Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
File:                     mMHQO0lQTTRGXcQKPQ-QhsrP244.mft (raw, json)
Hash identifier:          2edgJcXjAYFb6Qywz2BMQluPTNZv1tuiq4aWjZ3Cgmg=
Subject key identifier:   AA:B8:21:AD:DC:30:0F:3F:DA:64:B1:FD:CE:1B:44:2A:C0:B4:4F:44
Authority key identifier: 98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
Certificate issuer:       /CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Certificate serial:       0191FB22F074C1762BC4163C3B12A27C3AB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
Manifest number:          C8
Signing time:             Mon 16 Sep 2024 14:00:56 +0000
Manifest this update:     Mon 16 Sep 2024 14:00:56 +0000
Manifest next update:     Tue 17 Sep 2024 14:00:56 +0000
Files and hashes:         1: 1-o3I26TEhcMUvILTnS79ixboj9s.roa (hash: az2Pmr07nib38z3G09LP9TZvw7PcopXvIXpGpJdo838=)
                          2: HIOBd326bH0ki5scekIECYzvVmQ.roa (hash: QR55rgnCxofQAX4FJyRUZVpUkReS3R3bKmGCfXvCBvE=)
                          3: RKBYJYopkNCVXC53geAVpFI6nfo.roa (hash: 9VGSYQakDMu0eUJbLsjTWWW4wZcvHqvu6SHya6YCk4I=)
                          4: UMoV3dr8LrEMX3UGQm6FD_XPEIE.roa (hash: HuX0fnF2dPEunhuwlXdZ6YvZtIGxpNcVjdF1/WUMp+0=)
                          5: mMHQO0lQTTRGXcQKPQ-QhsrP244.crl (hash: ngf5Pyuj6FuY9tpBfVzLWdcW88K11OnNRn14WXxW+KQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:22:f0:74:c1:76:2b:c4:16:3c:3b:12:a2:7c:3a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
        Validity
            Not Before: Sep 16 14:00:56 2024 GMT
            Not After : Sep 17 14:00:56 2024 GMT
        Subject: CN=aab821addc300f3fda64b1fdce1b442ac0b44f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:ec:3e:a4:d6:1d:da:56:b0:06:86:da:33:
                    b3:ea:c9:f3:bc:4d:6d:2d:0c:33:4a:89:10:2a:43:
                    c0:c0:49:5e:64:f9:37:7b:99:e6:7f:e2:a9:85:e9:
                    52:ec:7d:fe:21:6a:e7:80:b7:58:54:39:1b:ea:85:
                    28:14:4e:f5:94:c2:d6:5b:4b:1f:e2:41:80:f0:09:
                    cd:c0:21:3b:96:65:8f:8f:b8:bc:e8:03:c0:59:05:
                    92:ea:46:ab:fb:f5:50:2e:cc:b8:b2:73:10:cb:34:
                    79:83:6f:e3:72:92:59:c6:ed:1f:ae:c0:80:3a:ba:
                    c1:a8:b1:c2:d4:60:71:19:3c:22:1f:bb:ec:01:15:
                    c5:48:a4:4b:e8:93:7c:4d:ac:d9:cf:e4:54:19:fc:
                    7d:5b:a5:5e:39:dd:bc:da:ce:5b:8b:aa:27:f2:06:
                    4b:52:42:bd:75:82:96:1a:a4:cf:5d:28:ee:44:c7:
                    81:98:c8:2c:64:e6:d6:f1:f6:01:bf:c0:6a:b5:01:
                    96:41:c4:47:05:81:04:d7:46:11:14:86:f2:e8:51:
                    e3:de:b9:e7:d4:25:8c:9b:83:4c:b1:43:49:02:2d:
                    86:2b:a3:c3:c1:0d:88:ad:ed:9e:f7:63:e1:8e:83:
                    4b:27:e0:b3:23:8f:fa:63:69:55:6d:95:43:62:c3:
                    ed:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B8:21:AD:DC:30:0F:3F:DA:64:B1:FD:CE:1B:44:2A:C0:B4:4F:44
            X509v3 Authority Key Identifier:
                keyid:98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:12:fc:bf:57:93:51:ea:ed:13:d9:a7:b0:20:25:e0:4c:29:
         e8:96:eb:50:db:4b:b5:bd:d1:f8:6d:40:c0:96:1b:59:1c:d6:
         f6:ef:cd:b9:4d:5e:41:a1:6c:39:81:5d:91:48:5d:24:ba:8e:
         30:38:7f:b4:cb:fa:0c:ef:bf:50:e7:4f:e5:8b:c6:25:c6:b5:
         20:3a:b7:04:4c:e0:4a:0a:49:d7:03:a3:d3:e7:86:a1:d4:db:
         89:05:3d:1d:de:55:92:b3:d2:94:46:93:ef:e5:1f:dd:3b:9f:
         c6:31:d8:62:1f:a5:32:39:f9:65:1e:a6:9e:e8:94:c3:a9:c6:
         16:55:51:8b:ef:02:16:ff:b2:98:39:07:46:54:b0:b5:bf:ab:
         0d:24:bf:97:84:be:30:3f:1c:64:21:48:cc:c9:3d:a0:f7:62:
         bf:7b:b9:61:b3:29:47:c0:b1:aa:45:26:de:97:4e:1a:67:7f:
         2e:e0:b8:01:bd:1f:82:5e:1c:73:7e:ea:73:04:98:4d:00:28:
         83:ad:81:d5:d7:89:16:38:b9:73:96:e5:2b:7e:b0:15:1c:2e:
         5c:86:8f:75:8e:9a:e8:57:45:f4:cb:b7:e3:b9:3e:20:3f:de:
         7c:79:e1:3d:c9:01:84:5e:f4:dd:8c:1f:4a:0c:1c:95:b6:b8:
         ef:84:78:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----