Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
File:                     06fDvga8RcPxK5CxhSeK1OyRl1Y.mft (raw, json)
Hash identifier:          HVi5UyJiWZq4YelQOk+AduOPphCrQ8D6WDFJ5Vx9pbM=
Subject key identifier:   C5:41:0D:20:66:68:68:82:64:39:32:6C:B3:C3:21:78:4E:3B:EC:7A
Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Certificate issuer:       /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Certificate serial:       0191FAED400E20E66E6971E0645A594ED117
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
Manifest number:          10DD
Signing time:             Mon 16 Sep 2024 13:02:18 +0000
Manifest this update:     Mon 16 Sep 2024 13:02:18 +0000
Manifest next update:     Tue 17 Sep 2024 13:02:18 +0000
Files and hashes:         1: 06fDvga8RcPxK5CxhSeK1OyRl1Y.crl (hash: WjpGCpSSBEDGXm6+tEGKezsEs5JayYclQsRPFc1V9xY=)
                          2: 1-HB9inSIrMO5lWy76NTYEVQ_4mM.roa (hash: ieQoMxH+KhT8fmdk1tLfAl5S4+nqZ2Y6dX0yEaM5gEI=)
                          3: FUYjq3S9XxtlJuaiBuAVR6jX5mU.roa (hash: a3vEuamY4t/XRj2np9Wc1PcYkgvgoKcsmuS/Kg2PVEA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ed:40:0e:20:e6:6e:69:71:e0:64:5a:59:4e:d1:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
        Validity
            Not Before: Sep 16 13:02:18 2024 GMT
            Not After : Sep 17 13:02:18 2024 GMT
        Subject: CN=c5410d20666868826439326cb3c321784e3bec7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7e:f0:85:4d:e5:3a:fb:02:f2:36:b4:8a:78:
                    17:9f:ac:1b:af:69:96:54:57:b3:2e:c5:65:8a:48:
                    5e:f7:12:ee:ca:a7:c9:7e:41:fc:71:8a:85:d4:91:
                    01:3a:37:a1:12:af:af:91:e5:0c:b3:46:95:cf:a0:
                    32:3c:9e:1b:81:29:83:7b:06:b9:e1:d1:a6:dd:4e:
                    ec:24:da:ee:63:b4:0a:4d:d9:9d:03:af:9a:6a:ac:
                    f6:51:af:ae:5d:5c:ae:10:d4:ca:cf:ce:85:57:0e:
                    33:c1:c3:c4:aa:d8:81:6e:da:5e:4b:40:de:0f:11:
                    3c:13:5d:c2:0f:5a:ab:e6:fc:3c:6c:a2:dd:ef:e4:
                    b3:11:85:af:d8:0f:1f:4b:5b:42:f3:23:b8:64:c0:
                    15:d9:6e:ea:4d:77:30:0d:33:69:65:6a:8e:ad:01:
                    e5:bb:19:7d:90:c7:a7:01:f8:6d:f4:a8:00:59:41:
                    df:83:9e:ce:72:4a:94:bf:03:0f:4c:86:13:43:14:
                    b1:5a:b1:1f:c6:b7:09:42:02:c8:b0:44:6d:e9:87:
                    e2:06:68:88:07:2a:e4:fa:5d:24:13:18:7a:9c:9b:
                    f9:bb:ce:1b:26:37:7b:c0:28:48:c8:63:84:2d:e5:
                    a7:46:78:d9:60:48:84:4f:ae:d4:17:5d:7e:6f:a0:
                    6e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:41:0D:20:66:68:68:82:64:39:32:6C:B3:C3:21:78:4E:3B:EC:7A
            X509v3 Authority Key Identifier:
                keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:79:a2:ff:20:0a:be:80:52:eb:7a:ce:e3:ee:21:da:68:56:
         0d:e0:a7:62:72:f6:7c:a7:e2:07:fb:26:74:5d:f5:88:4d:1f:
         e7:be:bb:72:4e:c5:cc:b6:70:cc:61:e6:c5:3f:05:0a:97:d5:
         32:0f:5c:9a:6f:e9:ce:3c:8c:d9:53:7a:54:dc:05:8f:7a:9b:
         a7:5c:3b:35:84:12:96:24:9f:62:2a:c8:8c:1d:ae:16:6a:97:
         f3:e2:e2:8e:20:28:1e:ca:0e:d5:3b:b6:ba:9f:2d:ee:e5:7a:
         59:4b:6a:0c:d4:06:3d:1d:66:9d:47:37:ab:8b:57:ad:97:b5:
         2e:7d:eb:3f:50:4b:9a:1e:b2:8b:21:3f:88:4b:f1:e9:69:0e:
         6e:3b:50:89:e8:4a:e6:a3:39:5e:43:ba:e2:5e:cd:b0:c8:6e:
         d6:7f:4e:75:f3:75:31:15:33:04:84:d7:0e:41:41:61:7d:e1:
         e9:50:cd:cf:7c:46:65:5e:20:ce:15:42:38:ef:15:c6:da:66:
         dc:08:50:66:40:e5:fe:eb:5a:7c:14:ca:79:67:8d:26:fb:31:
         d1:d0:bf:9e:50:d3:57:7e:61:77:aa:d6:fb:b7:e6:8e:ca:5c:
         9d:fe:8a:96:b5:30:e8:34:93:2e:70:a5:47:26:f0:00:3a:bf:
         f1:86:42:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----