Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
File:                     UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft (raw, json)
Hash identifier:          9/fcdJU/Yc4X6duUiB2LPtqZzWTjyqrHOR1IRG9AgwY=
Subject key identifier:   2F:24:6C:5E:EF:3D:9C:65:68:2E:DE:E6:F1:D8:D3:BB:C4:34:6A:60
Authority key identifier: 51:3B:DF:EC:55:B0:48:B0:D2:F0:3B:43:BF:66:E3:E6:7E:86:55:3F
Certificate issuer:       /CN=513bdfec55b048b0d2f03b43bf66e3e67e86553f
Certificate serial:       019236CA6BF2E82CDC257EF9022555A0F64D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
Manifest number:          107D
Signing time:             Sat 28 Sep 2024 04:01:28 +0000
Manifest this update:     Sat 28 Sep 2024 04:01:28 +0000
Manifest next update:     Sun 29 Sep 2024 04:01:28 +0000
Files and hashes:         1: UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl (hash: E8odI3paQrHX0HdFx4tIz5CiK/8FA5IfT1WykuK9NAs=)
                          2: mZfusqn72nvh7ikmIXZ5RDZ2FiQ.roa (hash: YmRW/zQP8eF3tsuP3iodhIsuBaih56jecbnNp19nP9k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 04:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:36:ca:6b:f2:e8:2c:dc:25:7e:f9:02:25:55:a0:f6:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513bdfec55b048b0d2f03b43bf66e3e67e86553f
        Validity
            Not Before: Sep 28 04:01:28 2024 GMT
            Not After : Sep 29 04:01:28 2024 GMT
        Subject: CN=2f246c5eef3d9c65682edee6f1d8d3bbc4346a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1e:e0:4f:d3:86:95:fd:7b:ed:da:29:32:d3:
                    29:3e:c3:a0:fc:26:3a:b1:19:1f:23:7b:56:a8:9e:
                    ea:fe:bb:f6:fb:ce:8e:69:a7:2e:de:84:61:b0:7a:
                    81:9a:36:b8:db:e7:68:6c:31:ec:93:30:65:61:df:
                    8b:9d:f2:d7:45:0f:56:5e:ce:f2:6d:10:e1:d2:ab:
                    7b:65:ac:27:0a:24:0b:01:04:49:87:58:5c:52:78:
                    21:33:42:a6:82:8d:c4:81:a3:f2:80:ea:f4:b1:22:
                    fd:a3:c7:4d:6e:33:a5:f9:bc:71:00:23:5c:55:7d:
                    88:c8:f9:98:93:70:4f:14:5e:b6:a8:79:e9:a2:0f:
                    b8:75:81:b2:8f:f7:e2:ed:a2:17:7f:c4:c1:89:e9:
                    f7:6c:42:56:34:22:d8:4c:18:ec:78:8a:6d:97:0d:
                    93:ee:1f:1a:25:2e:03:ab:aa:9a:e9:9e:fc:2f:d1:
                    80:97:79:47:65:19:ce:b0:c4:a2:e5:c0:8c:3b:03:
                    af:d3:14:9b:b2:b1:8e:0d:43:3e:35:cc:73:50:39:
                    65:14:6d:69:aa:ee:80:75:f4:82:ce:fa:fb:c3:97:
                    9e:7c:9e:1a:de:5d:a6:20:48:f3:c9:93:29:b6:94:
                    de:de:51:94:50:5b:2f:51:b7:34:31:5f:03:83:9f:
                    0b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:24:6C:5E:EF:3D:9C:65:68:2E:DE:E6:F1:D8:D3:BB:C4:34:6A:60
            X509v3 Authority Key Identifier:
                keyid:51:3B:DF:EC:55:B0:48:B0:D2:F0:3B:43:BF:66:E3:E6:7E:86:55:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ec:61:4f:21:a2:44:ea:ea:db:09:af:94:91:38:d5:ac:88:
         4e:f0:70:f9:a1:78:d3:c1:67:a1:a2:06:8b:31:a2:1b:73:3f:
         60:de:6a:13:63:67:d2:3c:b2:2c:e3:09:9d:fd:f6:24:9f:eb:
         60:0c:aa:98:23:8e:4f:ba:25:7b:0e:42:94:92:50:c1:5a:bb:
         16:61:db:49:93:89:63:db:59:60:2b:65:11:57:f6:d5:e6:d8:
         01:ca:43:9d:82:35:a2:c1:42:92:9b:99:8f:0e:e1:98:a1:84:
         c6:9c:d5:f8:fb:c1:71:e7:75:fa:83:3f:33:e1:b6:b0:27:34:
         a5:6e:fb:71:17:27:e7:f7:47:c9:a5:0e:32:a3:86:2b:23:55:
         1c:d4:f5:ad:17:ca:aa:0d:91:05:94:48:f5:c9:72:55:f8:5e:
         66:b6:a0:7d:91:a6:e2:d0:cb:8a:67:14:65:6a:b6:13:79:c1:
         d1:09:25:78:60:45:3e:f6:34:81:18:97:74:67:4f:4f:25:d0:
         4f:9a:cb:83:a3:20:82:56:c3:81:88:28:51:c0:ca:74:c4:11:
         bb:41:93:86:4c:92:9d:3c:15:e2:8f:fa:14:1a:41:bc:7c:e4:
         cc:cf:04:70:72:2b:a6:50:b1:96:ff:4a:f7:fb:01:8c:99:d7:
         7d:07:a0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----