Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
File:                     uBuyG1wYiQMNNlpUnyHVtCb53ag.mft (raw, json)
Hash identifier:          n0h1ObOheVqcPc0+r5544YJ+YrdcAL8UX3oYf42Nsgk=
Subject key identifier:   28:6D:5A:A9:55:79:EB:6F:18:90:C7:D0:C1:42:06:6C:C3:42:8E:62
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Certificate issuer:       /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial:       01935689361E20A44FE056EF9E9C49C7A447
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
Manifest number:          09ED
Signing time:             Sat 23 Nov 2024 01:00:53 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:53 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:53 +0000
Files and hashes:         1: MQTLc9Yld7HDiDqSCW99EsbLj3M.roa (hash: w9xxEeRXX73/A3qMddJz4zLSoZXM6hzKSTGTeE+Zqiw=)
                          2: uBuyG1wYiQMNNlpUnyHVtCb53ag.crl (hash: 0Gdn2UDgcJzAQNROz+phTs6nxbvumwvoaBaqUUTXAGQ=)
                          3: y5EVzuXhyXUUcU6ZVSjIkOjXGow.roa (hash: sMahEblKOPT6bwL8hM/7cEaTI1p9ziIqD5dMKvMGteE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:36:1e:20:a4:4f:e0:56:ef:9e:9c:49:c7:a4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
        Validity
            Not Before: Nov 23 01:00:53 2024 GMT
            Not After : Nov 24 01:00:53 2024 GMT
        Subject: CN=286d5aa95579eb6f1890c7d0c142066cc3428e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e0:69:77:c2:4f:15:6e:86:f2:29:cc:ca:98:
                    8f:8d:d3:b6:0d:5c:7a:bf:a2:ce:c9:d6:e3:b8:11:
                    86:50:aa:36:69:1b:02:ab:40:d2:2f:15:8e:08:e2:
                    79:7e:2d:11:52:da:a1:c3:b5:77:f2:8c:2f:b5:c9:
                    bd:83:20:2a:bb:f1:94:e7:37:1c:95:70:ea:f6:74:
                    ef:7a:b5:d3:38:98:8e:f2:1f:ec:48:98:b2:3f:f9:
                    2a:ca:74:bf:2c:99:d7:17:16:a5:e0:ae:ba:9d:52:
                    fe:3b:a5:2d:85:b3:06:22:01:93:47:3b:79:c2:c9:
                    c2:7b:9f:9c:22:3b:1c:51:db:92:09:12:e8:5a:4d:
                    ea:04:f0:58:55:39:14:c0:b2:2f:9b:21:63:27:4a:
                    5e:6c:e2:bb:2e:92:39:c2:06:0a:f9:51:a6:86:76:
                    b5:00:92:9a:5e:63:55:d9:2e:73:0a:aa:d5:81:70:
                    85:49:5a:2b:0b:07:10:69:02:ab:a6:cf:35:f0:90:
                    e2:cc:0d:1c:60:54:47:29:67:40:fc:2b:33:38:ca:
                    77:4d:a0:a5:a0:cd:2a:ac:39:be:78:b6:fc:2d:0c:
                    01:4a:7d:56:3f:36:3c:34:03:c5:92:35:a7:cf:fb:
                    16:8c:b6:a4:25:51:62:44:a3:70:d5:cd:97:ba:0e:
                    f1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6D:5A:A9:55:79:EB:6F:18:90:C7:D0:C1:42:06:6C:C3:42:8E:62
            X509v3 Authority Key Identifier:
                keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:1b:0b:cc:e0:34:89:55:2b:87:bb:f4:1e:93:01:da:1f:61:
         97:6e:86:87:0d:ca:14:86:67:c0:d3:97:e0:25:b9:ed:f5:04:
         d4:a1:27:73:3e:80:c1:b6:ce:5d:d0:f1:56:7f:b5:3c:6a:61:
         50:de:a1:f6:e3:ab:10:80:f9:bf:bd:5b:a6:0e:90:4d:b6:ef:
         99:c2:ca:ea:d1:21:37:e0:f7:b0:33:53:10:c7:c6:a8:41:0a:
         4d:78:88:d7:e9:55:b2:21:18:93:eb:d5:10:5c:bb:ea:74:e6:
         a8:ab:bf:83:f8:07:1b:a8:b0:11:60:fa:b0:0f:82:4f:7c:1a:
         ff:26:fc:c3:11:61:c0:e7:b4:ca:72:7a:4b:b3:c4:3d:6b:26:
         17:81:38:a3:05:83:7a:a7:1c:a3:74:ba:f0:4a:0d:82:4c:f8:
         e7:c3:14:4e:af:7c:48:53:25:f7:b6:cd:83:05:10:51:d7:b9:
         dc:90:85:f2:87:de:24:98:e1:50:21:95:5e:e3:46:8c:7d:28:
         b6:fe:0b:05:b2:3d:a5:7d:71:7c:84:8a:87:b0:44:40:0a:35:
         bd:ee:e5:ab:e2:fa:c2:03:51:cf:2e:00:93:37:9b:1c:e4:e7:
         37:6c:74:de:e1:dd:70:19:e9:d5:ed:16:98:b1:b9:e8:1f:89:
         a5:01:fd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----