Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
File:                     u41koNwhmWscmeaMyVFpTik-3v4.mft (raw, json)
Hash identifier:          Vr9i1JwIUPJiiz7GRDOCvuzP/R9RQdijwFc6qYGLAzI=
Subject key identifier:   3E:C3:94:BA:ED:17:73:3B:D1:06:98:1C:A1:FA:5E:EA:B0:00:91:6F
Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
Certificate issuer:       /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Certificate serial:       019369DAA874CAFFBCA9A7FEAA8D357B96E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
Manifest number:          1384
Signing time:             Tue 26 Nov 2024 19:02:37 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:37 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:37 +0000
Files and hashes:         1: 5DsYsJQAGEI2o5IzOclNStRtnRU.roa (hash: kQxQHzBNnzYJ0Ccj+iK/r/ptihrgCTMFSm+O/t0Jj5o=)
                          2: kEKdt_4t5tH_5UB5pBQ_KNXrw48.roa (hash: z0l9eybFPCodKNQc8Kx+T6wxXKaflwhHolnLCdEduMg=)
                          3: u41koNwhmWscmeaMyVFpTik-3v4.crl (hash: XySNj72ZOHXBmH1npp7h7/MREZQOt3EMsmaEkn9sjd8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:a8:74:ca:ff:bc:a9:a7:fe:aa:8d:35:7b:96:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
        Validity
            Not Before: Nov 26 19:02:37 2024 GMT
            Not After : Nov 27 19:02:37 2024 GMT
        Subject: CN=3ec394baed17733bd106981ca1fa5eeab000916f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d0:12:56:e8:8b:e7:75:a1:ec:b7:66:d1:07:
                    15:cb:50:a3:3a:b9:3b:98:33:63:ef:f2:cf:c3:c9:
                    98:e9:56:e1:f6:6d:01:df:19:75:b5:39:39:d9:e0:
                    51:a5:a7:75:28:90:c1:f1:82:34:8a:9e:d3:97:b5:
                    a7:f5:6d:e5:6e:c2:3b:a2:24:69:d2:dd:26:4a:dd:
                    ad:df:ef:b9:9f:59:48:48:87:8b:4d:86:fd:9b:e4:
                    e1:68:a1:6a:29:9e:92:a8:97:a5:f0:ea:c3:37:2d:
                    a4:16:10:6a:7f:65:0f:a0:44:ec:2c:84:62:c2:ac:
                    20:1f:47:9e:ca:f5:1a:18:0c:dd:f5:57:fa:91:be:
                    0b:6b:d4:1d:bf:f2:f6:0e:de:c0:85:bb:28:f6:cd:
                    78:38:d4:ca:16:d0:2c:24:6b:2e:88:e2:99:b5:3b:
                    5a:aa:70:0b:79:8c:21:69:d4:7f:19:91:48:cb:93:
                    8c:8b:f9:63:d8:c0:43:72:87:09:55:43:8d:89:ac:
                    52:18:6b:8c:36:5f:4b:a3:72:62:ce:f7:87:db:6b:
                    59:4c:89:45:ff:ac:ab:27:d3:59:39:81:ca:f8:e7:
                    64:f9:23:6c:66:1e:48:39:b6:2d:af:4e:f9:b9:78:
                    a3:26:70:cd:09:e5:5c:9c:18:2b:b5:5c:ae:1b:aa:
                    26:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C3:94:BA:ED:17:73:3B:D1:06:98:1C:A1:FA:5E:EA:B0:00:91:6F
            X509v3 Authority Key Identifier:
                keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:8a:b9:c9:20:a5:48:c9:ba:59:71:63:af:5d:a4:87:d1:47:
         cb:58:3c:57:82:c9:3e:d1:c5:ae:de:4e:02:2f:2a:ed:3e:08:
         51:6e:4b:b8:fe:3d:6f:c0:c2:03:30:92:e6:ba:e5:17:ae:fd:
         2d:f9:3c:b4:2b:17:58:50:8d:11:bc:22:77:e1:ed:3a:3c:b6:
         f8:eb:07:20:69:a8:9c:c8:c6:ff:a8:c3:d6:7f:d9:7a:28:fa:
         8a:48:1c:e8:34:96:74:65:57:5d:8c:5c:ce:7f:6d:26:00:26:
         64:4f:7e:35:10:fd:d1:8d:1e:f3:d3:e7:a0:da:ff:88:ab:8b:
         98:cf:90:b1:7c:fa:c6:08:ee:a5:bf:18:10:46:bc:04:bc:9b:
         fe:a0:4d:3b:7f:4a:b3:51:21:2b:2e:a8:20:6a:57:3b:71:95:
         9d:8a:e0:66:31:5f:56:bf:b3:50:c7:a4:39:7c:0f:cf:56:10:
         29:ed:ff:66:e7:89:9e:13:d2:f7:83:0b:e7:d4:0d:5a:22:bb:
         e7:22:23:34:79:9e:6b:fd:8c:9a:88:d9:0d:f9:c0:c6:98:68:
         d8:94:08:96:2d:b6:dd:25:d0:64:bd:4a:a7:75:62:ef:db:45:
         a3:2c:d5:aa:3d:ab:01:ed:d9:31:de:d6:49:05:12:a6:44:56:
         dd:fe:2f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----