Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
File:                     _1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft (raw, json)
Hash identifier:          A4HxBIzTwsK2P/w0nbVLQnP7XmOjrIDI3O7IF0Bk/tI=
Subject key identifier:   9A:A6:4C:02:28:FE:DD:C4:C0:0C:95:38:01:5F:D2:E0:C9:43:2E:1B
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Certificate issuer:       /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial:       0193568A5298DEEC8FDD6DECB105ED34DA88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 01:02:05 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:05 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:05 +0000
Files and hashes:         1: 5C0vullddJ6Jc5N3D3zvPoPG88g.roa (hash: 6vMOUV1sDw3NL/B+lAZCQ3vyhBohp8oZmTWEA9aqypk=)
                          2: U9Wex3sE-QNoTz5kudmOVpGRgBY.roa (hash: 4VM54EL/QibVDFYO4YFt88Bkkd1GGtQoLF6CCF8IRaE=)
                          3: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl (hash: P4B2RQA3wktD/3zhXpozvIhvU548Tk7si2NtKk0KP+k=)
                          4: uBz70mBnLpXhfo7-QgJcIQY4hMQ.roa (hash: JKqNUSs3WgodBEYOfjQd31MOk+n406+h6eXahyJzLRg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:52:98:de:ec:8f:dd:6d:ec:b1:05:ed:34:da:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
        Validity
            Not Before: Nov 23 01:02:05 2024 GMT
            Not After : Nov 24 01:02:05 2024 GMT
        Subject: CN=9aa64c0228feddc4c00c9538015fd2e0c9432e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ba:14:af:a1:29:41:9e:2c:46:4b:3e:f1:35:
                    87:6f:bf:14:0b:8a:f7:ca:3a:ff:cf:97:3d:59:d6:
                    36:69:49:b4:35:e3:bd:a6:60:3c:3a:bd:39:a3:e5:
                    44:b9:cb:e0:0a:75:ae:09:0e:91:47:c6:b1:33:7c:
                    9d:6b:6b:72:c9:a3:49:d8:80:9a:c1:de:b1:8b:4e:
                    f6:31:4e:4d:45:f9:73:98:20:e1:a5:c9:9d:da:72:
                    4f:7a:57:3a:cd:5b:ad:0d:45:71:19:82:3f:39:67:
                    2d:ac:f6:10:be:f5:ca:2a:72:2f:e8:7d:3b:d8:34:
                    94:b4:36:0b:c4:50:1e:47:25:e4:44:c9:8c:0d:4d:
                    a4:68:35:06:15:21:4a:90:81:11:28:bb:94:8a:15:
                    56:93:15:b9:d7:c6:ec:c3:44:ee:a5:db:22:44:92:
                    8a:6b:07:6c:31:96:10:ea:6b:3c:da:7a:c0:95:34:
                    3f:d7:38:97:ed:5b:2b:33:83:5d:af:9b:4b:61:6c:
                    49:41:fb:08:fe:7f:8a:18:a4:a8:66:46:2f:8f:7d:
                    13:4e:2a:ac:17:1b:f7:2e:f5:39:5d:64:2f:ce:0c:
                    9f:46:ca:1e:c9:ef:84:bd:02:17:4d:50:bc:84:b7:
                    a7:91:42:d7:16:7a:78:b5:a4:fe:5e:a4:8c:b5:12:
                    93:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A6:4C:02:28:FE:DD:C4:C0:0C:95:38:01:5F:D2:E0:C9:43:2E:1B
            X509v3 Authority Key Identifier:
                keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:5f:b9:d2:8c:81:bc:40:72:1b:d3:4f:77:36:b8:4b:8e:f4:
         28:47:44:2f:4b:a5:85:6b:67:8a:da:5a:ad:a8:39:4a:98:85:
         82:e6:84:27:7b:74:b0:7c:97:11:2f:92:14:83:cd:e0:0b:ad:
         67:f0:d8:82:96:ae:fa:fc:e5:5f:98:bc:95:14:5e:ee:15:27:
         c6:61:a8:44:87:24:12:eb:32:80:6f:13:2d:9a:3f:c5:4b:86:
         10:18:08:0d:e9:96:a1:72:fc:cf:60:73:92:7a:9d:a2:9e:b3:
         91:af:c7:74:3d:65:8b:51:2d:ac:51:b7:63:a1:e2:79:05:86:
         55:02:7e:9d:81:9a:ba:a7:c2:f2:47:fa:ae:50:83:61:48:4c:
         86:6f:74:d9:4c:71:73:0a:5b:54:c5:37:72:b7:10:2a:73:b9:
         45:7c:61:a8:c5:8a:33:67:ed:a9:d0:b0:2e:de:71:cd:0a:6b:
         29:25:56:2a:b7:93:3a:96:85:ae:51:22:39:dc:6b:1f:05:15:
         5f:90:3c:6c:92:5b:d9:f1:d7:19:c7:c1:3e:1b:e5:a0:13:51:
         f7:21:d0:d1:bb:76:1c:21:ee:49:08:03:08:94:5f:3c:52:7e:
         6b:8d:e3:8c:cb:33:a5:0e:30:d1:5e:3f:92:86:45:d5:66:ca:
         12:7e:36:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----