Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft
File:                     Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft (raw, json)
Hash identifier:          lGH+FHiBWkHFKRegL8KpTjkL7WXHDm1s7kHHq0j3/uo=
Subject key identifier:   30:1A:D7:65:84:4F:96:8B:CE:24:FE:FF:88:A7:E0:11:78:82:49:C9
Authority key identifier: 16:2F:EE:2E:69:06:E0:CF:D7:C9:4C:37:C6:4F:AB:F4:1E:14:C7:B6
Certificate issuer:       /CN=162fee2e6906e0cfd7c94c37c64fabf41e14c7b6
Certificate serial:       0191F9A2734F8EC2B23353101E77516F03C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft
Manifest number:          9F
Signing time:             Mon 16 Sep 2024 07:00:58 +0000
Manifest this update:     Mon 16 Sep 2024 07:00:58 +0000
Manifest next update:     Tue 17 Sep 2024 07:00:58 +0000
Files and hashes:         1: Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.crl (hash: JnkfMlzUKXjwPtq78wmN0TJa6jJR8Q8zgph93dayA0w=)
                          2: XHNoszxm0532vuZMbAgVjqgc4K0.roa (hash: l+c4VqLNlk1/VKP5mF/z1cmXUx2uW0hAey9fSowREzg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:73:4f:8e:c2:b2:33:53:10:1e:77:51:6f:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162fee2e6906e0cfd7c94c37c64fabf41e14c7b6
        Validity
            Not Before: Sep 16 07:00:58 2024 GMT
            Not After : Sep 17 07:00:58 2024 GMT
        Subject: CN=301ad765844f968bce24feff88a7e011788249c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:16:07:f0:3f:da:7c:12:b8:d1:b0:d9:a7:d6:
                    fe:04:b5:eb:fb:d7:7e:8b:f6:a8:26:67:12:93:45:
                    97:43:d4:0e:b3:c4:4b:2e:56:84:a4:08:39:8f:59:
                    09:5d:2e:00:42:04:7e:cb:c6:ab:e8:f3:68:a2:13:
                    99:32:c6:e5:c4:f2:b2:3c:04:b1:dc:c9:e0:bc:3b:
                    7e:0c:c9:a4:ed:70:cb:3c:03:49:8f:9e:9e:9b:65:
                    57:04:17:58:ee:5f:a6:74:41:32:35:cd:ce:5f:c0:
                    f2:20:d1:61:b8:6f:ab:24:42:cf:e1:01:02:5e:75:
                    fd:6a:62:5c:fb:55:31:2d:e8:ba:55:73:e8:47:56:
                    d5:c1:24:28:a6:69:f0:60:8a:2e:40:0c:68:96:21:
                    2b:98:c0:60:98:c8:88:29:7d:40:41:48:00:c6:5c:
                    77:a3:ca:a9:8d:68:b9:cc:76:bb:88:99:5a:7a:7d:
                    19:c9:b3:20:77:3c:a7:c9:0f:bc:c8:cb:1a:2a:10:
                    30:6a:d5:1a:0c:6c:f7:ed:f7:f5:a4:7d:b6:6c:21:
                    2c:74:8f:48:b6:d6:a4:4a:79:e4:cd:d3:3a:83:54:
                    2c:b8:bd:3f:b6:82:ac:73:0d:9c:31:d0:1b:12:f1:
                    ae:5d:31:f2:59:13:79:0b:d3:50:79:f3:4b:ee:b3:
                    92:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1A:D7:65:84:4F:96:8B:CE:24:FE:FF:88:A7:E0:11:78:82:49:C9
            X509v3 Authority Key Identifier:
                keyid:16:2F:EE:2E:69:06:E0:CF:D7:C9:4C:37:C6:4F:AB:F4:1E:14:C7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ad:cb:d1:4c:95:9a:b7:59:52:c1:ab:a3:84:af:24:5b:7f:
         a5:d5:3c:a3:81:b8:61:07:81:52:b1:51:33:df:10:7f:8c:d2:
         5d:db:c9:50:49:e0:2e:e1:73:54:f3:2e:bf:cf:53:84:39:6e:
         84:a9:84:85:41:94:0b:3c:07:b1:43:d6:12:16:7f:1a:8f:3c:
         1b:39:f7:a5:be:1a:56:49:73:c2:7f:f9:70:0e:69:42:cf:a6:
         36:ea:c9:77:0d:c4:ff:69:e3:03:f0:5d:f9:0b:42:4c:4c:89:
         ea:1b:77:65:d1:fb:f3:48:72:48:2f:4e:33:a2:ee:fa:03:aa:
         d8:80:1a:5f:30:a8:d3:87:07:d4:89:a1:26:26:ba:26:b8:8d:
         a1:49:e2:ec:a1:49:75:c5:d4:1e:3a:4c:f1:f4:62:c2:a0:63:
         bd:a4:f8:eb:b3:a9:a1:e8:f3:20:89:17:9d:3d:5b:71:f3:44:
         c5:0e:78:9f:22:51:60:0e:04:35:6e:81:87:55:e8:e7:1c:b5:
         bc:d7:81:16:19:c5:ac:cd:50:9f:03:c7:0c:ec:99:7a:26:0b:
         5d:80:01:a6:da:f3:e4:a1:b6:19:15:75:ad:55:c6:c2:5a:61:
         c5:8b:73:ab:be:cb:03:f1:ad:df:88:57:53:80:ad:88:fc:08:
         50:5c:35:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----