Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
File:                     MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft (raw, json)
Hash identifier:          M6fVt3ugq87ZCaWHk0ysyucUQ3TLkB6mWPSbywuYy0c=
Subject key identifier:   48:F2:C1:ED:B8:38:2A:8C:56:CB:AC:AF:F5:70:05:48:78:46:2A:4F
Authority key identifier: 33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
Certificate issuer:       /CN=332293d0399160788b31e438760dc3bd1ed882eb
Certificate serial:       0191FA109E539A0E16C8232456C7367AC2A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
Manifest number:          0110
Signing time:             Mon 16 Sep 2024 09:01:18 +0000
Manifest this update:     Mon 16 Sep 2024 09:01:18 +0000
Manifest next update:     Tue 17 Sep 2024 09:01:18 +0000
Files and hashes:         1: MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl (hash: ArPW5WkiaN4mzviXN9R/4gL20qzy3Olpi+8r15a6KvM=)
                          2: UQyH-zt70NKVDJvr5zvOM2AjkYg.roa (hash: ut9sDn5S4ZjkkDHeE2BU7fk4uT70FgwDgoK8QWQibGs=)
                          3: em3_nfUh6VStVBLQ6d_ULoh4XsE.roa (hash: N/r/Zfyub7BV5tqoQCcynZdSZvWhnWLPHvWverjfAUc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:9e:53:9a:0e:16:c8:23:24:56:c7:36:7a:c2:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332293d0399160788b31e438760dc3bd1ed882eb
        Validity
            Not Before: Sep 16 09:01:18 2024 GMT
            Not After : Sep 17 09:01:18 2024 GMT
        Subject: CN=48f2c1edb8382a8c56cbacaff570054878462a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:81:f2:92:0c:4f:84:01:d8:03:ad:01:6d:ed:
                    17:fb:6d:e8:11:67:87:93:54:f8:1e:b1:94:e6:b8:
                    1e:6d:40:bd:d7:eb:a8:a2:8f:0c:74:e8:1b:2a:4c:
                    0b:c9:fd:83:c8:ab:91:72:eb:30:b8:45:8f:38:02:
                    ba:ce:9d:0e:76:e1:9d:9e:cb:e3:7d:8e:cb:21:ea:
                    ea:f1:d9:93:09:68:6f:48:8b:d6:26:5e:6b:d9:a3:
                    a9:77:00:6c:7d:ca:50:19:c1:ab:45:49:93:5f:70:
                    ee:4f:f2:e3:80:54:dd:44:24:18:b8:c2:35:ed:51:
                    bd:b0:27:42:20:37:f5:e4:d2:49:72:41:c3:fc:92:
                    a8:3d:76:26:15:06:67:33:23:a3:4a:93:b6:2e:e1:
                    ef:92:3d:98:6f:f8:0e:fe:9a:bc:70:05:e5:ad:0a:
                    f4:a1:ba:da:c6:27:78:d1:d1:13:e0:ba:88:82:8d:
                    ea:92:69:69:60:f0:d6:c9:19:6e:91:5d:d2:35:61:
                    1d:db:be:1c:4e:b5:c5:c5:62:79:19:e3:09:22:e1:
                    02:29:22:72:73:c0:cd:69:94:11:92:9f:51:ff:07:
                    6a:84:1f:c0:68:52:dc:83:67:9f:0e:79:45:7c:56:
                    df:5f:05:ca:d1:f6:d9:c0:a1:c8:0d:86:33:c1:8b:
                    76:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F2:C1:ED:B8:38:2A:8C:56:CB:AC:AF:F5:70:05:48:78:46:2A:4F
            X509v3 Authority Key Identifier:
                keyid:33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:26:ed:b3:67:b5:43:2b:07:1e:fb:a4:79:f5:67:44:21:65:
         b3:fc:a8:99:8e:69:20:f3:1b:f6:b0:b7:bd:64:ef:5f:b3:f2:
         44:fa:08:99:d7:1e:4f:25:ba:18:33:6c:78:62:66:09:ba:08:
         f4:23:a0:38:da:b1:04:69:00:d4:57:43:8a:3e:88:5f:4c:fe:
         4b:b3:b3:06:6b:75:e6:02:3a:65:72:c8:8b:b5:91:72:36:40:
         7e:f2:bd:bb:c3:71:e6:db:8a:f7:de:27:97:ec:e1:26:83:9e:
         f7:0a:52:83:2e:0b:20:77:ed:2c:f1:50:20:68:7e:c5:a3:9c:
         07:da:31:4d:f7:6a:46:dc:74:d1:a9:b1:36:34:33:8a:8d:f2:
         fc:5c:e9:28:20:5a:68:75:c6:c3:9f:c2:c2:77:48:ba:c7:23:
         7c:f5:a2:dd:14:51:97:b6:50:f5:44:55:8d:7d:57:a5:f1:94:
         2d:6e:9d:c3:1a:52:1f:7f:b8:c4:6d:12:df:cc:31:7c:51:b2:
         25:32:c3:3a:f3:3e:7f:b4:af:9c:25:4c:ee:a6:b8:7c:60:30:
         8e:34:cb:8a:a3:8d:b7:cf:6a:55:94:ca:d0:2b:a1:9d:3c:79:
         d6:90:e0:7b:49:a4:ca:68:50:ff:28:ef:a5:20:d4:e7:eb:07:
         62:23:0f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----