Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
File:                     4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft (raw, json)
Hash identifier:          lYWNV3obkSvvITvmhA2mRUK2valSHXQwK8fQR7ggbCI=
Subject key identifier:   4E:9C:AB:20:AF:2C:3E:75:99:4F:09:F4:99:5E:40:A7:3D:AD:CA:E1
Authority key identifier: E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
Certificate issuer:       /CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Certificate serial:       019238BAE8CA9D215EC958610275F5C15FA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
Manifest number:          11AB
Signing time:             Sat 28 Sep 2024 13:03:46 +0000
Manifest this update:     Sat 28 Sep 2024 13:03:46 +0000
Manifest next update:     Sun 29 Sep 2024 13:03:46 +0000
Files and hashes:         1: 4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl (hash: uRzoCSqthzBg9z7yKvGI0ZvVYx7/EHtRub2VPZspDFU=)
                          2: POLhW9JrFFsVUDo0zbXWFI78WNQ.roa (hash: AXHnPXKIT12W9uFRCSnflK5bnrQkH2czpFMGpp9hK8g=)
                          3: R2W8Nq6246WMpjEyUKm_NsQAx6k.roa (hash: Vp/uLLgwcLbp7RDu9MXrJ+hFhcQuNqcxTWIXP0ukL5k=)
                          4: Y6lH-sAOY9XRQ9gnqxIFd_Fm-wI.roa (hash: x4oVwdvIa2HUpXlBLQA6wSeCoAhrNf6krmwMsC4SMp8=)
                          5: qIjLU34vdixbV-3eXTk0OQ3Gabc.roa (hash: yav/Kb4UtPv3OLFg0VlZLoU51UXi3bUcOsfd6Jg9rCg=)
                          6: sLsv7PcXJFZp2s9rj7ItI0Db32Y.roa (hash: 5zzGJDTlHbFicMcMnulH5kEDreMgoA19lWizhPVsN/8=)
                          7: vU41uo_hwgVmdbBFBQIZvGXER88.roa (hash: fANXktw44O4Jgqe6yPyS/YwgHF0cBh0EFMOr2tQWq8I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:ba:e8:ca:9d:21:5e:c9:58:61:02:75:f5:c1:5f:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
        Validity
            Not Before: Sep 28 13:03:46 2024 GMT
            Not After : Sep 29 13:03:46 2024 GMT
        Subject: CN=4e9cab20af2c3e75994f09f4995e40a73dadcae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:87:e9:55:12:7d:9b:e1:ac:cd:c2:21:8e:d7:
                    36:83:8e:f4:c7:9b:a3:8f:c4:c0:ea:00:11:19:cd:
                    d6:0d:24:7a:c3:7f:f2:5d:7d:06:22:5c:73:31:95:
                    06:90:38:5f:72:80:52:3e:d0:70:c3:93:4b:57:b8:
                    18:d2:da:16:39:2a:8d:1a:e4:70:ed:55:8f:96:52:
                    bc:f0:8a:9f:43:c3:93:87:df:3d:b0:d0:a5:59:64:
                    78:a7:d0:e1:ef:72:11:75:09:75:ab:a0:23:f3:e8:
                    53:37:19:6c:0f:5c:8f:1f:02:9e:1e:e4:b0:87:3a:
                    f8:15:7f:ba:f7:8b:c7:78:62:97:71:1c:bc:bf:94:
                    e7:fb:6e:5a:66:4a:c7:b9:ec:05:76:77:cb:f8:3c:
                    01:bc:f3:66:97:d8:f6:74:46:34:5a:ae:b3:ad:87:
                    7f:bc:0c:41:f2:4f:cb:bf:23:4b:a5:78:e9:72:1c:
                    61:76:8d:e0:3b:20:9a:fd:f5:1f:05:88:c2:e5:f2:
                    96:43:97:4d:43:74:8a:e3:59:d3:9a:ef:8e:d6:e9:
                    10:95:86:53:a0:ac:d4:05:02:b4:64:da:69:ba:6f:
                    a6:ea:e9:93:e4:bd:0e:3e:49:96:2e:56:5e:1d:c4:
                    ec:36:d5:38:85:af:41:a4:1a:c2:b5:5a:df:ce:ee:
                    ec:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9C:AB:20:AF:2C:3E:75:99:4F:09:F4:99:5E:40:A7:3D:AD:CA:E1
            X509v3 Authority Key Identifier:
                keyid:E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:70:59:c4:3a:28:57:7d:f2:45:4b:35:cd:cf:e8:99:78:bb:
         41:3c:ab:0f:f5:5f:1a:6b:0d:24:f7:3c:5c:0d:d0:77:4e:94:
         a8:b2:c6:66:c2:12:13:88:93:5b:b1:73:5d:68:fb:45:9b:83:
         16:14:33:ad:06:57:01:4b:73:c3:5b:a7:cc:eb:d7:a7:6d:49:
         b2:2d:79:37:80:47:8b:90:83:09:64:4c:55:93:ae:7f:4a:e4:
         46:02:bf:4d:40:34:5d:1b:f2:3f:a7:c6:73:b3:30:b0:1c:13:
         c3:83:9a:66:6c:97:d8:fb:20:e7:c0:55:79:e0:48:f7:7a:2c:
         5e:77:d4:a7:08:6c:d7:2e:a1:ac:12:59:f2:6d:bb:81:95:43:
         3e:a3:e4:39:0d:34:dd:f4:33:64:11:30:fa:ac:cb:e9:db:df:
         0b:9b:03:f5:63:f8:58:f5:4c:61:b4:5a:1d:1a:e8:53:63:ae:
         3e:e8:15:b5:e6:95:18:b1:b2:a8:84:77:49:13:f3:12:4e:32:
         14:c1:32:dd:e0:87:c4:07:53:15:af:10:c5:f7:19:76:14:c7:
         ad:1a:0c:0b:5b:a8:7c:62:ee:cb:d2:88:b2:35:da:52:2b:79:
         61:ce:5c:94:28:52:ef:99:2f:dc:f5:7e:c3:48:c3:b7:a3:fb:
         0f:03:28:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----