Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
File:                     XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json)
Hash identifier:          5FVmLW7QxZ7z8s01byxmgMFiyJEGpZ1oblcF2Rl/wTI=
Subject key identifier:   30:EE:E0:10:CE:D5:92:10:3B:2E:08:4F:AA:CE:F5:E7:14:7A:19:70
Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
Certificate issuer:       /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Certificate serial:       019236CA2D1375A0FEF813069A48A54F7553
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
Manifest number:          09BC
Signing time:             Sat 28 Sep 2024 04:01:12 +0000
Manifest this update:     Sat 28 Sep 2024 04:01:12 +0000
Manifest next update:     Sun 29 Sep 2024 04:01:12 +0000
Files and hashes:         1: QNezt6ql0MkvZS6apeOCQm5vnfI.roa (hash: Aliy3ZabUKFjh4MDhQna6gQEe3t+yIZsY3qaOL937Tw=)
                          2: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: oVbSOxOZTNnQ08l2Be5Loqc19LjMLa/TO78bFLYAPP8=)
                          3: jprbCq9AFDjNP46V3MRZPP3_HnE.roa (hash: neDCtacWjpbbAnRDZzHD7aot59/ZjJQHbYrIZeEecgQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:36:ca:2d:13:75:a0:fe:f8:13:06:9a:48:a5:4f:75:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
        Validity
            Not Before: Sep 28 04:01:12 2024 GMT
            Not After : Sep 29 04:01:12 2024 GMT
        Subject: CN=30eee010ced592103b2e084faacef5e7147a1970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:83:ac:2b:63:7f:e6:ca:8f:d3:8a:be:3e:7a:
                    46:b5:bb:9d:2b:97:2e:05:5e:28:44:d6:19:38:73:
                    4e:76:4f:03:4f:e3:09:73:c4:14:08:b4:36:39:4e:
                    5e:61:94:30:03:ee:52:85:74:e6:f8:28:00:7c:ea:
                    6b:91:47:21:a0:e7:54:d8:fe:70:a6:50:55:14:2e:
                    b9:fa:25:95:61:c4:cd:a4:eb:26:49:3b:92:13:b7:
                    20:52:92:5a:75:8e:98:cb:88:63:36:1d:08:3a:aa:
                    80:06:70:81:32:4c:87:e5:74:01:46:80:e0:b2:c9:
                    a6:02:85:2f:8e:31:a4:67:ab:64:68:13:4a:f2:2d:
                    b7:cd:8e:a1:e1:48:4a:be:ee:aa:25:aa:90:05:56:
                    b6:9a:a0:b3:da:e5:71:73:6a:28:17:0f:e6:9f:13:
                    22:cd:9b:57:25:98:c5:ff:9a:d6:9c:78:b4:97:8c:
                    93:ad:eb:36:ec:96:22:11:01:16:10:15:b1:81:50:
                    52:bf:5c:d1:ee:af:8c:2e:75:45:59:f6:b9:8b:0c:
                    7c:2e:41:a1:da:f6:6f:26:12:29:b9:a7:d4:87:a7:
                    2b:d2:b4:b7:b2:11:44:5f:73:ef:98:54:62:d8:7f:
                    13:b1:c3:3e:c3:83:55:0d:4f:55:68:75:21:ba:7d:
                    be:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EE:E0:10:CE:D5:92:10:3B:2E:08:4F:AA:CE:F5:E7:14:7A:19:70
            X509v3 Authority Key Identifier:
                keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f6:c6:7a:5d:82:11:85:6c:e4:2f:b7:7d:7b:e8:cc:f2:5c:
         b8:39:26:7c:1c:5a:d4:d9:c9:b3:22:c1:d7:cd:94:71:f1:43:
         ad:14:48:01:dc:41:f9:62:25:3e:b3:e5:79:79:3a:b3:7a:dd:
         f3:69:ca:07:f3:cb:ab:8f:e1:66:3c:0d:3e:f8:61:0c:83:14:
         6c:e4:a1:c4:44:9f:7a:02:b8:c4:ab:01:8a:30:60:3f:8d:0c:
         36:82:33:c5:0e:63:e1:77:af:a1:6c:fe:93:39:67:e4:1c:88:
         68:11:7f:bc:83:66:29:e7:a6:b5:be:6f:a0:ac:72:4d:f2:29:
         57:08:66:6b:aa:d9:cf:41:89:96:9e:a5:51:9a:6b:8e:72:d1:
         35:a1:01:a9:74:5f:49:2d:54:ea:19:a8:f2:4a:2d:80:b2:40:
         af:32:ad:ee:fc:8a:93:8c:e3:af:8d:18:00:5e:2d:94:7f:b3:
         84:b1:d5:30:04:32:53:70:ea:26:ef:e7:e4:2a:30:4c:f3:85:
         c0:c3:f1:f0:52:33:5b:10:1c:90:99:ba:26:c3:8d:b2:75:6c:
         27:fe:8f:2b:4d:48:45:2e:8c:9d:d0:4f:2a:52:f0:ff:b0:28:
         b3:eb:9d:2f:31:2e:0c:30:f9:97:5b:f0:3c:84:67:1e:49:96:
         57:73:57:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----