Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
File:                     pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json)
Hash identifier:          vJjGqjDeBeKjWSooEwbWlEz+hacfPU5yfnqiB6f4A50=
Subject key identifier:   7D:1B:97:C0:06:0E:02:01:4F:4E:BB:02:E3:FB:20:07:58:8C:3D:63
Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
Certificate issuer:       /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Certificate serial:       01923A01E5DCE4A0AD2898E629F13FA2FFF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
Manifest number:          12DD
Signing time:             Sat 28 Sep 2024 19:00:55 +0000
Manifest this update:     Sat 28 Sep 2024 19:00:55 +0000
Manifest next update:     Sun 29 Sep 2024 19:00:55 +0000
Files and hashes:         1: RkdU9GCGBDr2eVANEpwczZxOmE4.roa (hash: 6ZdgJCTd5FxZ990U5ame1n9/OlAr8GHJE2fUnPV/F/E=)
                          2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: 1s+Fyc3UjmQT/yc8jbqcGr/ZuMW3kPqnVdGnCu6RVQ0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3a:01:e5:dc:e4:a0:ad:28:98:e6:29:f1:3f:a2:ff:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
        Validity
            Not Before: Sep 28 19:00:55 2024 GMT
            Not After : Sep 29 19:00:55 2024 GMT
        Subject: CN=7d1b97c0060e02014f4ebb02e3fb2007588c3d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:c2:a4:50:b1:90:5e:a9:3e:d2:fa:31:5d:
                    01:49:d6:d0:b4:73:ea:c4:05:0a:61:d0:fe:b2:2a:
                    c2:f7:8e:37:97:27:d4:28:9f:63:e7:8d:59:5a:6c:
                    d7:c9:df:ec:fc:e0:d0:95:41:bc:23:0c:2d:ff:3a:
                    0a:81:97:f9:d1:5a:00:67:41:8a:03:49:fc:7e:89:
                    f7:73:5d:30:e5:c9:de:b7:6f:57:90:bb:c6:15:6f:
                    6c:cb:77:b3:5d:24:e5:10:5e:9c:c5:09:05:3e:b7:
                    17:3c:6c:96:05:11:73:ac:e6:19:74:47:98:7a:91:
                    08:4f:a0:be:9c:da:83:33:ef:8c:00:99:8f:95:94:
                    05:ad:b8:3d:e7:51:b3:da:9b:40:c3:2f:fc:0e:05:
                    7e:8a:ba:f0:48:b7:dc:53:d6:78:ad:03:a0:88:1b:
                    4a:37:ea:fa:44:7d:09:70:92:0a:1e:e3:2e:83:c2:
                    35:36:9f:10:c0:54:03:ca:66:b9:f6:51:cb:2f:77:
                    e7:f6:a4:ad:d6:97:eb:e2:25:33:41:1a:79:ac:73:
                    22:aa:69:b2:a4:64:fc:e7:e4:f0:73:82:b0:eb:e5:
                    d2:d9:87:74:7a:10:25:da:04:22:fe:9c:be:f5:24:
                    b9:eb:d9:cf:8f:d2:e1:32:5b:69:31:fd:8a:31:23:
                    33:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1B:97:C0:06:0E:02:01:4F:4E:BB:02:E3:FB:20:07:58:8C:3D:63
            X509v3 Authority Key Identifier:
                keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:23:c8:7f:1a:85:61:7e:c4:b8:c7:99:f1:dc:93:6d:4b:47:
         21:cc:22:9e:02:e8:33:63:b7:bb:8a:bc:cc:77:40:e3:bd:4f:
         66:44:20:6b:c3:99:4e:48:42:53:99:39:14:db:85:7e:f9:53:
         57:49:7c:42:07:20:48:57:a3:9a:5e:45:dc:eb:08:0b:87:7b:
         96:8a:c6:a5:d3:18:ea:0c:13:e1:67:31:25:38:df:2e:d3:e2:
         39:77:ca:b6:a2:dc:5c:b7:af:67:c4:96:97:13:17:0b:f9:6b:
         09:58:9d:59:78:af:8d:f7:7e:c5:9a:c3:bf:3d:e7:2e:fb:4f:
         ff:c8:80:a9:b7:10:70:ca:d8:de:c2:fa:ef:90:b6:1f:0c:2a:
         15:ce:0b:be:ac:75:aa:51:a5:30:d9:3a:95:10:6f:e1:f1:3d:
         5f:29:a5:26:20:cc:18:5d:5d:8b:58:8f:ce:3e:ec:1e:d5:a7:
         07:f7:eb:9d:be:df:b8:e3:96:fe:32:be:61:9a:48:c7:63:d8:
         af:f4:dd:b7:ce:e0:66:2f:2e:1f:61:67:67:37:5d:05:cc:a6:
         01:0a:13:64:12:da:17:90:a5:53:27:a0:ee:12:1b:62:59:77:
         ea:df:76:c0:0a:6d:d7:5c:7d:0b:17:7a:90:f5:49:82:1c:71:
         9e:21:4f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----