Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft
File:                     n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft (raw, json)
Hash identifier:          PyuamFsusMgo+KMa4xTPEltofhODB1xvjkt0Pe1X420=
Subject key identifier:   32:92:34:A7:C7:B7:0F:F9:5C:6F:D0:3F:3C:2C:98:EC:0D:92:DF:F8
Authority key identifier: 9F:AC:2F:DD:DA:BF:20:EA:44:98:70:E1:DC:C0:91:5E:60:14:83:46
Certificate issuer:       /CN=9fac2fdddabf20ea449870e1dcc0915e60148346
Certificate serial:       01901DECF8279E12779912A32776F0B5D06A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 22:03:07 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:07 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:07 +0000
Files and hashes:         1: BzuDQI2GXbkx15oIe2OIh2czTko.roa (hash: QaDa8I82qEpPXpwXoydBAoEkA0b5ds3rGsF2hWPTGH4=)
                          2: JTgHtqLEHT9Y8exXU_YJHp7XmaU.roa (hash: PhbWloo1KxWU7Wuoy5N8SoW5TDQw2qlQVDRsoWcKPoA=)
                          3: n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl (hash: Fuxz11OKkN4SL+kvpNoCjl7IPY8EJcQN06X8m4509vU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:f8:27:9e:12:77:99:12:a3:27:76:f0:b5:d0:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fac2fdddabf20ea449870e1dcc0915e60148346
        Validity
            Not Before: Jun 15 22:03:07 2024 GMT
            Not After : Jun 16 22:03:07 2024 GMT
        Subject: CN=329234a7c7b70ff95c6fd03f3c2c98ec0d92dff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f4:56:a5:d6:28:69:1c:ff:40:0b:80:a4:20:
                    c1:cf:52:86:98:8c:5f:84:ce:26:21:70:63:10:e0:
                    14:ef:75:d0:7e:5f:20:65:fe:69:ac:7e:79:65:f9:
                    03:a8:e8:11:0e:b2:cd:68:5c:f9:11:13:7c:49:d4:
                    89:11:66:84:d6:2d:e0:ee:15:f1:63:0f:c3:60:a2:
                    f9:6c:2c:eb:d6:ec:ce:79:62:7d:b5:c1:1e:7e:55:
                    dc:19:13:23:60:fa:50:8b:22:60:de:88:ea:ff:7a:
                    92:49:3e:11:f7:b4:c1:be:ea:a3:ae:66:38:b0:15:
                    9e:da:4f:a8:be:86:1f:7a:de:65:74:6a:da:03:64:
                    c5:ea:a0:7b:b2:29:e2:f5:1f:4e:e5:d9:25:b3:cb:
                    ed:1e:14:c2:1b:f1:99:ef:a2:30:a4:b4:06:3b:95:
                    9d:a1:37:cf:c8:ca:b1:f3:36:5f:e3:4f:c6:92:81:
                    9a:fb:a6:ac:b4:d4:84:90:4f:63:28:02:a8:8b:4c:
                    90:76:62:a0:3d:48:b2:22:a1:53:46:3a:a5:03:4c:
                    0b:f5:f9:9e:b5:66:a1:a5:1b:6e:bf:5c:4d:c2:75:
                    79:a0:56:b7:1d:6a:56:75:7e:5f:b7:21:36:ce:8e:
                    e1:c8:4d:dc:26:2e:a5:54:c9:b2:df:7a:b8:f8:f6:
                    6a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:92:34:A7:C7:B7:0F:F9:5C:6F:D0:3F:3C:2C:98:EC:0D:92:DF:F8
            X509v3 Authority Key Identifier:
                keyid:9F:AC:2F:DD:DA:BF:20:EA:44:98:70:E1:DC:C0:91:5E:60:14:83:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:31:a6:c1:31:1c:74:8f:92:39:50:3a:e2:e5:a7:1c:e2:10:
         7b:c4:61:d5:53:9e:11:33:4d:74:23:b1:4c:4f:b5:84:7d:a2:
         ef:39:63:cb:a4:08:49:8d:58:d3:65:20:d1:ab:20:d6:7f:fd:
         a5:da:b6:96:bf:d6:2c:d0:43:11:e8:a9:ce:39:60:73:4c:a7:
         d6:ae:86:6f:b8:7d:36:72:20:37:df:f4:37:7c:ea:83:5e:b0:
         fa:50:4f:62:19:f7:22:07:d7:95:92:b6:a3:a6:7d:86:1e:73:
         94:75:40:ba:c9:99:4b:4a:b4:36:32:f2:d2:f0:b5:9f:3c:cf:
         65:7b:13:40:85:d2:9a:5e:bc:88:bd:4f:04:13:c0:3c:03:2c:
         cc:a2:6c:0a:c8:45:84:9d:6c:3b:bc:38:ef:5c:e1:fa:bc:46:
         55:c1:d9:71:d5:ea:ef:87:8f:5f:9c:e9:ef:fd:ec:f9:ac:ee:
         b3:c9:0a:01:83:5e:59:0a:82:5f:8a:60:8e:19:cc:d5:57:2d:
         77:d6:aa:96:fb:02:e3:62:6e:07:47:39:38:f7:11:27:b2:38:
         83:6a:fb:9a:cb:b9:93:c1:ab:8c:a4:08:fd:89:c4:95:72:7f:
         a9:29:7d:01:e2:05:e4:b8:80:72:04:bc:89:8c:f3:fd:44:4a:
         e8:84:c3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----