Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
File:                     3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft (raw, json)
Hash identifier:          39naYtHWh6ILFoqhBzwHdKvKoZv6rp6ka/roHYNhQic=
Subject key identifier:   70:89:CE:9D:37:39:F8:44:5C:84:BB:2B:36:77:6A:16:6C:4D:12:15
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Certificate issuer:       /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial:       0193568B6E1967E6D8A8E2425632202579F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
Manifest number:          1379
Signing time:             Sat 23 Nov 2024 01:03:18 +0000
Manifest this update:     Sat 23 Nov 2024 01:03:18 +0000
Manifest next update:     Sun 24 Nov 2024 01:03:18 +0000
Files and hashes:         1: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl (hash: 4vhAizgDo0u7nrcJv4yfonVAoDuQf51WzQG5IcAYA04=)
                          2: 4ThwsDyEGhNF6vplh1Ehhnhe7aQ.roa (hash: oAK8yGXXBfj2ex80tnZOP6I3bSGZ2GIHRiklxVlYLzI=)
                          3: Acw3PJE7CHHcC5gSYM6tyaON4MI.roa (hash: ldcfDgYuZiFXsjzG/JbzKXzx1776yXe41MCt202duWs=)
                          4: B409D_kT1Ungzb11RF3T1bL5IoU.roa (hash: rG8KLWXZHJF60puM8Xqwj3biByiMaCS1IRa6k34OTuY=)
                          5: H-JBm7JYRujvMJ9syXmluW8ISPk.roa (hash: b29SM4ZyoKk4dXmAnwmNQuIG+EoC3+gWKhDJ399dNKI=)
                          6: N1CJ2E5l6IEKJ2pnk_3_lmYeNxc.roa (hash: ZcF+JOwQ02VESP8Vjl4mDoWilRVVda69Dkmqr1jgTRA=)
                          7: bPrzCbZwM8NFsEePoIsndtfYPgA.roa (hash: rf7q0cYNkLzi48ftDTk6wbYTaXUrNnWgr0o7odYNHp8=)
                          8: moDabGIsdfBT-29x92m3epDrLMQ.roa (hash: fT8ScPlDeILt2TZncwZVd22KeWYDYfcynIu8eadViDA=)
                          9: wn2bIs8prhFXu2K0wBjzCvgZxCM.roa (hash: ZbvwXAOxAnhqMLWat9nLpl6cN09+BSs/l5xW991OE/Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:6e:19:67:e6:d8:a8:e2:42:56:32:20:25:79:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
        Validity
            Not Before: Nov 23 01:03:18 2024 GMT
            Not After : Nov 24 01:03:18 2024 GMT
        Subject: CN=7089ce9d3739f8445c84bb2b36776a166c4d1215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e4:50:b6:39:1a:73:ce:b5:e7:2b:f1:40:bc:
                    a6:98:3d:11:99:8e:99:76:e7:d0:fc:82:46:7e:4a:
                    44:45:b3:5a:23:9d:6d:04:c2:dc:ae:30:60:40:51:
                    a7:e1:56:4d:68:73:bf:17:b3:b8:41:ae:18:52:e5:
                    9b:a0:9b:f1:df:9e:86:59:3c:76:17:60:96:c0:4f:
                    a7:e4:ed:cc:3d:c6:18:0d:76:8a:87:53:bd:a0:4f:
                    55:6e:cc:ca:88:7d:5c:7f:8c:59:1b:e0:5d:1a:0b:
                    75:5f:26:c8:47:0e:d1:10:dc:8e:7b:0c:f0:86:41:
                    79:19:00:7b:4b:0b:6d:a7:25:1a:5b:0b:7b:56:51:
                    42:cb:11:56:79:d4:82:1e:93:72:a8:63:a7:0a:a5:
                    36:96:b7:d7:35:eb:d9:c9:81:cd:5a:7e:13:a2:46:
                    b6:b7:18:dd:bf:26:f0:3e:a7:6c:ae:b8:02:50:a6:
                    df:e3:c3:04:6d:d4:cf:a2:4b:21:d6:24:18:cd:ca:
                    f4:5c:e1:e0:c7:2b:28:14:9b:ff:93:91:cc:f8:87:
                    f7:dc:35:44:7e:4a:f8:99:4f:42:65:6e:3f:8c:db:
                    4a:0c:5e:56:e1:50:32:2b:8d:d3:52:b7:69:e9:4f:
                    67:b8:b1:b2:75:b1:ed:79:14:f2:e0:d9:4a:94:a2:
                    e9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:89:CE:9D:37:39:F8:44:5C:84:BB:2B:36:77:6A:16:6C:4D:12:15
            X509v3 Authority Key Identifier:
                keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:1d:fb:d2:8b:3d:0b:6b:4b:1e:4e:a4:29:80:5a:19:8a:b3:
         24:c6:f2:56:dd:e9:4a:c8:3c:5e:e6:36:e6:1d:3e:ef:4f:5c:
         28:6c:9e:47:94:1c:62:43:1c:a5:c0:67:5d:c5:11:ad:d3:c1:
         88:52:85:f2:5e:60:4e:ba:55:c9:c8:ca:13:29:70:7c:f6:9e:
         48:0a:3d:f3:0c:9d:32:3f:c2:31:e6:40:b4:ff:ba:dc:a8:45:
         77:37:54:54:83:5f:12:e7:2e:73:2c:25:f4:2e:4c:ec:44:bc:
         52:74:da:6b:41:d8:70:ea:ac:76:d5:07:8a:ed:3b:9d:db:76:
         f8:e0:15:a1:0b:6f:46:de:82:7d:b2:9b:18:f3:1a:e2:60:a7:
         bb:26:76:68:98:73:18:85:3a:f3:1a:1c:d6:d5:1d:d7:d3:67:
         4f:dc:ef:4c:19:d5:d1:80:d4:81:dc:87:72:74:90:22:e6:32:
         e1:3f:81:6f:cf:3c:c9:07:24:db:6f:b8:13:26:30:03:80:af:
         a9:cf:b1:7f:09:29:12:59:cb:ee:49:a3:f2:ae:5c:f3:0b:2e:
         44:3a:eb:38:4e:b9:87:34:d8:22:e8:1f:01:e8:83:14:e9:a9:
         df:09:b4:94:fe:a4:51:1a:a3:58:84:24:cb:00:fc:e1:4f:a3:
         ea:6b:c4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----