Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
File:                     N9J_wkRD_N1LG2XPyAeMShQon54.mft (raw, json)
Hash identifier:          JwfdzMiePMWHvPdpwbHO9cp41kV3lEffDxnhkwbZc6E=
Subject key identifier:   C9:7C:04:0D:77:AC:8D:F0:55:B4:FD:33:31:95:A9:59:86:69:8B:C4
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Certificate issuer:       /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial:       019354D12AF357F0D9066CDE8C00B288B505
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 17:00:14 +0000
Manifest this update:     Fri 22 Nov 2024 17:00:14 +0000
Manifest next update:     Sat 23 Nov 2024 17:00:14 +0000
Files and hashes:         1: FeTp24wy4fnE-L9j1NV3Xf67GYU.roa (hash: ltn6Xic1raUjJKSr/NAl8SOLlc/8faxZUHvmGzdClQk=)
                          2: N9J_wkRD_N1LG2XPyAeMShQon54.crl (hash: DRIKzswL9BUZFlHLWTZTLcZ1XKqIRI0+q7yxIjMCssA=)
                          3: bZjB-YUnh_aOTklfIJ_7uzsbjQo.roa (hash: ICLwRWnMNjTZ26ziF9ZZtK9h/aTNp+xEnb8XqsQpOJk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:d1:2a:f3:57:f0:d9:06:6c:de:8c:00:b2:88:b5:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
        Validity
            Not Before: Nov 22 17:00:14 2024 GMT
            Not After : Nov 23 17:00:14 2024 GMT
        Subject: CN=c97c040d77ac8df055b4fd333195a95986698bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:41:62:13:bd:7b:dc:dc:7f:2d:06:46:58:5c:
                    67:06:c5:7d:16:26:e4:f3:8e:13:63:16:2a:df:3f:
                    59:56:f7:6e:75:40:7f:12:5d:84:52:a6:85:e6:c3:
                    fd:4e:e7:e9:12:b2:95:eb:c6:19:eb:f9:69:47:e9:
                    52:5f:f5:65:86:06:18:78:99:e3:06:e2:d4:dc:b1:
                    fe:9f:41:56:f4:4c:7a:b6:61:7c:2d:06:9e:1e:9a:
                    6d:80:31:80:31:9c:3d:0f:18:0d:07:0e:43:52:57:
                    68:d3:93:ee:99:e3:a7:dd:b6:f4:70:83:1f:db:02:
                    c4:ee:82:cf:4f:af:e0:4c:c1:c2:24:d6:b6:b6:4f:
                    f0:16:0b:36:64:a6:7d:cf:0a:c8:79:c3:3e:db:67:
                    42:e7:a9:63:ac:35:ba:75:5e:d6:6e:15:3b:e2:65:
                    83:86:0c:4c:ba:e7:6d:6f:db:0a:37:db:1e:83:4d:
                    60:3a:1b:48:cb:14:ce:62:78:34:a7:06:65:39:e6:
                    4f:87:55:05:4c:5f:ec:ae:11:cb:6a:16:5d:b9:e7:
                    7f:47:d8:91:a4:d2:eb:b1:69:5e:e6:9e:9a:bb:78:
                    4a:93:d8:27:69:31:e3:6d:95:25:63:af:48:b0:2f:
                    72:ae:08:d0:dd:14:d8:f2:25:19:5b:39:a5:16:b8:
                    65:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7C:04:0D:77:AC:8D:F0:55:B4:FD:33:31:95:A9:59:86:69:8B:C4
            X509v3 Authority Key Identifier:
                keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:2c:97:5c:fd:d6:97:31:31:08:b3:4d:dc:6a:5d:fd:bc:ab:
         49:1a:c4:d4:e3:97:51:f9:a6:94:30:35:19:66:ee:d7:e5:31:
         37:05:6e:22:2c:ff:be:33:41:b7:a6:2a:84:39:02:7c:ba:ba:
         a2:39:d1:17:95:cf:14:82:12:60:58:f0:99:32:2f:a2:d6:e1:
         15:93:c8:11:62:c7:fa:2d:e2:df:ef:64:89:5d:ef:93:a2:26:
         3d:ff:94:7d:78:02:7d:94:72:59:0e:6a:87:cf:49:c2:b9:e2:
         34:c5:30:8c:81:ee:9a:71:06:27:6a:89:cb:48:ed:36:c0:e0:
         13:9a:6f:f4:57:ae:f1:07:4b:7a:e8:f9:13:85:68:fa:ec:1d:
         d3:eb:3f:53:66:da:32:7a:eb:bd:a5:3f:87:74:91:dc:ce:a1:
         08:14:20:dc:95:a8:3f:8b:01:9d:5f:80:74:39:2b:1c:92:f1:
         f5:a3:e6:26:14:e5:0f:85:14:02:12:a4:20:1a:a7:37:bd:90:
         66:c4:3b:f5:58:eb:e3:c7:bb:f8:47:dd:98:08:67:c1:19:07:
         d3:bb:b6:b2:34:13:55:a4:49:fc:16:d4:25:77:cc:61:78:80:
         9d:2b:87:82:fe:d8:4d:f8:d6:c0:25:6b:08:0d:06:c6:ee:6e:
         c3:3d:ce:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----