Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
File:                     NldL5q52zVI7M3h8-9tpJkJj0HQ.mft (raw, json)
Hash identifier:          eUP2OO3Rafjxa9RnKURB5CtdrU6KvU9X70UjqCY63xM=
Subject key identifier:   E9:06:98:E1:FA:FA:94:24:2E:18:10:59:61:80:A7:79:65:84:2E:E5
Authority key identifier: 36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74
Certificate issuer:       /CN=36574be6ae76cd523b33787cfbdb69264263d074
Certificate serial:       0192376F4E305272C7EE8D14D617E5A144BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
Manifest number:          12E0
Signing time:             Sat 28 Sep 2024 07:01:34 +0000
Manifest this update:     Sat 28 Sep 2024 07:01:34 +0000
Manifest next update:     Sun 29 Sep 2024 07:01:34 +0000
Files and hashes:         1: 4CCwoDvVz37WCgTEcjfOO81myx8.roa (hash: b3SCaXfYBhUdCVngxiWYqn8wang0GLBuLnINM3qV2QU=)
                          2: 73Wbn-XZdpVD8_PaiycS2ddFdFg.roa (hash: iVl1apo5jLRVbCk77jbYDrYWyKE4Jp73jp/j5lpDGb0=)
                          3: NldL5q52zVI7M3h8-9tpJkJj0HQ.crl (hash: E1hwEPYDjQ2xbKvQMjus+ybZPKOXGmpAIYf3Ps4jXIs=)
                          4: _dkTYNCxQrCeBAajiXfReCvQ5hE.roa (hash: qlErhsKhFRCo3EmXjZRyGZaHiK2i+tOD3varKilZPu8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:37:6f:4e:30:52:72:c7:ee:8d:14:d6:17:e5:a1:44:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36574be6ae76cd523b33787cfbdb69264263d074
        Validity
            Not Before: Sep 28 07:01:34 2024 GMT
            Not After : Sep 29 07:01:34 2024 GMT
        Subject: CN=e90698e1fafa94242e1810596180a77965842ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:83:e8:fc:14:5e:e1:ae:64:b6:29:98:19:79:
                    03:fb:c6:a1:2a:a5:fe:66:6a:65:b2:b9:88:7a:03:
                    b6:78:bb:6a:52:2b:43:42:13:2c:7e:95:54:d1:59:
                    83:39:ba:dc:ac:50:b8:df:03:5d:c6:6e:a2:9a:3d:
                    66:e1:84:5c:3c:86:b4:65:e8:c3:70:75:c5:08:b7:
                    28:37:48:a5:73:76:0b:49:55:a9:ce:b9:1d:c6:e4:
                    a9:34:6c:32:73:37:91:ee:b8:19:77:0e:d2:07:c5:
                    2b:08:ba:94:31:07:7a:19:c0:f2:3e:66:12:34:ec:
                    29:36:12:27:55:48:b4:be:1f:d3:07:34:b1:24:2a:
                    8b:8c:6f:4a:97:94:e0:95:76:57:8d:d0:c3:15:11:
                    f2:a0:c1:11:25:34:c4:d0:cd:81:5f:f2:3b:d8:c5:
                    ab:d7:e3:95:e6:f1:8a:76:43:98:cc:b2:77:7e:ba:
                    c9:c5:31:b6:d1:80:c9:cf:d5:0a:d8:53:71:b3:4d:
                    eb:a6:32:9e:85:f9:de:99:01:36:45:da:07:db:2b:
                    b5:f1:ac:e8:71:e4:b4:d1:0d:9e:e6:5e:4a:c2:a0:
                    ce:cd:bc:34:e4:e5:ff:22:e9:66:3a:cc:99:01:ec:
                    f3:84:97:09:92:fe:60:b3:e4:cc:57:e3:27:87:b4:
                    4c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:06:98:E1:FA:FA:94:24:2E:18:10:59:61:80:A7:79:65:84:2E:E5
            X509v3 Authority Key Identifier:
                keyid:36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:14:a7:66:ed:3c:03:0b:f3:fd:4f:f2:2a:f1:8c:ef:ce:3b:
         0e:12:34:5c:7e:3b:84:fe:56:fc:6d:9a:80:64:9f:8b:6f:ae:
         93:be:94:dd:df:e9:04:0a:d8:a6:11:c1:25:18:f0:63:b1:12:
         ad:41:97:d8:e8:3d:44:79:02:dc:3d:3d:54:0b:3d:72:f1:a2:
         90:b6:9b:77:95:21:54:cf:af:0d:18:48:3f:b2:f7:03:f0:86:
         89:38:d2:71:f2:3e:b1:2e:c9:3a:ee:62:1a:59:4a:f9:6d:bc:
         b1:99:9c:c0:9d:09:df:b1:1e:38:d0:8c:51:3f:8b:a7:18:c3:
         c9:e9:a2:8b:b8:db:f2:d7:0a:97:46:04:89:1f:fe:6a:b3:3a:
         0e:50:4e:c8:76:6e:53:27:62:86:61:7b:6c:ac:02:3e:ce:84:
         5f:6a:41:9f:47:8d:f9:0e:c0:e8:f3:4d:65:19:e2:27:78:52:
         5d:b2:29:50:81:d5:99:d1:2a:8a:35:08:13:bd:d9:68:71:44:
         8c:49:d6:ed:01:69:da:90:80:99:c6:01:22:ff:e3:19:df:0d:
         0b:1c:5f:c1:e5:b5:a9:4a:8d:84:e2:c3:df:f2:f3:1b:27:dd:
         bc:be:ad:15:df:77:d6:7a:bf:ce:8c:f6:72:ca:c9:f4:f1:b4:
         6a:06:13:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----