Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File:                     NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier:          BGvAaS00OYYIDiVrFSneuASYXG3l0Rn3oaSRqjmLeV4=
Subject key identifier:   B4:2D:93:0F:5E:FD:FF:E9:FE:3B:F2:8A:53:3C:5D:6F:71:9E:E5:DF
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer:       /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial:       0193519963E93629E44E65A5B01FA04C83FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number:          1389
Signing time:             Fri 22 Nov 2024 02:00:27 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:27 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:27 +0000
Files and hashes:         1: 6DqkVvakqIMvyb0NWDM8IKT7pvE.roa (hash: ooUxWNs5fUlNBMxCqZRm4WJSZRraTG6z4uUZVgPUlUk=)
                          2: A5FxtElQLl-RBCXSEPljGrkCDA4.roa (hash: 8LRm0fgAtL8iG/EMt6XCgZNYlVSbeUOkBronYqbSl4M=)
                          3: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: c6wZNGHBOgFkfRkKOfXwd/ZvJk8yZXYj2whN2XDp3c4=)
                          4: QU3JAvPGHx6Fi3ztK-qewLh80qo.roa (hash: XVW4p0SRVe9E/QzqAVLa8xgU6jhaI7QWoeTixrkQveI=)
                          5: W_ZtfRjKxOod_iI7g6ck_dy3_oc.roa (hash: uQtNSZDalHG6xAwLJ4prwjDx/PhupeKfa+CqJL2ma3Q=)
                          6: jDt7u2twT7csb6qf0qeLdE5sAvE.roa (hash: iAHCFrZZt/cvZ+wiCQ6x/qWsz+ydMgJzqcHW2Qc8EeA=)
                          7: zosyD68uq9hZU5tVU4ktw4j8Vm0.roa (hash: ZjeSnAuWJ2/vEgIUdYR+KBUgskDzb3oxXjorNcTaTxA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:63:e9:36:29:e4:4e:65:a5:b0:1f:a0:4c:83:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
        Validity
            Not Before: Nov 22 02:00:27 2024 GMT
            Not After : Nov 23 02:00:27 2024 GMT
        Subject: CN=b42d930f5efdffe9fe3bf28a533c5d6f719ee5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:95:c5:e4:17:a8:d3:38:e0:e6:e7:32:31:
                    82:fa:e8:8c:89:55:00:7c:90:e3:28:20:26:a6:f1:
                    61:8b:69:26:c1:61:79:f9:65:07:74:36:16:6d:ff:
                    48:1f:d9:e9:37:3c:c5:f5:8c:29:6b:25:04:ea:42:
                    86:98:22:c1:d2:23:2a:34:8f:57:60:22:72:1e:81:
                    c8:0b:90:40:25:28:ec:3c:12:c0:33:37:88:35:1b:
                    6b:85:d2:1f:14:48:33:71:d1:2e:5e:b5:f5:18:e4:
                    50:e9:00:b1:76:41:41:9d:66:39:aa:09:b7:17:73:
                    ee:68:40:1a:40:9c:0f:c1:da:3f:12:28:db:6e:50:
                    5b:9b:f5:82:4a:63:1e:db:79:5f:b6:f5:de:ea:14:
                    17:53:0c:f6:2e:69:cb:a6:95:ab:e7:e5:9a:01:9d:
                    b7:f8:47:19:4e:4c:6c:2b:91:3c:e7:7a:08:b9:03:
                    53:72:0b:f6:fc:fb:8b:0a:18:8e:cb:ae:a5:1a:6b:
                    67:31:a7:63:57:68:4f:17:f1:67:1b:47:ab:18:a2:
                    58:f0:d7:63:49:4b:e5:39:45:11:1b:7c:2d:7c:a1:
                    71:01:94:0e:7c:00:f5:44:e2:29:a6:45:b6:63:62:
                    7e:dc:ba:66:71:f1:b3:9d:82:cd:e7:83:9a:13:f2:
                    9a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2D:93:0F:5E:FD:FF:E9:FE:3B:F2:8A:53:3C:5D:6F:71:9E:E5:DF
            X509v3 Authority Key Identifier:
                keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:af:d5:5b:0a:a5:18:db:aa:72:40:5f:d7:e1:5b:26:d1:59:
         43:19:b2:99:e0:3e:40:6f:b0:c3:d6:41:8d:8d:da:3a:bc:bc:
         c9:42:30:5d:6b:94:0b:05:22:86:18:b1:6d:55:bb:e1:fd:2c:
         52:a5:45:9a:07:26:c5:05:af:ec:61:f5:2a:db:b3:5e:c7:38:
         a9:a8:da:e8:cc:af:7d:b5:ab:19:6f:68:b0:a7:b8:13:4a:18:
         fd:a7:7a:31:01:5e:10:a7:b5:9f:32:38:8a:b3:4b:dd:89:cf:
         c0:63:19:e7:f1:ef:f9:d0:37:a2:7d:c3:39:38:ad:b6:9d:29:
         b8:32:75:8f:f5:5c:41:7f:91:0f:b5:2a:a7:55:97:75:d3:5a:
         99:f8:69:6e:ef:ca:33:4b:26:44:bd:57:95:b8:ee:13:2f:51:
         91:54:45:ed:0e:06:71:e6:50:e9:cd:e4:fd:09:53:ae:09:1c:
         e3:e0:fa:c3:0c:4f:5d:44:9b:39:85:b2:fb:27:90:6d:ed:14:
         be:53:2e:12:4c:b0:16:a8:66:11:63:29:17:f7:84:9e:2b:17:
         54:0f:de:d9:23:71:3d:0e:0f:fb:30:02:1f:ff:b5:87:d7:05:
         6e:56:df:18:fe:19:03:f9:a0:cb:cd:84:a0:d7:b0:43:ce:f6:
         a7:1d:61:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----