Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22ffcc-592a-4a1c-b515-c1aefed4d8f9/1/JnKhsaeOoYE1me_qnI4DLp70JpA.mft
File:                     JnKhsaeOoYE1me_qnI4DLp70JpA.mft (raw, json)
Hash identifier:          V828Fpz2i34mbTRYWDTqktrCMc0KtEG3rL11XzTi9jg=
Subject key identifier:   38:AC:69:9F:A9:26:FC:26:AA:5C:B3:4D:D5:95:6E:0C:36:D1:15:FB
Authority key identifier: 26:72:A1:B1:A7:8E:A1:81:35:99:EF:EA:9C:8E:03:2E:9E:F4:26:90
Certificate issuer:       /CN=2672a1b1a78ea1813599efea9c8e032e9ef42690
Certificate serial:       0193549BEDF6D6CF78891B34A0536B1B2621
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JnKhsaeOoYE1me_qnI4DLp70JpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/22ffcc-592a-4a1c-b515-c1aefed4d8f9/1/JnKhsaeOoYE1me_qnI4DLp70JpA.mft
Manifest number:          01B3
Signing time:             Fri 22 Nov 2024 16:02:05 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:05 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:05 +0000
Files and hashes:         1: AA4oL9YkOM4q5O6dYXav6rt4kiQ.roa (hash: dmUDNxcX9rw34QTW+P1q/8nlZPsM9MuxnEX1AaS0drc=)
                          2: JnKhsaeOoYE1me_qnI4DLp70JpA.crl (hash: fovnh/5C1pAu9Xi+Hm0xLeIafi7zt2vjs1g/D7i64ng=)
                          3: P3YtcKwDrmzzPBWnSwXWiYCGZEQ.roa (hash: dt2UUChcdCX18tspBVqIaCaZ9yQH1DCzsuCux/0b3RY=)
                          4: iZ_pzZy3rbfuLYmK_mUmFHNhoo8.roa (hash: GBAA+q2Brv9ayOpHt3MF4JxA67XpyQEtJqMYRKC+S5k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/22ffcc-592a-4a1c-b515-c1aefed4d8f9/1/JnKhsaeOoYE1me_qnI4DLp70JpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/22ffcc-592a-4a1c-b515-c1aefed4d8f9/1/JnKhsaeOoYE1me_qnI4DLp70JpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JnKhsaeOoYE1me_qnI4DLp70JpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:ed:f6:d6:cf:78:89:1b:34:a0:53:6b:1b:26:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2672a1b1a78ea1813599efea9c8e032e9ef42690
        Validity
            Not Before: Nov 22 16:02:05 2024 GMT
            Not After : Nov 23 16:02:05 2024 GMT
        Subject: CN=38ac699fa926fc26aa5cb34dd5956e0c36d115fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ee:8b:96:a9:63:c2:ae:79:36:82:8c:50:80:
                    6a:d6:27:e5:df:11:4e:c8:bd:24:6c:0a:97:7a:07:
                    b1:54:68:65:c0:ae:87:28:81:38:43:bd:31:be:bb:
                    28:5b:07:75:78:1f:c3:df:b9:74:c3:3e:9e:bd:4e:
                    1e:26:e6:80:9f:62:d9:7a:c7:3c:2b:8e:f3:f6:97:
                    1e:c7:53:ca:46:63:6f:f9:66:51:5f:41:10:62:10:
                    78:41:23:f1:9b:5e:4d:fb:33:1d:86:81:ff:ed:7e:
                    d5:cd:6c:ed:3d:90:f7:45:5f:d0:bc:26:b6:52:3f:
                    63:67:10:6c:67:b8:8a:81:04:ae:95:ec:0d:9b:02:
                    37:f4:e5:39:23:69:78:0d:b5:5f:70:12:81:2c:e0:
                    f5:03:b5:6e:dc:08:99:7b:8e:41:29:d4:bc:b8:fa:
                    7b:6f:cc:67:b5:ec:f4:00:8d:a7:64:6f:0b:47:e8:
                    bb:96:8a:27:13:a7:6f:e2:12:98:d7:1a:f2:13:bd:
                    b5:77:2f:98:06:ba:c0:5f:4a:95:91:ee:95:a4:f7:
                    a3:85:16:d0:bc:52:96:79:43:34:67:8c:f1:fe:6d:
                    3e:69:43:b1:b1:69:98:52:1b:56:4a:fc:9f:54:04:
                    51:5a:3e:d5:b9:3e:03:42:50:4d:9e:08:fb:75:6d:
                    e7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AC:69:9F:A9:26:FC:26:AA:5C:B3:4D:D5:95:6E:0C:36:D1:15:FB
            X509v3 Authority Key Identifier:
                keyid:26:72:A1:B1:A7:8E:A1:81:35:99:EF:EA:9C:8E:03:2E:9E:F4:26:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnKhsaeOoYE1me_qnI4DLp70JpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22ffcc-592a-4a1c-b515-c1aefed4d8f9/1/JnKhsaeOoYE1me_qnI4DLp70JpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22ffcc-592a-4a1c-b515-c1aefed4d8f9/1/JnKhsaeOoYE1me_qnI4DLp70JpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:68:8b:35:64:75:96:f4:0d:a1:4c:0a:e0:cd:45:53:58:c3:
         73:56:bf:ea:56:9c:03:19:5e:90:95:df:a7:af:d2:c5:8e:6a:
         ba:53:d8:80:c7:84:a2:da:5d:7c:1b:9f:78:3f:48:5f:31:50:
         02:f5:67:dc:73:ae:1b:1e:ab:c0:e8:b8:3e:c9:6c:39:40:0a:
         c5:d4:be:71:26:56:8a:4a:31:38:2a:05:26:46:a9:ac:9b:84:
         2a:69:46:2e:ce:65:0e:8c:9d:6d:8c:0c:11:4b:12:e1:64:2c:
         b5:4d:ab:98:ab:c1:59:c1:b6:d6:dc:52:65:c1:9c:d7:6e:84:
         40:29:f6:df:50:42:6f:ac:df:c3:5d:e5:16:f0:d3:56:1c:3b:
         20:4b:cd:2f:9c:c6:a7:5b:c5:ce:0a:d8:fb:d8:af:29:c7:2e:
         99:d3:da:f7:e6:fc:cf:b9:bc:58:96:b2:01:2f:ae:56:5f:95:
         8e:3b:fb:0e:4f:11:f8:df:7e:d8:18:7c:a2:0b:5f:36:18:d9:
         57:69:54:b6:ea:45:ec:5c:d3:f1:71:00:bb:80:ca:2c:35:aa:
         b2:f4:2b:48:79:34:d0:70:a1:7c:56:e3:75:e0:fd:98:b9:4b:
         1c:af:a3:33:8f:9e:7d:c2:75:d1:a0:00:9c:4c:24:b2:13:2e:
         5f:d5:80:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----