Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File:                     Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier:          LFoUjT7u7AikOvmqqZW/CTZgHdx5XqVlh3dvV5DnTsc=
Subject key identifier:   85:B0:C2:34:A8:10:D4:34:01:B9:A6:72:DB:3C:1D:D9:82:F0:C6:24
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer:       /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial:       0191FA476847659C5294C9E218AB4DDDEBF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number:          011B
Signing time:             Mon 16 Sep 2024 10:01:09 +0000
Manifest this update:     Mon 16 Sep 2024 10:01:09 +0000
Manifest next update:     Tue 17 Sep 2024 10:01:09 +0000
Files and hashes:         1: Syn5pVqduhT5e-dwR9zAK8XggGA.roa (hash: rnMViORx13Xlf499/+4Qklu4MMvKyPvWRnzwfGA6b7Y=)
                          2: T4H58eF8LQ6NI03og6y5mFtke4k.roa (hash: wfGQLfUA9TZ6/QAJmtUMhku+8vaAKSeU5WzYp4PWh7g=)
                          3: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: u0nYIXXJC33NeOP0NDYM8ViWeZDYlWUmm2l4ca/26gY=)
                          4: dG7QHhYOmZjAjUv6MRhWdFZKvAU.roa (hash: jzF545PpicabBb9DNHKI1q8p+TIGgGXFSRhWrscJ4GU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 10:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:47:68:47:65:9c:52:94:c9:e2:18:ab:4d:dd:eb:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
        Validity
            Not Before: Sep 16 10:01:09 2024 GMT
            Not After : Sep 17 10:01:09 2024 GMT
        Subject: CN=85b0c234a810d43401b9a672db3c1dd982f0c624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:49:69:dc:f4:d3:af:fd:c4:96:7f:d8:86:cd:
                    90:7f:15:47:13:5b:4e:43:15:0d:aa:52:0c:0d:39:
                    01:67:cf:d6:e2:11:2f:27:2f:66:5c:38:62:fb:39:
                    03:4a:f5:3b:52:ac:f6:f3:aa:e2:b2:ac:6f:64:6b:
                    aa:05:1d:ee:ca:b9:55:74:58:43:63:10:cc:f8:74:
                    1d:37:2b:99:28:45:3c:e1:d2:d8:62:fd:a0:c0:5a:
                    99:73:a9:17:76:37:4c:99:d2:fe:3f:2c:a5:a1:60:
                    42:27:18:b2:10:45:2b:62:ec:d7:f5:ad:77:b4:86:
                    92:80:e6:d2:47:4b:33:5c:f2:e5:6f:da:5c:55:ba:
                    a8:12:ff:69:45:51:48:1d:4d:4a:4c:02:89:bf:78:
                    2e:22:45:6b:c7:7a:47:5e:64:ee:aa:f6:d6:59:b6:
                    11:e2:a4:7e:35:39:dc:f9:4e:42:d6:b9:a0:19:5e:
                    fb:1c:45:c8:2a:9b:5d:a8:33:b1:ee:5a:83:d3:e6:
                    99:a4:90:d6:21:07:fa:14:e2:a6:16:96:2e:d1:13:
                    db:44:e1:27:51:0b:d2:32:16:03:9d:7f:35:21:7b:
                    a1:5f:3e:9c:82:4b:9f:bc:62:f0:95:15:77:86:c3:
                    be:34:50:13:11:12:66:e8:0b:b0:b6:71:13:7c:eb:
                    5b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B0:C2:34:A8:10:D4:34:01:B9:A6:72:DB:3C:1D:D9:82:F0:C6:24
            X509v3 Authority Key Identifier:
                keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:04:7f:f5:09:3d:3e:0e:50:5f:92:5a:c7:e1:26:47:6e:25:
         ec:e9:2e:7f:e1:d3:fa:b1:fa:f9:7f:e5:35:ec:7b:26:ed:1c:
         90:de:2e:e4:80:dc:3d:ce:a4:fc:fe:5c:da:9d:b6:62:0a:e9:
         36:96:90:c1:22:8b:19:96:d2:7b:1d:d8:00:a2:af:de:72:ff:
         95:55:39:d0:79:6b:a0:48:1c:8f:68:54:dd:7c:8b:c4:83:82:
         1e:69:01:e5:c7:bf:17:17:f0:ce:68:c9:19:d1:9a:d7:22:9c:
         a5:38:c0:76:d5:6c:86:ca:b3:c8:49:32:1c:9e:be:f5:7a:98:
         47:a6:0e:13:62:00:d1:d8:24:5f:86:3a:75:69:9b:f8:c2:5b:
         d1:ab:0c:05:25:b4:a6:e2:5f:a1:74:cf:a8:58:6e:5f:d2:3b:
         e8:84:af:4c:89:34:39:88:c6:27:fa:04:f9:7a:9c:d6:89:3e:
         4e:c1:08:1f:69:06:ad:eb:c3:31:32:9e:97:28:36:7d:36:49:
         0f:d8:0f:9f:66:cd:73:ac:f3:86:21:bd:1b:97:95:db:30:d9:
         c4:92:d7:2a:f1:e7:11:e3:99:6c:d8:9e:4b:4c:6a:92:05:b3:
         b5:e4:f4:b9:df:50:af:49:a9:3b:fe:5c:2c:86:db:7c:44:9e:
         e6:a9:cd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----