Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
File:                     ujG8-SPF8lyvvavf3UblEfld8NE.mft (raw, json)
Hash identifier:          BdpkvH3ZfD3TIUiBAjb7twJ0xSYybKuTuA8oAXi2jPc=
Subject key identifier:   17:44:32:CB:DA:92:99:6E:C4:DF:B5:B8:17:09:82:73:CA:CF:A0:18
Authority key identifier: BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
Certificate issuer:       /CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Certificate serial:       01936C6C291A4F68D3CCF7FA96BCE79B31EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
Manifest number:          1382
Signing time:             Wed 27 Nov 2024 07:00:47 +0000
Manifest this update:     Wed 27 Nov 2024 07:00:47 +0000
Manifest next update:     Thu 28 Nov 2024 07:00:47 +0000
Files and hashes:         1: 0_9tCTITsteJbaThRPHTuXVN_HU.roa (hash: YqSmY/FuXY2XC1pmXwAqPE9tUF9D0PdhpLPeLshiKr4=)
                          2: JVGgdRtMwO2Ihnai_FXQVqlIxY0.roa (hash: yQK7biuoga/tA3nfKp5o6dmrDFY3QQQyXhRynF3ACJ4=)
                          3: ujG8-SPF8lyvvavf3UblEfld8NE.crl (hash: dXcTMIBLiJEhRBdD4k2pE58glIDDR/zqcne63ViNwuo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6c:6c:29:1a:4f:68:d3:cc:f7:fa:96:bc:e7:9b:31:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
        Validity
            Not Before: Nov 27 07:00:47 2024 GMT
            Not After : Nov 28 07:00:47 2024 GMT
        Subject: CN=174432cbda92996ec4dfb5b817098273cacfa018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:76:74:27:f3:e9:74:0f:59:c8:3c:72:74:a3:
                    45:e3:fc:82:dd:10:d3:51:5a:32:85:c8:44:6a:ce:
                    a4:95:70:05:9f:6a:f9:d9:65:3b:31:d1:83:6e:fd:
                    9d:21:bd:d1:97:1b:2c:c3:e1:ff:c2:6c:9c:4a:c7:
                    60:fa:44:73:db:bc:4b:bb:8b:52:01:d9:3a:0c:96:
                    42:81:0c:4f:c3:79:3e:22:54:70:b2:7d:78:a0:d4:
                    8b:85:e5:1d:93:75:77:73:a8:ba:7e:e4:4c:f2:86:
                    b1:9a:94:64:9c:f4:72:1c:ff:16:86:d0:e3:cb:e0:
                    25:c5:c6:4a:71:3c:cf:c7:e2:5e:9c:3a:95:54:cb:
                    51:0f:1b:f1:e1:86:da:6a:99:b2:cc:7c:26:2f:cc:
                    20:14:ec:fc:fd:a9:12:04:fc:1f:c0:b7:1c:f8:a8:
                    4b:4e:f5:3e:3e:1c:cd:75:99:d5:fe:99:d4:8e:e9:
                    ab:2c:65:14:b4:2f:8b:b2:c8:22:69:7e:6c:16:52:
                    e2:9c:8d:27:5c:13:14:85:f5:6c:8a:72:69:aa:c4:
                    3a:d2:8a:a5:6d:61:f9:49:ee:f8:90:76:ad:7d:dd:
                    09:b3:b1:30:41:12:c4:f9:e8:f7:89:9d:3c:ed:a6:
                    05:44:b7:de:e7:e0:ad:af:71:5e:7f:bf:ee:8b:39:
                    45:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:44:32:CB:DA:92:99:6E:C4:DF:B5:B8:17:09:82:73:CA:CF:A0:18
            X509v3 Authority Key Identifier:
                keyid:BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:19:1e:18:f9:5e:23:36:65:5c:5e:4b:8e:36:37:11:8c:20:
         0f:67:ab:8f:0b:b8:82:5e:a7:0f:19:73:36:5b:2b:1b:ac:97:
         3a:34:8c:6a:0e:11:90:92:da:29:53:7f:49:6f:c8:a3:00:7d:
         0f:b4:34:1f:c6:c2:81:2b:18:8a:e2:ee:32:0e:f8:c7:b3:25:
         3b:ee:0b:4a:5b:94:9e:0a:8a:6c:7a:53:6f:a9:25:ab:6b:a6:
         11:d0:f2:54:ba:81:1f:81:7b:ff:6f:6f:c7:69:26:2e:4e:95:
         c2:8d:47:57:4a:d2:1e:70:e1:9e:07:08:ca:46:90:b3:a6:12:
         3a:06:c1:d5:4a:ab:4e:85:81:37:57:00:9e:0a:a4:57:31:7c:
         17:0d:21:45:91:c7:58:ab:c7:a9:f8:17:1f:8d:ee:2d:9a:96:
         72:b7:0a:97:a0:b9:3c:66:c6:dc:1e:16:02:f8:8c:18:81:c1:
         7a:d9:48:f3:21:d4:93:dc:b0:67:de:57:16:6e:45:27:3c:de:
         f5:12:0e:d6:99:eb:3b:fc:b8:c2:e2:a7:e3:ea:27:9b:06:da:
         0f:2a:b8:c9:56:9d:2f:48:0c:74:be:d5:25:7e:d0:9d:46:4f:
         06:07:46:6b:bd:6c:0e:7e:ef:f3:1c:c6:e2:ad:fe:48:34:f3:
         0f:19:a4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----