Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
File:                     MJbXr7uKXjFaXEiazqfct1qmXQQ.mft (raw, json)
Hash identifier:          Maw1KvIV2fOyYU+NYpuR+1YIaIwFqPBLlcaS3ecjueQ=
Subject key identifier:   12:1B:08:A7:33:4F:87:B5:BD:A4:2B:37:BC:47:C3:F8:6A:E9:A9:2C
Authority key identifier: 30:96:D7:AF:BB:8A:5E:31:5A:5C:48:9A:CE:A7:DC:B7:5A:A6:5D:04
Certificate issuer:       /CN=3096d7afbb8a5e315a5c489acea7dcb75aa65d04
Certificate serial:       019369DAFFB49743AE427C9B63118171E32C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
Manifest number:          1384
Signing time:             Tue 26 Nov 2024 19:03:00 +0000
Manifest this update:     Tue 26 Nov 2024 19:03:00 +0000
Manifest next update:     Wed 27 Nov 2024 19:03:00 +0000
Files and hashes:         1: 1DkMQysxmZYwcLX2PCGh3Dgk7jk.roa (hash: mhCQyeMBZFqco+M2itqfi+i+gfLfKR/d4X7Vcu8ciUo=)
                          2: F3aFmpzIX-8t5X5pXQYqFUbQfTU.roa (hash: 7PDCxCIdU2Wbv5aaJXryHHzvrkESWyVwOy2FULYimCc=)
                          3: MJbXr7uKXjFaXEiazqfct1qmXQQ.crl (hash: uzxOAQrFTFyFw0I8GxCdmCADI0pUnLeE7Hgq1huUsWU=)
                          4: bJ7sTZ81b4L35weDua7t6Mc3MWs.roa (hash: 6UU5eLSJ8FOSPEcPZCHBCZoV6BajLzEnvrOJ83meyEg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:ff:b4:97:43:ae:42:7c:9b:63:11:81:71:e3:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3096d7afbb8a5e315a5c489acea7dcb75aa65d04
        Validity
            Not Before: Nov 26 19:03:00 2024 GMT
            Not After : Nov 27 19:03:00 2024 GMT
        Subject: CN=121b08a7334f87b5bda42b37bc47c3f86ae9a92c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d6:c8:c5:dd:cf:e0:94:b7:54:07:b0:05:5c:
                    06:6a:11:9a:86:2d:e9:9f:6a:5d:5c:c8:16:87:3a:
                    a6:ce:ee:5c:00:95:81:34:48:b0:73:fb:4b:9d:21:
                    0d:5a:37:3a:a7:ae:e2:76:bb:6b:ba:00:1b:a6:ff:
                    dd:8c:8d:94:b1:af:0e:30:83:51:18:f3:c1:7d:08:
                    01:18:4c:d8:c0:5c:97:c3:7d:d7:7a:e0:6c:ef:76:
                    35:0b:08:f7:47:b7:9b:83:2d:e9:56:fe:bb:cb:dd:
                    21:19:07:03:42:1f:50:e9:e1:95:d5:f7:c8:28:0e:
                    da:e6:fa:80:ee:0a:a7:6f:72:8e:79:06:1b:e2:c2:
                    45:b6:01:43:bd:bf:24:16:ab:d7:0c:a4:b3:10:f3:
                    f8:6f:23:19:52:3f:0c:6f:6d:b6:0a:82:2d:ab:43:
                    b5:d0:f6:a5:1d:ad:74:ed:07:98:a4:0a:8b:d3:70:
                    31:65:5b:0f:74:11:96:e4:bf:fb:e2:88:f4:2c:8b:
                    a1:96:a2:40:9e:ef:e2:13:a8:8b:b9:f9:33:f8:60:
                    b2:2e:02:21:c3:13:3f:e9:b5:78:27:2a:1d:fd:ce:
                    6e:16:ad:4b:42:69:d7:d0:42:27:16:1c:ef:5d:6d:
                    df:ac:d1:d5:88:30:50:54:82:9a:52:5e:d4:aa:dd:
                    61:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1B:08:A7:33:4F:87:B5:BD:A4:2B:37:BC:47:C3:F8:6A:E9:A9:2C
            X509v3 Authority Key Identifier:
                keyid:30:96:D7:AF:BB:8A:5E:31:5A:5C:48:9A:CE:A7:DC:B7:5A:A6:5D:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e6:8c:8c:20:33:12:62:b5:e9:af:1c:50:b5:a8:b3:f2:c3:
         d0:6f:05:af:61:8c:81:cc:3b:c4:68:44:3d:bc:e3:a6:1f:7e:
         dd:62:a6:f7:4b:85:2a:69:66:9e:e7:fb:a2:f7:e3:a3:f1:ce:
         8e:a5:70:fc:f4:05:6b:a2:9f:d0:ad:5f:e8:a2:72:47:ff:c8:
         a1:cb:53:ed:49:16:f8:1c:82:6f:8d:a4:ba:53:29:e9:07:20:
         28:e5:80:ed:ca:b0:77:af:b4:a7:83:55:9c:f8:8a:18:e1:bd:
         ee:f3:29:b8:87:21:37:af:71:a0:f5:45:3c:fc:18:11:67:6c:
         5b:0c:05:57:eb:f3:23:77:4c:e8:d5:18:87:33:65:8f:de:5a:
         ca:ae:ef:96:90:11:7a:2c:e7:ba:c9:77:ee:60:22:92:e1:f1:
         38:00:43:45:4d:19:32:0c:4d:ac:f2:71:7a:52:77:83:52:4c:
         6f:66:1d:dd:85:8f:f2:8e:9d:50:68:b8:4f:59:6c:b1:f7:f8:
         a2:85:48:51:13:b8:f0:09:f9:f3:9f:4c:92:c4:bd:80:72:b0:
         de:2e:4f:cd:e6:42:5f:77:20:32:03:0c:ab:c3:77:59:29:37:
         48:f1:e4:35:30:0d:72:db:a0:b4:21:04:a4:96:39:07:42:33:
         b6:43:8f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----