Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
File:                     iZJBoANIMVwCwOKpFQuGMIfRyFc.mft (raw, json)
Hash identifier:          /LbbNuk3LMfCLP8FqxOFkFFBJmWBiTnvnR5KTsOQgE8=
Subject key identifier:   E6:05:53:C3:7A:E1:01:C3:68:84:9B:38:12:AF:2D:2B:66:48:FD:97
Authority key identifier: 89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57
Certificate issuer:       /CN=899241a00348315c02c0e2a9150b863087d1c857
Certificate serial:       0191FB2303C2DE39B0CDBEBEAD1D7E4F950D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
Manifest number:          EF
Signing time:             Mon 16 Sep 2024 14:01:01 +0000
Manifest this update:     Mon 16 Sep 2024 14:01:01 +0000
Manifest next update:     Tue 17 Sep 2024 14:01:01 +0000
Files and hashes:         1: F50R9kEoYM-xg0L_RgS1kERIPC8.roa (hash: 6Y+iSfNsqXa5/OJNfrO1kF5sjgT7zFYpfiYsxHpO9uY=)
                          2: gzx51nKa18klkn9mmbB1HP8eux8.roa (hash: SgX8LjDjt8eGCtsEz72KcgEYWSkJa2m+TEEA7BPILuA=)
                          3: iAJOs3yB11epAJPEHYO-QXRFr3I.roa (hash: 0xp0N2Bdb8KdxT+Z0BJKkfOY9LkQ1R8p8dyzXTc2iQ8=)
                          4: iZJBoANIMVwCwOKpFQuGMIfRyFc.crl (hash: BMog4H2lrJMvxvfsf8LxxzWIlCaTjFjlYDAHxr9tdKo=)
                          5: kgiPzmA-eIC12ho7DuN2ev_yfDA.roa (hash: 4z8fCydezXD/5Nyza28gHObzfsuZSafgCvXjY+oa0Fg=)
                          6: nQitejt2gl3dIqcNaDPm0wzdG88.roa (hash: x4QSsbp5bZGlcXFPKsBQR5owTwQ1bX+ecijkA4ebE0Y=)
                          7: z9Im3DvFiXpIAeZw9GV_Dliuhx0.roa (hash: SYc/IhIbASoFRi4niVgu+Uo3Cjz2Rm++iDk+G7qsKDo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:23:03:c2:de:39:b0:cd:be:be:ad:1d:7e:4f:95:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=899241a00348315c02c0e2a9150b863087d1c857
        Validity
            Not Before: Sep 16 14:01:01 2024 GMT
            Not After : Sep 17 14:01:01 2024 GMT
        Subject: CN=e60553c37ae101c368849b3812af2d2b6648fd97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e0:8c:43:03:0a:cd:23:95:4d:bb:1c:e5:30:
                    2d:67:29:4e:61:08:0b:81:1f:7f:4c:26:d8:1d:7d:
                    90:cb:9b:57:d7:af:ca:5c:ad:cb:ee:03:d0:25:78:
                    06:b1:bd:20:e1:12:50:da:cb:93:2c:bc:09:2d:a6:
                    ec:76:4a:42:45:c1:d3:6f:c3:04:91:e9:49:18:9a:
                    2d:42:03:37:97:ba:15:bf:a9:8b:9a:01:21:53:aa:
                    63:5a:69:be:53:16:fc:7e:27:d8:7d:38:e8:ea:29:
                    98:ee:ba:67:69:11:fa:ae:70:ef:03:bd:e4:12:9d:
                    e7:0f:18:98:48:c1:da:89:7d:11:b3:ef:a9:ec:2e:
                    2d:56:f4:7a:02:cf:08:f7:fd:26:3a:0c:1c:38:8f:
                    35:38:4e:69:20:2f:65:64:77:75:c1:67:00:bc:f7:
                    ee:8c:59:81:40:28:a3:48:96:c7:93:bb:7e:2a:88:
                    b9:96:99:c6:f1:6d:d1:3c:86:73:b8:d0:65:d9:83:
                    f7:d0:d9:d8:47:f6:e4:da:ce:b1:e5:4a:0a:ba:77:
                    3f:6c:9b:1d:c1:cc:ff:5d:b2:f2:6d:42:2f:4a:3e:
                    c6:b8:9a:a5:61:9f:40:9b:67:d0:dd:c0:41:c4:6c:
                    c7:2f:02:23:6f:8d:39:b8:21:6f:f0:80:b6:e5:cd:
                    ce:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:05:53:C3:7A:E1:01:C3:68:84:9B:38:12:AF:2D:2B:66:48:FD:97
            X509v3 Authority Key Identifier:
                keyid:89:92:41:A0:03:48:31:5C:02:C0:E2:A9:15:0B:86:30:87:D1:C8:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJBoANIMVwCwOKpFQuGMIfRyFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e79b87-d51b-4f15-8a32-99e780bf3b98/1/iZJBoANIMVwCwOKpFQuGMIfRyFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:0c:75:a7:c6:d2:1c:58:fa:ed:97:26:b2:de:0a:d4:59:2f:
         e3:50:69:73:c7:d6:98:cf:7c:ba:ce:0f:cc:e6:78:cc:60:cf:
         05:eb:e1:81:53:6d:20:7f:4e:03:58:59:85:8c:f4:37:49:03:
         c2:f7:5f:99:d9:b0:c0:15:5d:0b:ea:b5:00:a4:e6:88:fa:b9:
         c1:74:2a:d7:29:93:7d:60:74:3c:9e:fc:a8:7c:8a:28:0c:a2:
         b4:62:46:fe:6d:af:98:d7:c7:c7:96:b6:02:d6:3e:12:82:7d:
         47:0b:c4:48:13:7c:6d:70:db:46:ce:1a:1c:f6:84:f8:d0:33:
         37:ef:a6:01:56:38:22:69:ef:a6:14:cc:7f:94:cc:7d:df:a6:
         b1:e1:54:55:3e:91:7c:49:5b:4e:8c:32:75:64:fa:27:54:00:
         74:06:ac:51:0b:05:eb:08:d7:da:16:95:59:2f:c9:19:5e:ee:
         eb:25:5d:27:3e:9e:71:bf:cd:d4:a8:4a:f8:fa:ad:bb:b7:d2:
         34:4e:67:5f:8a:c3:a2:c7:b0:d4:d8:74:29:aa:6d:7d:28:8a:
         ff:85:df:12:a7:df:da:64:61:f8:f9:f6:83:e2:39:62:79:14:
         72:27:6c:ea:33:c9:fb:20:e0:18:75:a8:f6:06:06:2b:cc:0d:
         c8:25:d3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----