Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
File:                     XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json)
Hash identifier:          riIn6LstyATvy/kJ4TZWDq+4rCVLkI1HQUzNX3HUzf4=
Subject key identifier:   17:B9:3E:50:EB:13:ED:8A:46:BD:4B:B9:1A:5B:64:78:5E:40:73:2D
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Certificate issuer:       /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial:       0191F9D96DBE5D76CB58F3F65132ACEA4D76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
Manifest number:          DB
Signing time:             Mon 16 Sep 2024 08:01:01 +0000
Manifest this update:     Mon 16 Sep 2024 08:01:01 +0000
Manifest next update:     Tue 17 Sep 2024 08:01:01 +0000
Files and hashes:         1: 2y6_e_HcXYny0db7WYBVMhTw8IY.roa (hash: iADkeOa85IxN+IyZ9ZGDG2vYAvSgj39sBmLtsut2GiU=)
                          2: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: zvIuE1GGYxcPxcoP9POHdknSA7HoPsJTahT0qQFXkxo=)
                          3: x_3LkVi7GeozmaERoTYojWy8UAI.roa (hash: aJinCa+UZZap6JwbDgwkxNLV9sOmSw1gkV9HgAtR1do=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:6d:be:5d:76:cb:58:f3:f6:51:32:ac:ea:4d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
        Validity
            Not Before: Sep 16 08:01:01 2024 GMT
            Not After : Sep 17 08:01:01 2024 GMT
        Subject: CN=17b93e50eb13ed8a46bd4bb91a5b64785e40732d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:aa:2a:25:ef:cd:29:c9:b4:bb:6c:54:8a:c2:
                    63:b3:be:84:44:c5:de:c9:29:a0:37:bb:8f:bb:8e:
                    30:5f:24:f8:5c:3b:6b:83:2a:04:28:9a:7b:6e:da:
                    35:6b:c1:ae:cf:b7:7b:65:8d:ab:e9:a5:d9:60:0d:
                    3b:7c:c8:5a:d4:b1:37:fa:ff:16:b0:19:65:53:79:
                    5c:5d:45:15:80:c2:f1:e1:f4:63:87:42:53:7d:5a:
                    9c:6f:08:21:b0:4c:11:e9:ef:bf:74:c5:30:ae:d4:
                    50:ef:ed:7c:9a:a9:5d:fb:31:85:be:c1:49:2d:ac:
                    54:47:0d:81:cf:d0:45:6e:60:25:bb:f5:68:91:bb:
                    16:a1:1c:56:02:16:6a:ec:85:3d:ed:a7:17:45:c6:
                    91:46:55:0a:5f:75:0d:c2:50:5f:eb:43:1a:1b:3b:
                    e7:7f:bd:7e:56:07:e7:2e:da:3b:34:39:7a:e4:1d:
                    35:bc:42:87:4f:53:43:61:69:db:d5:9b:ce:26:2e:
                    49:5d:13:8d:d7:99:ab:9b:27:47:ff:32:37:88:cf:
                    66:84:65:17:16:d2:ed:20:ce:e4:3b:50:30:a8:2e:
                    0c:1d:57:4c:6f:fc:2b:72:55:e2:ee:e0:04:6d:0b:
                    83:83:1b:df:b6:33:d2:f2:63:93:3c:43:b9:7c:89:
                    12:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B9:3E:50:EB:13:ED:8A:46:BD:4B:B9:1A:5B:64:78:5E:40:73:2D
            X509v3 Authority Key Identifier:
                keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:71:ea:e1:b5:90:1d:04:d5:27:14:d7:e6:45:95:04:c3:de:
         36:c5:e2:1e:7c:21:8b:3c:71:cd:69:fe:11:69:08:e4:92:d3:
         34:d0:86:e3:5b:f1:38:1e:4d:71:49:41:22:28:97:e2:56:8c:
         37:35:c9:7a:0e:9c:96:0f:44:a6:7d:72:ff:37:a5:d8:d2:7e:
         37:93:96:20:04:c6:b6:02:5e:27:63:c6:9b:c0:af:d3:98:92:
         f4:7a:c0:0e:0f:85:8c:a8:da:0f:e5:cd:40:ca:4f:0b:4c:b3:
         4f:af:71:f9:f2:38:b5:e8:85:72:2c:6a:7e:22:76:85:49:88:
         87:3c:7c:fd:bf:eb:58:a9:41:17:0c:22:44:f0:6e:97:b7:2c:
         db:a4:a1:a1:ab:fa:3b:fb:ac:98:5e:f0:ef:95:16:ea:dd:e7:
         90:92:12:6b:2a:3b:19:0a:5d:fa:a7:34:df:39:6e:3f:24:57:
         4c:c3:99:4f:20:ab:f7:81:96:b7:c9:62:27:cf:b5:62:85:5c:
         f6:4f:a3:ce:71:93:8b:81:40:de:a4:43:8d:9d:18:47:19:70:
         6f:17:52:c2:02:08:24:8d:92:49:00:61:a8:0c:3e:d3:94:73:
         b3:61:35:e6:27:00:e6:5c:b9:6d:25:b1:6f:7b:30:ea:33:17:
         29:0f:af:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----