Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
File:                     j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft (raw, json)
Hash identifier:          VIqnQIz7Yows1V3WY/g0UH3Kr6JLD8JOl0teonMX0dM=
Subject key identifier:   97:C7:DB:95:FD:0B:9C:AE:0E:A9:65:5A:B9:37:71:F0:C6:BE:C6:40
Authority key identifier: 8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8
Certificate issuer:       /CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
Certificate serial:       019369DADC0EA2140197BA5D79A574D754CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
Manifest number:          137C
Signing time:             Tue 26 Nov 2024 19:02:50 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:50 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:50 +0000
Files and hashes:         1: 2t3eop8IjCBAODZA1cJ1F0-A2c4.roa (hash: fgoNewr4vsV6Cv26fYH7Z4/XYoKZ50yQ4gNG3yCP8qo=)
                          2: j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl (hash: dPEO1DrEWIKzhqGyNBZvGfuqf2/iQQSMu6yGSNtyhgE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:dc:0e:a2:14:01:97:ba:5d:79:a5:74:d7:54:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
        Validity
            Not Before: Nov 26 19:02:50 2024 GMT
            Not After : Nov 27 19:02:50 2024 GMT
        Subject: CN=97c7db95fd0b9cae0ea9655ab93771f0c6bec640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2f:b2:ce:45:ac:25:3c:b0:43:2b:db:f1:af:
                    f1:35:37:2a:90:2d:16:6e:ec:32:a3:81:97:1e:0d:
                    70:9a:fb:d3:b0:3f:c2:e3:7b:cc:fb:93:8d:5f:a0:
                    70:ab:f1:a0:06:a5:86:1a:72:0f:7d:fb:92:17:68:
                    44:44:05:42:30:d5:1c:da:02:ec:79:91:9b:16:c0:
                    aa:0f:a1:f7:51:e0:9f:50:b1:67:b7:9e:d4:b8:e3:
                    eb:54:9a:54:6b:06:ec:7b:5e:83:af:84:95:a3:5e:
                    4d:92:ca:78:e6:0c:96:e2:a8:3e:5e:0a:f1:4d:e1:
                    93:a9:33:c6:33:8f:82:09:96:c2:b1:a6:2b:8f:b0:
                    a9:ea:55:e6:b0:e8:29:8b:99:a3:13:4d:c2:ca:f4:
                    8d:72:76:43:2b:3a:c7:b2:47:a7:5f:9b:ed:6f:81:
                    f9:71:64:4b:d4:72:d1:f7:e9:53:c6:6b:db:58:94:
                    d6:c8:e3:4b:28:f5:be:39:0f:9b:50:07:d6:88:90:
                    ea:9a:91:91:3f:43:5c:8a:70:6a:a4:6d:03:73:d9:
                    b7:e0:b0:00:3e:e9:c7:6e:7e:fc:5e:46:0e:61:57:
                    78:5a:14:12:bc:5d:70:d6:25:ff:4a:26:9f:21:3c:
                    f3:df:c4:31:69:d8:ac:1f:1a:11:af:a2:61:8a:34:
                    96:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C7:DB:95:FD:0B:9C:AE:0E:A9:65:5A:B9:37:71:F0:C6:BE:C6:40
            X509v3 Authority Key Identifier:
                keyid:8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:0a:ea:e1:f1:34:0e:e8:36:43:c3:8d:03:b5:6e:6f:de:82:
         97:9d:be:1a:a1:fb:e0:2f:7d:ae:1e:62:49:d7:32:72:7c:40:
         78:03:9f:fd:c4:b4:76:fa:fb:9b:7a:77:17:b4:a4:91:8d:5b:
         88:46:63:44:3b:c5:b6:9a:c2:4f:32:18:e5:ff:c8:41:f7:70:
         13:d8:71:a4:7c:e6:5f:ed:2f:94:51:76:2a:25:86:19:af:6d:
         0d:ec:d7:bb:72:8f:c4:0e:fc:cd:30:f5:64:73:1b:d6:51:52:
         22:68:73:52:f0:4e:9e:56:95:e5:fd:33:64:a4:a5:d5:86:bb:
         96:5c:d5:81:64:4e:2f:2a:a1:9a:29:bf:d5:f4:98:01:33:ea:
         23:38:ca:47:ff:51:c8:c3:1c:10:f1:a9:e9:41:d5:8f:9e:39:
         82:69:b4:b1:49:0f:a9:3f:6c:9b:76:1b:42:42:fd:85:84:87:
         2a:47:67:5a:ce:cf:5d:23:d6:e1:e3:6f:d0:e3:09:54:cb:43:
         03:f1:fb:4f:fc:a4:03:c8:86:9f:c0:59:8f:91:14:aa:0c:b3:
         e3:3d:ed:f2:d6:78:57:24:ab:58:61:e9:2c:eb:27:4c:eb:7d:
         7c:f3:54:d1:5f:bd:49:5c:09:55:ee:94:67:bd:24:14:63:97:
         da:5d:0f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----