Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
File:                     UaLCwG3bhGaaiamfuHVglRNMh2Y.mft (raw, json)
Hash identifier:          86vnkq2pcrYx0v6VpCjvQrZTK0pmsgHF1xpCwZ9xy2c=
Subject key identifier:   5F:B7:32:17:C7:44:23:A2:42:9F:BB:4B:00:77:96:11:0E:06:1F:84
Authority key identifier: 51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
Certificate issuer:       /CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Certificate serial:       0191FAEC46CA798ED8655A174C8C07E27DD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
Manifest number:          0115
Signing time:             Mon 16 Sep 2024 13:01:13 +0000
Manifest this update:     Mon 16 Sep 2024 13:01:13 +0000
Manifest next update:     Tue 17 Sep 2024 13:01:13 +0000
Files and hashes:         1: UaLCwG3bhGaaiamfuHVglRNMh2Y.crl (hash: /OpdQ6AXCwRKVnbKPBTMAgg2VOaPk3kE0W4f3MfOIVg=)
                          2: fzBm8L2AcdMgx4oAlg-Kuft1XMI.roa (hash: Ar4zbtPqOTs8znu51W3gC5L1LfYwXZ+Y9cU4JEo/bIU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ec:46:ca:79:8e:d8:65:5a:17:4c:8c:07:e2:7d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51a2c2c06ddb84669a89a99fb8756095134c8766
        Validity
            Not Before: Sep 16 13:01:13 2024 GMT
            Not After : Sep 17 13:01:13 2024 GMT
        Subject: CN=5fb73217c74423a2429fbb4b007796110e061f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2f:c1:1f:b7:06:b7:d4:5a:80:81:84:95:47:
                    bb:b3:ce:e2:2e:b7:81:85:4c:a3:8e:4d:4d:5d:92:
                    51:74:ac:e2:47:4d:59:85:c5:47:fa:00:df:66:b2:
                    13:2c:2c:1f:3d:d7:ba:e1:93:25:03:4c:cb:aa:cd:
                    29:bd:14:74:12:2d:f3:a8:f6:3f:07:dc:3f:c5:17:
                    38:5b:18:66:cf:18:14:8f:24:06:d0:9f:04:fc:7b:
                    d6:14:cd:98:3e:0e:df:3c:cf:cd:de:ec:7b:13:ad:
                    8a:53:9b:00:f5:c0:8f:dc:1e:d8:d5:d9:60:a1:0f:
                    50:76:21:b5:7a:db:46:24:23:76:df:f1:b6:36:16:
                    01:5a:8d:d0:cf:66:56:bc:00:5f:47:30:70:d2:d7:
                    a6:d1:50:9a:6e:9b:ff:49:34:78:be:98:a0:7b:f2:
                    8f:d2:6d:36:bd:5e:87:1b:b1:7c:30:9e:1d:01:8d:
                    92:66:1b:b0:67:04:68:a1:6b:15:e2:4b:84:49:de:
                    ec:35:28:cb:be:6b:fe:4e:fe:b5:a9:0e:04:57:45:
                    cf:a9:b9:c9:69:01:04:10:0d:30:0b:46:d9:18:cd:
                    33:fe:0a:35:dc:d1:2a:d6:1f:67:12:80:8e:ae:34:
                    cc:42:0d:bc:02:95:93:70:dd:c4:f8:b0:15:78:25:
                    33:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B7:32:17:C7:44:23:A2:42:9F:BB:4B:00:77:96:11:0E:06:1F:84
            X509v3 Authority Key Identifier:
                keyid:51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d3:4d:52:89:75:2f:3d:fd:9f:b6:f7:c3:5c:cf:44:63:4b:
         89:76:03:81:22:08:b3:ab:95:95:ba:0c:41:46:20:d9:fb:70:
         6d:cc:00:d3:fc:90:f7:40:c4:8b:14:d9:9e:a5:0f:45:9e:b6:
         b1:97:5a:5a:bf:39:75:b4:36:ca:c1:a0:2f:81:79:dd:bb:ad:
         f1:6b:28:83:33:07:e7:7e:76:5a:3e:75:0a:b2:aa:a9:05:d1:
         8f:ed:c6:99:c8:3f:2c:76:99:54:72:f3:ba:37:80:70:23:6d:
         09:7c:0f:cb:74:36:ee:0e:b4:c1:db:7a:6f:2b:e5:94:46:f9:
         af:63:d0:da:58:f1:2a:45:5f:99:3e:10:eb:06:73:b5:39:49:
         ff:65:cb:e8:aa:9d:5d:f8:a7:47:b3:b1:65:0d:7d:3a:84:90:
         52:cb:9e:db:36:23:25:5d:34:3c:a9:f4:69:a4:c9:05:de:91:
         bc:c2:14:ed:ec:5f:0b:e7:23:90:7a:d3:17:1a:09:1e:6d:9c:
         b9:a5:30:ee:29:65:78:ff:26:91:3b:31:bd:3f:c1:d0:2f:9b:
         2d:9a:4c:60:8c:2e:09:9d:2b:48:42:bf:c9:a4:38:99:e0:ad:
         d3:e7:46:74:42:46:a8:0e:ab:6b:64:02:e3:f8:ae:a9:1d:d2:
         d5:0f:52:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----