Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
File:                     zGB34ATojv-PE7d0DfJU2eSN1XQ.mft (raw, json)
Hash identifier:          szxEjyyMj/haZ7C/9jDEI0DBBN/7PorXTEvIQ9oWCbw=
Subject key identifier:   3C:04:64:29:C5:39:D5:8B:FD:3C:E7:45:25:09:0A:1D:62:93:1D:C6
Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
Certificate issuer:       /CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Certificate serial:       019351D05262F9C87B65A0E1BDFEF47C2077
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
Manifest number:          1372
Signing time:             Fri 22 Nov 2024 03:00:27 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:27 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:27 +0000
Files and hashes:         1: DHPXADILhwM7Ks88M9bGR-JWRiE.roa (hash: kXxbk7h7yWQm9eHCBsOWkHTfYQ9v+PYBBkZ0LJriiWc=)
                          2: Gm7HwdreKur9PjT96Ii_d6OpGMM.roa (hash: OuGul3T09UAFl146LOqQgLbhIFFXyJPQgY0tXeqCcns=)
                          3: QflgQZH40g-Dw3_RnyBfFcfnLUY.roa (hash: w+35iVXGmnjYZnXXFL/R8718okpmyLroU1uuERbDixs=)
                          4: zGB34ATojv-PE7d0DfJU2eSN1XQ.crl (hash: k9O3eX/sfufwwMlWQowt4VvAggonspDylRiU2FmLxKo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:52:62:f9:c8:7b:65:a0:e1:bd:fe:f4:7c:20:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574
        Validity
            Not Before: Nov 22 03:00:27 2024 GMT
            Not After : Nov 23 03:00:27 2024 GMT
        Subject: CN=3c046429c539d58bfd3ce74525090a1d62931dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e0:20:1a:77:e7:32:67:bc:27:ba:22:0b:03:
                    85:3e:99:75:88:ce:84:01:10:c8:9a:be:7c:d9:e5:
                    3b:09:a6:42:33:e7:4d:21:be:b9:1a:89:c3:d8:2c:
                    93:e0:3b:0f:94:97:8c:91:0b:45:db:f9:a3:e2:2e:
                    ad:9f:f6:74:6f:1d:ce:dd:bc:4d:7c:7f:93:48:65:
                    52:1e:cb:85:62:9e:27:f9:f5:83:e5:7c:19:a1:1a:
                    d7:93:6c:a7:ad:95:94:ed:df:64:4d:c1:bc:c3:08:
                    ba:0e:68:e4:ea:80:f1:c2:58:65:f1:4b:6f:e9:a8:
                    63:99:32:6b:41:38:c2:f9:6e:a0:27:9c:7b:11:c6:
                    07:9c:e8:56:0d:e4:a0:2f:9b:57:19:a6:8d:a0:c1:
                    1c:2f:41:9f:8a:b9:12:9f:8b:c3:15:0b:a6:73:36:
                    43:52:3e:31:09:a7:12:14:c9:f8:aa:13:36:94:d7:
                    ce:c5:ce:35:e2:56:97:22:e8:2e:fc:12:78:83:10:
                    bc:ef:bd:d0:60:64:93:50:aa:ee:d3:40:8a:a2:70:
                    f7:03:83:64:8f:c0:6a:9a:a3:bd:98:d5:d7:b0:f4:
                    93:c8:d2:21:b8:06:2d:88:ce:8f:21:03:1f:68:ac:
                    00:aa:6a:01:2a:85:ee:8c:ed:98:9e:40:c3:e6:21:
                    ed:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:04:64:29:C5:39:D5:8B:FD:3C:E7:45:25:09:0A:1D:62:93:1D:C6
            X509v3 Authority Key Identifier:
                keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:b4:61:c6:b5:a3:f3:29:b2:ef:37:44:4e:af:78:72:f6:10:
         5b:e2:d2:dc:63:2f:4f:d6:77:3f:d9:a4:c5:3f:78:74:9d:34:
         3b:4d:0a:f1:95:b9:2f:8c:ea:0c:f4:a5:c4:6d:65:4a:9d:f4:
         72:45:b0:b6:13:f6:b3:74:eb:e6:37:f9:ef:cf:b9:4b:cc:ec:
         a1:f1:21:ee:5f:35:f1:fc:70:8f:41:99:fb:c8:ed:d4:b6:fa:
         90:31:8b:b4:cd:e7:86:e5:01:b9:c3:53:1a:d1:ca:97:82:f1:
         03:92:4b:d4:8d:f5:dd:20:07:85:5c:09:2a:cc:77:09:05:24:
         14:0a:42:8f:bc:80:6b:bd:51:7b:7c:46:a3:7b:a5:c0:68:81:
         58:c5:dc:88:50:44:10:10:3d:53:ef:c4:49:14:2a:fd:89:f6:
         10:5e:39:e1:42:9b:12:96:6c:72:4d:ef:1a:c4:3f:47:f2:55:
         66:5d:9c:28:43:c1:74:cc:ed:23:6f:fa:09:9c:d0:f3:46:f4:
         97:ae:71:26:e4:c9:5d:43:83:10:9e:38:3f:3b:d6:c1:0c:ec:
         96:38:0e:7b:2f:ea:aa:e3:a1:2b:e3:3e:ec:db:7b:87:73:82:
         74:90:84:5b:1c:3d:45:78:14:c8:e7:1b:30:f3:71:e7:64:cf:
         63:5d:ac:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----