1A/NlO6Wd0Yl/J+M=)
                          2: e0b_dgijAp0SSwAgQXoR0nco18k.roa (hash: DQyPSYTHEKymg5F9kg9e1+LVfApZzn8EsxmVxHAImS0=)
                          3: jlSyRhAImk2ahzsTWeK2mbDOiDg.roa (hash: OyxwZPmYQsSeqQZde8GoYU+9qlwBlRTnL32559O0Ykw=)
                          4: kjorPddmcnXwmIbffaB591XO7Vk.crl (hash: C7pb5Ub98VD2/MdkrV8uXg8n7MWcFxsbesFVgkvbMFo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:8d:18:bf:d3:67:c1:c4:0f:19:6f:25:9a:58:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
        Validity
            Not Before: Nov 23 01:02:20 2024 GMT
            Not After : Nov 24 01:02:20 2024 GMT
        Subject: CN=ec576c1174078ec20e1ec27e79414093ff979e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b3:11:15:82:e1:fb:2c:9d:31:91:51:7d:13:
                    3d:5d:c7:f0:bb:c6:21:f1:f4:1e:6e:ce:25:08:b6:
                    7d:31:8d:52:c4:aa:a7:ee:65:dc:38:3f:f0:87:11:
                    e3:68:86:b7:37:a0:a4:55:e2:91:07:dc:86:e3:c2:
                    cc:e4:29:a7:30:77:5e:72:88:00:ca:69:6b:7d:64:
                    88:63:b7:3a:dc:1e:42:3a:01:c7:33:0a:a2:dd:a7:
                    0c:18:68:d6:71:6c:fa:04:7f:35:4f:f5:44:29:7d:
                    fc:e1:3d:2d:9c:c7:87:28:5d:78:92:29:a0:1b:51:
                    ba:3a:d7:78:f1:90:4e:7f:05:1e:4e:39:79:32:9a:
                    b5:2f:74:e5:e2:43:32:87:42:90:6b:4a:68:0c:7f:
                    72:3e:42:6f:2c:55:c5:f5:9b:39:2e:cc:4c:44:3f:
                    2f:ce:e0:1a:16:42:cc:8e:54:ec:5c:7b:e3:88:2d:
                    6d:ff:4d:d8:93:34:3f:08:93:ff:2c:a7:96:e6:1e:
                    53:09:ad:1e:08:9a:fb:46:cd:2b:0e:72:c6:c8:02:
                    22:aa:ca:9e:f9:de:c5:b6:f4:15:03:d5:79:8f:b2:
                    5e:87:1d:ce:0d:2a:60:b4:21:55:50:a4:01:bf:5f:
                    1b:b4:6f:90:c5:47:d8:e1:a0:ff:63:cf:da:c1:e8:
                    d7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:57:6C:11:74:07:8E:C2:0E:1E:C2:7E:79:41:40:93:FF:97:9E:79
            X509v3 Authority Key Identifier:
                keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:80:30:64:ea:e0:bb:e8:1d:d8:a7:be:6c:2d:6d:e6:4b:81:
         12:27:e2:06:0c:4e:d0:72:61:0b:fe:b9:be:7e:03:92:b3:78:
         34:8d:a2:81:72:3e:55:c3:fd:6d:22:b1:b4:d1:97:10:af:ca:
         9c:11:a4:3a:6f:1d:8e:8c:ac:11:58:93:ca:7f:22:01:a4:ad:
         a2:a1:fb:89:55:cd:51:b1:f7:7c:71:fd:21:e2:61:69:a6:fc:
         71:69:da:d4:fb:02:50:17:3f:5a:60:e7:aa:31:4b:fc:54:c3:
         4e:74:3e:2c:55:bc:a9:ed:fe:d6:17:78:5b:e0:2b:b1:df:cb:
         61:4e:50:ed:54:e4:e2:dd:65:22:0b:b5:f0:83:d4:71:c4:a0:
         83:61:33:9a:e8:20:8f:a5:5f:5c:5a:c5:37:45:06:5b:24:7d:
         c4:c8:28:dc:71:b2:e4:2d:0b:02:78:cc:50:cb:44:a1:0f:4e:
         18:b5:56:a2:79:74:ff:9d:aa:e8:cc:76:fa:a5:8a:bf:a8:b8:
         66:03:43:6d:b6:de:09:fb:ba:e7:ab:7a:ce:16:4d:01:ef:23:
         37:c3:c2:5b:1a:f5:3e:53:c1:f4:c7:ec:c7:6b:b0:94:d4:58:
         cf:d5:3e:01:10:94:7d:25:21:23:df:86:05:44:ef:55:a5:86:
         97:76:b4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----