Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
File:                     uCMtGd2B1FwlkjrrTZqWhYea76Y.mft (raw, json)
Hash identifier:          QKQLGIvxS6mZ02BXd6t3HG5le6bekfvjrkQvL3kOxgs=
Subject key identifier:   33:25:AB:A7:03:39:A1:F0:FE:73:21:77:31:0F:BA:DB:96:07:7A:BF
Authority key identifier: B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
Certificate issuer:       /CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Certificate serial:       019355AD6CDCE5A82E64813639C3D79383E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
Manifest number:          1302
Signing time:             Fri 22 Nov 2024 21:00:49 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:49 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:49 +0000
Files and hashes:         1: uCMtGd2B1FwlkjrrTZqWhYea76Y.crl (hash: XtxwuF+9cS9qwgJCDqe8DOhn2r3fAklzbfiFMTaNp04=)
                          2: uD1fT4ARhykPtMaJUwhDsrcFi8Q.roa (hash: Pdt6IBQOG2ig4/9tU8z4Mo9SuepTOB9bEQt4292jXK4=)
                          3: uMZJvP30j22eqzJoXt6I3cCu0Ag.roa (hash: J5CBEgfjgf3XJM3HIQVCdvUicnrU/nMiSmfnbDXYhNw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:6c:dc:e5:a8:2e:64:81:36:39:c3:d7:93:83:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
        Validity
            Not Before: Nov 22 21:00:49 2024 GMT
            Not After : Nov 23 21:00:49 2024 GMT
        Subject: CN=3325aba70339a1f0fe732177310fbadb96077abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d4:ab:c5:61:0b:2c:59:a0:0e:20:42:d2:47:
                    5c:97:d7:83:ea:c5:22:02:07:a5:d4:34:84:d6:a4:
                    cd:4e:f9:f2:33:57:56:1f:19:44:be:fc:17:58:aa:
                    08:6e:e8:f1:7c:7c:a0:73:7b:c3:78:f5:fb:dd:2b:
                    4e:d1:0d:e3:f4:85:6a:64:b2:73:55:95:a2:00:c5:
                    1c:0c:65:f7:68:3a:f9:a3:1b:5f:c0:2a:cf:bd:9d:
                    b6:44:20:66:81:84:a9:56:c3:25:f2:77:6b:e8:a6:
                    27:8d:c6:74:9c:d0:22:d2:ad:57:97:14:5d:40:c8:
                    80:04:d7:c2:01:8d:00:d4:5c:33:69:4b:d2:03:03:
                    eb:4f:68:67:3c:bf:5f:e8:00:ff:1d:cb:73:22:52:
                    18:2c:72:9f:d7:5f:6f:af:38:32:a1:c0:38:a0:05:
                    89:68:b6:60:da:ad:9b:62:b0:40:23:bd:f7:9e:68:
                    1b:ac:72:fc:e5:bf:41:27:d3:06:7c:24:2f:c9:86:
                    24:8e:55:91:5a:40:e1:b3:aa:1b:9b:7e:f6:1e:a7:
                    e3:03:22:22:34:9f:67:4e:c3:5b:94:6f:4d:87:b9:
                    2e:78:4f:59:5c:c6:c7:9b:cb:5b:5b:aa:1a:11:84:
                    9b:c8:6f:24:7b:c2:93:97:66:77:38:0b:c5:b6:aa:
                    99:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:25:AB:A7:03:39:A1:F0:FE:73:21:77:31:0F:BA:DB:96:07:7A:BF
            X509v3 Authority Key Identifier:
                keyid:B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:ff:b9:d2:7a:be:82:94:7e:00:2a:bc:0c:69:d5:39:f8:16:
         1d:10:92:70:1e:b0:c7:af:0a:24:95:58:1b:fa:15:a5:ca:24:
         74:23:3c:3f:d9:41:81:c9:98:d9:88:91:bb:0a:e2:7f:2f:96:
         79:02:5e:c2:4a:c3:06:51:9a:b8:65:20:6c:26:cb:3e:41:53:
         e9:be:41:a3:f6:a0:62:fc:78:fa:43:86:9b:93:50:33:34:5c:
         cc:f7:bb:45:16:38:a8:bf:4d:fd:52:50:19:e7:d7:d5:56:7b:
         51:4b:a3:a7:84:f4:b7:ab:21:1a:a3:30:f2:a7:85:c0:54:44:
         a6:8f:36:e4:12:54:61:e6:08:ab:6f:0c:82:33:08:38:7d:ea:
         db:54:b2:b7:cf:e4:c9:83:a6:e9:6d:1c:59:f0:5f:c5:53:dd:
         27:05:35:7d:51:ec:b3:e7:f3:ff:c3:94:50:ea:be:07:10:c8:
         3c:6f:62:ea:9f:79:0b:86:e8:5d:c1:c0:79:5a:0e:f4:d6:b7:
         03:55:bc:4c:3e:93:0b:70:cd:b1:16:90:78:fe:73:ff:f6:56:
         40:ee:aa:f1:34:84:5f:80:56:2d:dc:b0:93:98:57:e0:4d:3b:
         2d:fa:84:1e:fa:e2:1e:92:e2:47:67:31:0a:39:1f:ab:34:0c:
         d1:a4:95:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----