Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
File:                     XE_B5N78Rxyf23_a25iVVj2vmZw.mft (raw, json)
Hash identifier:          1JWjunTLnYG5ERvZ76aGmWNLEXKIk005Si64a2lZwME=
Subject key identifier:   F8:3C:B8:7B:27:6F:C9:F3:57:10:08:90:B3:4A:EF:36:50:62:92:FA
Authority key identifier: 5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C
Certificate issuer:       /CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
Certificate serial:       0192102A8DFBF27F06DFD4984A7B8F684533
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
Manifest number:          0EE6
Signing time:             Fri 20 Sep 2024 16:01:17 +0000
Manifest this update:     Fri 20 Sep 2024 16:01:17 +0000
Manifest next update:     Sat 21 Sep 2024 16:01:17 +0000
Files and hashes:         1: XE_B5N78Rxyf23_a25iVVj2vmZw.crl (hash: q+391vFgIOWC+/b5I4pjccV2fsqMVQFCsVqQhIoobkY=)
                          2: xIuJQEik8PBUl8DX5u7tm5yZeks.roa (hash: xhYvROCZf69CZZGUD7DYgvLIyThHIoWvvLS8Ztd2g0w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:10:2a:8d:fb:f2:7f:06:df:d4:98:4a:7b:8f:68:45:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
        Validity
            Not Before: Sep 20 16:01:17 2024 GMT
            Not After : Sep 21 16:01:17 2024 GMT
        Subject: CN=f83cb87b276fc9f357100890b34aef36506292fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a2:55:9d:2f:e5:8f:12:de:23:34:66:2d:34:
                    67:21:a8:46:c9:15:9b:94:b0:78:82:52:0e:c4:38:
                    6a:ed:bf:21:13:76:90:b9:14:0e:2f:b1:6f:de:56:
                    9c:44:bc:7e:25:03:5b:14:f8:93:24:7d:14:c4:30:
                    b3:85:3a:a4:a1:53:0c:55:0f:91:53:2f:9e:fe:e1:
                    27:a6:fe:36:4d:bc:94:d1:a8:78:4f:3a:f7:43:f9:
                    08:a7:32:fe:69:85:28:44:b7:9e:08:c0:2e:e9:f6:
                    9f:af:59:0e:27:32:fe:8b:17:39:51:0a:dc:7f:35:
                    c3:2d:8d:9d:f1:dd:09:c5:5b:63:5b:1f:7a:eb:c7:
                    aa:eb:33:86:5f:85:40:e7:48:72:1b:04:95:dc:55:
                    98:81:7f:59:89:81:d0:cd:81:e9:b3:ce:0d:9a:fb:
                    0e:75:77:b2:16:cd:db:23:10:c3:a5:4b:bb:73:a5:
                    d6:0b:a0:b8:68:1e:13:b7:bc:fd:2e:a2:60:d7:44:
                    96:d2:c4:c9:6d:4d:1f:e2:de:4d:c9:97:32:69:5f:
                    de:41:43:ec:66:e3:36:51:a5:dc:fa:41:bd:9e:db:
                    0e:c7:50:76:17:1a:6c:53:f4:de:ae:f2:a2:dc:18:
                    a4:9f:0f:c7:9b:51:e7:7d:c2:9b:f8:6e:a1:42:b3:
                    3c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3C:B8:7B:27:6F:C9:F3:57:10:08:90:B3:4A:EF:36:50:62:92:FA
            X509v3 Authority Key Identifier:
                keyid:5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:fb:63:11:3e:af:2a:f1:2f:a7:75:f3:5c:11:db:ca:b2:4f:
         c7:8f:d1:ec:ec:0c:5f:f3:e2:93:e1:01:c2:ee:05:b6:4c:3c:
         b4:17:d9:74:66:5f:95:f6:e6:e5:bd:76:cf:76:b0:4f:06:07:
         04:e8:0b:ee:c7:11:3b:9d:b8:a8:05:41:b7:cd:b7:0a:d9:1c:
         48:d6:f7:7e:42:80:69:9e:5f:68:8d:7e:04:8f:41:cd:7a:d8:
         86:ce:11:c9:c6:c6:45:9b:99:a5:5d:09:f2:dc:0e:79:f5:8b:
         4b:07:ca:32:07:bd:6b:dd:b4:6c:a2:67:0e:e2:f0:c9:2a:f1:
         6e:71:08:49:10:8b:88:70:94:0a:9f:d5:6e:da:b0:17:a6:db:
         97:53:0c:b4:59:b1:f2:74:54:6b:02:18:05:2f:b3:70:6a:b9:
         21:2c:98:02:4b:e3:49:bb:e9:21:66:ad:4d:4e:66:39:6d:6e:
         38:8f:e3:c8:f3:78:de:36:87:85:71:73:03:09:3f:16:1f:7e:
         ab:bb:d9:8a:1d:bc:f3:07:97:2a:cc:ff:94:c1:db:3f:f8:2e:
         ab:20:9f:d2:68:f1:e9:95:67:fb:7a:23:63:7b:52:1f:66:2b:
         36:c6:0e:a3:20:ac:79:73:0f:d3:24:0d:82:f0:d7:bf:ec:fa:
         1d:b2:41:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----