Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
File:                     FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft (raw, json)
Hash identifier:          RM676NbMaSax9chcGkd1+Cbjzviz77PPQq+LIqpjUaw=
Subject key identifier:   AD:0A:6C:12:8E:28:01:BC:73:25:E3:F0:68:0F:52:16:1C:C8:80:27
Authority key identifier: 15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF
Certificate issuer:       /CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
Certificate serial:       0191F9D9901E604FE6E229C57ED022CA9982
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
Manifest number:          11D8
Signing time:             Mon 16 Sep 2024 08:01:10 +0000
Manifest this update:     Mon 16 Sep 2024 08:01:10 +0000
Manifest next update:     Tue 17 Sep 2024 08:01:10 +0000
Files and hashes:         1: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl (hash: IEBFsG/tE5zPj96GAyvILE4QfnylUgZ5mRrnXXYh80Q=)
                          2: uBmwFGjJ3D3rbhYLzyrarb_seVw.roa (hash: M8XQGjdB8mdsmqCByb4Wvlr0wkhAPcO5EgTBTzOXGfw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:90:1e:60:4f:e6:e2:29:c5:7e:d0:22:ca:99:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
        Validity
            Not Before: Sep 16 08:01:10 2024 GMT
            Not After : Sep 17 08:01:10 2024 GMT
        Subject: CN=ad0a6c128e2801bc7325e3f0680f52161cc88027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dd:4e:9e:11:a6:e2:5a:78:03:27:83:b1:3c:
                    6f:d5:6a:f8:0b:3a:a6:5b:1d:a8:23:2f:cb:5b:32:
                    c3:ae:40:e3:2b:1f:8e:07:91:d4:0c:81:fc:f3:8d:
                    15:19:57:6e:a9:74:e3:8f:62:08:2a:99:b6:3b:f1:
                    48:1c:80:76:9f:6e:22:ee:2b:b7:77:9e:f3:74:ee:
                    54:aa:3f:2f:74:09:b2:26:e0:0a:ce:fb:c2:0c:0b:
                    99:b3:ca:07:a3:04:25:50:ac:09:a4:8d:d1:84:11:
                    db:6c:d2:3e:9f:a7:90:98:40:e6:27:58:5f:76:20:
                    da:cc:a3:cf:61:35:88:cd:7e:30:da:f4:f1:5d:a7:
                    f4:75:f3:9b:ae:cf:b2:07:82:77:aa:5f:e5:5d:79:
                    aa:0a:b6:c3:8e:7f:c8:07:c1:e7:33:c9:1f:26:71:
                    31:33:aa:f2:b8:9b:ba:1a:95:1a:0e:fa:10:1e:45:
                    c6:dc:12:0c:10:aa:5b:cf:23:50:23:2b:cb:11:07:
                    8f:39:a5:87:ee:74:6f:b4:90:f3:12:ee:3e:42:1d:
                    15:cd:57:08:2a:4f:b0:b5:3a:05:c0:a5:ef:7e:4b:
                    b6:e7:76:06:13:ae:e1:21:a3:35:c7:3a:da:7c:74:
                    90:20:67:f4:cd:c5:75:08:6f:16:53:80:8d:52:b8:
                    19:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0A:6C:12:8E:28:01:BC:73:25:E3:F0:68:0F:52:16:1C:C8:80:27
            X509v3 Authority Key Identifier:
                keyid:15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:7f:c6:2a:52:5d:e0:b6:fd:ac:b3:58:8b:3f:02:48:da:84:
         4a:94:4e:9e:67:e5:96:b7:45:64:4b:9a:8c:03:b1:ff:00:f3:
         a4:b4:52:55:f9:60:49:4a:b7:35:77:85:fe:9d:63:02:62:2e:
         da:1a:dc:73:b4:cd:f6:b6:4b:0b:77:b9:88:7b:f2:e3:d5:86:
         f0:fa:4a:0e:e9:54:cf:a1:14:89:63:c7:e4:fb:80:14:0c:19:
         c4:66:66:24:c1:eb:42:33:5c:29:2a:a1:a8:1e:cd:87:14:2b:
         54:49:28:26:20:ec:ac:3f:8e:03:b5:62:5f:33:37:31:30:5e:
         6e:67:be:02:8e:00:bb:d5:f3:4a:e9:63:d5:10:b1:b9:44:60:
         ed:6d:0e:91:f1:6e:39:d7:76:81:bd:60:ef:08:69:02:94:ea:
         63:e0:5a:77:51:0f:01:88:97:29:1e:48:3e:41:a7:c5:60:b0:
         cd:a6:ef:5c:32:bb:f7:f7:e7:38:a3:99:c7:e7:56:95:30:68:
         42:ff:8d:83:9c:95:52:3a:34:f0:18:e7:16:38:b4:b1:33:b8:
         ef:b3:a5:0b:68:5d:3f:d5:1c:32:7f:ec:d1:55:2c:3c:45:f0:
         42:e3:30:c6:90:b0:c4:c6:93:a8:ec:3b:9c:a9:47:e1:bc:e3:
         04:00:b3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----