Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
File:                     HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft (raw, json)
Hash identifier:          Y6H9SlwZXxfFIR5AE/J/iVolbdOuQC2sdEbZQhn3uCU=
Subject key identifier:   43:88:43:C2:83:86:DA:D5:90:21:BD:E6:35:A8:42:C6:F5:AC:A3:06
Authority key identifier: 1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
Certificate issuer:       /CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Certificate serial:       0191FA105B14BDB7C8BC9117DC307D7A9E7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
Manifest number:          014F
Signing time:             Mon 16 Sep 2024 09:01:01 +0000
Manifest this update:     Mon 16 Sep 2024 09:01:01 +0000
Manifest next update:     Tue 17 Sep 2024 09:01:01 +0000
Files and hashes:         1: EzcDLbbI_nULJmirsgjMXDmUAf8.roa (hash: oUDWTU9eInYHu7lDzOxx55bU6+g/CInPJo6zzzGFvQ8=)
                          2: HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl (hash: JzL7Ug7YB2XrEbXHmZWnLGQWIRryScFqOoKVdsn4UAw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:5b:14:bd:b7:c8:bc:91:17:dc:30:7d:7a:9e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
        Validity
            Not Before: Sep 16 09:01:01 2024 GMT
            Not After : Sep 17 09:01:01 2024 GMT
        Subject: CN=438843c28386dad59021bde635a842c6f5aca306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:92:eb:6a:8a:37:a5:b5:af:17:42:95:f1:8a:
                    bc:e0:b5:50:61:23:29:f8:c6:ce:7f:44:50:b2:f7:
                    3a:2e:9b:60:3d:10:3b:ea:0e:42:29:41:4d:76:95:
                    2c:fb:39:11:11:63:75:97:d6:02:52:95:ba:32:90:
                    80:2c:fd:13:54:48:e3:34:9d:87:29:c0:e9:1e:10:
                    0b:ee:56:db:3f:fc:6c:b7:57:2e:52:e1:1d:34:b4:
                    7c:0b:18:89:97:59:ad:23:e1:48:a2:3b:37:43:11:
                    4c:37:f5:0f:ba:be:b3:9c:be:73:43:cb:f6:2b:94:
                    6c:eb:cd:17:d7:f2:81:86:c2:bb:97:85:0b:13:9e:
                    e0:4b:a1:c3:af:50:bf:8f:58:38:1e:c9:59:52:e3:
                    89:01:94:2e:8e:6c:29:e5:43:25:93:27:a0:85:fe:
                    5a:f3:6e:b1:86:0f:90:9a:9c:c7:98:47:0c:ae:98:
                    c0:7e:cf:e0:b4:97:f0:22:6b:ab:90:8e:ee:73:60:
                    7d:da:f3:83:9b:90:8c:16:61:c3:80:25:53:6b:ef:
                    06:b8:4b:71:e6:b7:8c:7e:22:60:6a:18:2a:c7:11:
                    2b:d3:16:43:0c:2e:72:63:47:2e:8d:98:e8:43:2f:
                    a3:f7:4a:49:df:c4:54:35:73:e0:ee:d8:d0:67:45:
                    80:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:88:43:C2:83:86:DA:D5:90:21:BD:E6:35:A8:42:C6:F5:AC:A3:06
            X509v3 Authority Key Identifier:
                keyid:1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:3e:97:78:21:12:32:52:41:87:3c:41:8f:c0:bc:c9:03:b4:
         d5:4f:3f:ff:43:24:0d:7e:88:20:98:47:2f:5b:f9:37:26:da:
         9f:76:85:24:e4:55:5d:45:bf:f2:73:4b:51:8e:ae:80:eb:bd:
         74:a1:a1:75:ce:4f:3d:f1:8f:19:63:f0:dc:7a:ed:73:be:d0:
         5a:dc:20:f9:0a:81:81:ff:5e:2b:16:d0:20:bb:3c:38:6c:d1:
         f4:30:27:60:fc:6b:36:e8:e8:5c:b7:60:c8:03:39:11:c2:e6:
         72:6b:77:19:cb:6f:9c:11:03:0a:7d:62:14:8b:ba:18:74:cf:
         2a:fd:e9:8d:92:8a:65:f8:81:23:bd:04:f4:cd:d5:da:6d:72:
         7f:5b:a9:0d:e4:55:ea:2e:18:10:68:18:46:f0:1d:fc:e1:89:
         a4:3b:41:c8:c6:cf:5c:1b:d1:fa:e2:0b:c1:eb:a0:a8:5f:87:
         5a:7f:2c:19:52:8b:cd:4d:b3:22:65:c5:21:b1:f6:e3:07:01:
         5e:b3:f7:72:e7:c0:4d:48:54:4f:0c:c8:cd:d9:63:02:70:bd:
         55:30:1b:b2:aa:e0:46:9e:1b:75:9c:43:ee:3c:52:1d:05:b2:
         79:7b:22:e3:e4:b2:c9:34:66:a6:78:63:c4:7c:38:8a:f2:a5:
         f9:dc:a6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----