Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
File:                     jjh1qArSM-nChxWYg3H3fuw_Ygw.mft (raw, json)
Hash identifier:          RnH7Fj+GqmhORbUXAQP15Zy/8k79CY13MP/o/5xR6Nw=
Subject key identifier:   4A:D5:03:D1:D9:CD:4A:1B:E5:F2:E4:14:E3:F2:9F:5B:F6:71:73:8C
Authority key identifier: 8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
Certificate issuer:       /CN=8e3875a80ad233e9c28715988371f77eec3f620c
Certificate serial:       0193688F667C341C2CD14DB22E7691B2DB04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
Manifest number:          137F
Signing time:             Tue 26 Nov 2024 13:00:48 +0000
Manifest this update:     Tue 26 Nov 2024 13:00:48 +0000
Manifest next update:     Wed 27 Nov 2024 13:00:48 +0000
Files and hashes:         1: jjh1qArSM-nChxWYg3H3fuw_Ygw.crl (hash: hABkVxuJ6mblTKAVzSTjTrAM+gGPc05AtE9NDmgJIic=)
                          2: yl8tZvdPyDxaakMrPNgbULn2ZCo.roa (hash: ss3dqXXGbAoLbgn1Gd0hhMgG8f7xeiNDuhiY+RX6zuw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:8f:66:7c:34:1c:2c:d1:4d:b2:2e:76:91:b2:db:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e3875a80ad233e9c28715988371f77eec3f620c
        Validity
            Not Before: Nov 26 13:00:48 2024 GMT
            Not After : Nov 27 13:00:48 2024 GMT
        Subject: CN=4ad503d1d9cd4a1be5f2e414e3f29f5bf671738c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:75:b7:74:e1:e9:50:eb:07:cb:c3:29:1e:52:
                    7b:7f:18:ce:2d:85:f1:54:0d:62:48:cc:92:c3:9c:
                    ff:ea:e2:73:83:6d:f1:f9:ff:c8:f8:c0:95:99:33:
                    c5:73:4f:70:54:45:31:6e:79:d4:97:09:8e:52:c5:
                    0d:66:ba:c6:4e:93:0d:65:2a:9d:4b:71:a6:19:8d:
                    66:fe:e3:ac:d3:41:eb:fb:d3:c9:07:db:96:f4:30:
                    f5:d2:c9:a5:b0:1a:52:e9:ce:5c:1f:f9:87:d9:e5:
                    59:7c:f4:64:1d:7c:f3:86:e7:a5:24:73:40:fc:81:
                    6d:44:3e:e0:6d:e2:94:29:f4:9c:90:53:e0:59:c3:
                    ba:f8:d4:fc:47:2a:f9:e2:b5:7c:ef:97:07:53:7b:
                    d6:c6:1e:11:01:2d:87:6f:76:22:58:ee:23:e4:40:
                    8a:51:71:1a:90:1f:51:30:fa:18:93:1c:cc:16:f4:
                    92:19:3f:87:65:6a:3b:2d:94:a4:f0:c2:76:56:d4:
                    e9:e7:62:f4:09:c0:70:57:cd:f6:97:55:1a:ff:71:
                    20:0c:4f:29:d8:72:d7:a9:33:21:e1:8e:77:9b:1e:
                    33:8f:58:79:64:0e:a5:82:89:ba:69:a9:cc:f4:3a:
                    96:4f:b6:a1:51:5d:e9:0d:0d:7e:a7:0f:0c:e2:24:
                    a9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D5:03:D1:D9:CD:4A:1B:E5:F2:E4:14:E3:F2:9F:5B:F6:71:73:8C
            X509v3 Authority Key Identifier:
                keyid:8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d0:54:ab:5a:f5:fd:03:30:5a:87:92:6a:d7:97:85:26:eb:
         a8:cf:13:69:93:bb:af:ee:ac:2f:82:c3:58:65:50:01:d7:50:
         bb:f1:30:33:03:35:40:7e:1f:92:ae:16:b5:88:74:2d:8e:75:
         8a:86:dc:eb:88:10:be:72:57:b9:41:d1:91:ec:76:ca:30:a5:
         e0:55:70:ba:43:e7:f9:ae:e6:b8:86:49:0f:d5:f9:bb:3e:e9:
         7a:5e:01:2e:d8:22:af:f4:0b:f1:ed:c2:63:ad:4b:f4:95:d6:
         8f:34:7e:72:0b:6d:69:1c:4c:a1:20:4d:4e:ba:a0:00:7c:38:
         e1:7f:f5:93:14:aa:9d:88:33:8b:12:93:85:6b:b2:40:18:01:
         ef:02:78:c7:5f:cd:d5:d2:aa:da:b5:b3:52:9c:8c:47:8d:5d:
         bf:d8:52:d1:19:10:e7:59:d7:ba:d7:92:18:14:dc:b6:0d:d7:
         ce:16:8a:36:08:46:bb:0c:26:4d:f3:13:c8:95:7a:83:ba:1c:
         44:9d:01:22:85:d3:dc:f1:2c:46:f4:b4:1e:bb:55:27:a6:dd:
         c4:6a:68:1d:b3:30:63:f7:a0:6b:3c:c5:81:4a:6d:43:d8:1f:
         9e:ca:fb:a8:41:85:25:78:48:24:3b:9d:f8:9d:d8:a5:db:fa:
         7e:f6:f9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----