Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
File:                     PjMt0plMbuiUNhWKLqwfSCkizSo.mft (raw, json)
Hash identifier:          R9siRTBqLSqeNJpbiH1zfhGGmK+nCSJK5zdRf2RZNuU=
Subject key identifier:   FA:BC:B0:81:47:1C:FB:B9:5F:5D:23:EF:6F:66:31:51:B3:FE:6C:21
Authority key identifier: 3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A
Certificate issuer:       /CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
Certificate serial:       01936A7DB13A61BB7F34B4D9C0F2A09A5C4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
Manifest number:          0492
Signing time:             Tue 26 Nov 2024 22:00:42 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:42 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:42 +0000
Files and hashes:         1: 6RHh7E7mRpZ2waqVsH11U5mZEPo.roa (hash: ypPqnd9Xdckm/heGnRcdzStghoFuTFQ+6x3n8LUWEtQ=)
                          2: 8EpT8M6gpYz2Ip7Ob91aI12cWaE.roa (hash: EQHlcf2Avw14yLWZqBdYqOpeJH9b/QHQ+CGGV6RDYZk=)
                          3: PjMt0plMbuiUNhWKLqwfSCkizSo.crl (hash: BHTgpdDF4WNN4OziHU5TqcAmi20I3vTL1UjjGXeUo4w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:b1:3a:61:bb:7f:34:b4:d9:c0:f2:a0:9a:5c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
        Validity
            Not Before: Nov 26 22:00:42 2024 GMT
            Not After : Nov 27 22:00:42 2024 GMT
        Subject: CN=fabcb081471cfbb95f5d23ef6f663151b3fe6c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fa:b4:af:f3:f4:1a:97:38:a1:15:b6:fe:b7:
                    cb:e6:f7:2a:64:69:d0:5d:17:c2:72:a3:46:a1:d4:
                    ce:7d:c6:56:21:2d:f8:4e:bf:cb:47:c3:9e:52:da:
                    12:da:96:dd:d0:c4:70:9f:fd:bd:93:66:f3:6c:78:
                    f0:d0:8f:e3:64:86:15:95:cd:de:e8:40:d4:51:b1:
                    96:61:3f:97:0e:d3:c3:87:4d:40:43:e1:14:25:d6:
                    75:19:53:35:f0:21:3b:61:44:b6:4f:d5:40:b3:b1:
                    b2:38:29:12:e8:e6:59:a7:c7:25:f5:a3:4b:ed:8c:
                    9b:c6:a0:fc:7c:eb:c2:56:e4:b7:e6:9e:19:28:83:
                    e2:32:77:23:ae:52:d1:78:76:ce:32:50:5d:ef:ca:
                    a1:38:3d:99:dd:9c:d4:10:20:79:26:bd:2f:b7:ac:
                    cd:51:47:ad:d8:29:63:38:59:ab:96:30:25:42:73:
                    5a:6c:c6:8e:e0:bb:ef:1d:35:0b:63:a0:63:83:a6:
                    d5:73:69:d3:bd:e3:cc:cf:09:3d:61:1d:03:7e:b9:
                    4d:b7:72:0c:12:15:de:0f:78:bf:90:20:e2:b4:9e:
                    5e:7e:e3:6d:ec:7f:c8:88:cc:77:e5:7b:29:7f:1d:
                    e2:23:b2:b7:52:b4:a2:89:41:ab:72:88:ed:c7:67:
                    78:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BC:B0:81:47:1C:FB:B9:5F:5D:23:EF:6F:66:31:51:B3:FE:6C:21
            X509v3 Authority Key Identifier:
                keyid:3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:cf:c6:66:39:1f:a3:52:7e:f1:7a:b3:47:d0:07:eb:aa:df:
         04:8a:8e:8b:17:8a:c7:40:54:e3:4e:c4:0e:f8:ae:db:9b:a6:
         dd:a0:a1:fe:c5:de:93:cb:5c:67:8f:b3:c7:56:61:86:53:49:
         46:3b:8a:79:b2:a6:4f:fa:57:1c:8f:82:5a:65:f5:e4:48:20:
         85:af:77:21:1d:9a:16:cc:f3:c8:fc:86:79:7d:46:e3:62:73:
         2f:0e:bf:d2:94:e9:f5:13:f4:2f:ec:f2:12:03:28:4a:60:4f:
         18:0d:cd:db:2e:a0:90:05:18:4a:a8:b5:d5:d7:76:87:ee:88:
         32:1e:5e:e7:a9:6c:a7:c6:c9:e7:f2:20:bb:bc:fb:03:23:d6:
         ee:6b:cf:81:0d:a9:3a:12:2a:40:1f:c4:5a:db:c6:5d:0e:74:
         3f:ae:7f:a9:3d:69:32:c8:2a:b7:8c:36:be:39:74:87:8d:b8:
         df:78:98:a1:88:37:fc:e3:e8:fa:34:9c:36:ce:bb:d8:27:24:
         a0:29:39:e0:1f:d3:b5:e6:a2:6c:ab:c4:e2:97:1d:bc:cd:cf:
         f5:76:33:5f:77:87:89:e8:5e:61:48:6e:f0:fb:d5:c6:8f:cb:
         3e:61:92:2a:c2:87:72:bd:d9:10:a3:d5:7f:db:24:2b:81:99:
         ca:a9:25:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----