Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
File:                     CWv35rMqViP1S7nHN9uPgU6TrTk.mft (raw, json)
Hash identifier:          lio67s0X2mzNRj5fBuUtK5OQk3+1/oGrHPy6a/b2upg=
Subject key identifier:   A3:25:0E:65:7C:E9:51:E5:BA:0C:F7:CF:67:69:B4:31:FF:ED:96:71
Authority key identifier: 09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
Certificate issuer:       /CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Certificate serial:       01901CD86B0FDD33DCC243C22EA8455D8D39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
Manifest number:          0CED
Signing time:             Sat 15 Jun 2024 17:01:03 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:03 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:03 +0000
Files and hashes:         1: CWv35rMqViP1S7nHN9uPgU6TrTk.crl (hash: GLqnzTb9a9hoxSENfUKzXTipher9I9WEMxaGBcXJh08=)
                          2: Dx6BBI_ZqARp7brbxZiNJJ0FpqQ.roa (hash: 6Rs1sSm+weeZVji2YDMax9smq1txfdkx/Albn35jFms=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:6b:0f:dd:33:dc:c2:43:c2:2e:a8:45:5d:8d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
        Validity
            Not Before: Jun 15 17:01:03 2024 GMT
            Not After : Jun 16 17:01:03 2024 GMT
        Subject: CN=a3250e657ce951e5ba0cf7cf6769b431ffed9671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1a:85:d3:f3:3b:96:8b:1c:5f:e2:a1:da:d7:
                    ac:41:34:0f:d2:b1:50:0e:37:78:c8:eb:3f:20:05:
                    1d:1a:14:12:f0:82:46:4c:30:13:7a:2d:49:31:e8:
                    79:63:7f:b9:cd:b3:87:e6:40:11:a4:ad:49:a2:0d:
                    82:e6:5c:75:81:d1:f4:c1:dd:0f:3b:3b:4f:93:96:
                    17:b3:99:65:ed:75:14:93:af:6a:cf:1e:29:0e:97:
                    fa:68:62:31:b1:92:f9:e6:eb:63:ef:29:b4:09:1e:
                    69:5e:a6:92:31:e5:db:33:3d:de:2f:ef:79:93:45:
                    20:0f:b5:3e:62:19:83:b4:21:1a:2c:23:c5:02:5f:
                    8a:20:40:68:9e:ac:48:02:c9:9b:c6:7d:3d:3e:48:
                    b1:82:02:c0:d1:39:da:bc:97:22:bf:68:27:dd:b1:
                    fd:21:8a:b5:3e:e4:14:0e:ff:2f:36:fe:a2:6f:f0:
                    d4:85:01:d3:a6:2b:18:e4:76:3d:33:ad:dc:4f:b3:
                    8f:2a:20:d0:f4:c0:dc:d5:65:a1:6e:fe:06:ec:80:
                    1f:93:32:9d:43:53:0e:14:3f:27:d8:6f:9d:91:39:
                    47:e7:21:01:48:68:fe:87:4d:3f:16:33:5e:4d:f4:
                    95:44:a0:a4:6b:39:bf:18:ee:3d:62:4d:4b:1d:ce:
                    a6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:25:0E:65:7C:E9:51:E5:BA:0C:F7:CF:67:69:B4:31:FF:ED:96:71
            X509v3 Authority Key Identifier:
                keyid:09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:97:83:2f:ce:63:47:a8:69:89:d8:76:47:bf:3c:81:76:69:
         e5:f2:0b:a0:17:0f:75:d5:f7:cd:14:a7:99:6c:39:40:e0:80:
         ba:08:da:7e:88:f5:3e:b2:d6:6b:19:e4:76:a4:30:5d:1c:e9:
         2f:cb:58:fb:9e:cf:74:fe:0b:0a:3f:92:c1:98:34:e8:79:ed:
         71:eb:f4:dc:3a:77:df:bd:ea:8a:6e:de:7b:c5:bf:12:cc:e3:
         c4:13:b9:c7:f0:3e:16:af:6f:fd:87:38:4b:8a:82:f9:a5:c3:
         ca:57:03:a0:86:cf:58:6d:b1:84:e8:88:bb:84:66:b5:ff:51:
         91:07:4b:13:81:25:55:77:3b:7a:90:77:01:db:e8:c9:aa:1b:
         d6:1f:f3:70:c0:2d:43:b0:3f:69:33:70:d6:7c:9a:d9:e7:fb:
         79:de:5d:de:76:f8:06:54:a7:31:02:50:7e:23:b5:3b:9c:7d:
         17:ca:73:70:87:19:15:46:db:1e:4e:b4:b3:40:3b:ba:6f:3b:
         30:a4:a6:31:ec:ab:8a:a0:7f:35:f4:c6:9d:27:c8:7d:3e:e9:
         a1:ca:7a:7d:fe:a1:66:6a:fc:db:16:01:ff:47:27:8c:91:e5:
         a3:a4:62:d7:69:80:d1:88:90:f2:df:f8:a3:f0:1d:fe:0a:38:
         18:65:c0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----