Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
File:                     3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft (raw, json)
Hash identifier:          fD35Qk23T7ZH9BcLZ4jbBsGpPUSv02BtXaUIjcpweiQ=
Subject key identifier:   88:EA:B7:2A:21:C7:29:DC:54:01:76:E2:66:B9:D6:35:15:20:80:43
Authority key identifier: DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
Certificate issuer:       /CN=dc327af32a98492757b200ea040db24ec3136592
Certificate serial:       0191FAEE061364C7D452502941F1A8B9DCD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
Manifest number:          98
Signing time:             Mon 16 Sep 2024 13:03:08 +0000
Manifest this update:     Mon 16 Sep 2024 13:03:08 +0000
Manifest next update:     Tue 17 Sep 2024 13:03:08 +0000
Files and hashes:         1: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl (hash: fVgW7B7BNJhPc/mIqyvH0Sl8rOw2XLd3OW0rmjPnurc=)
                          2: SLyc1Dqu1yTqZ6mcDXKc1lfI6mM.roa (hash: H1ibu1EvNQDK6gMjnz3QLAPLe7A4J5tb9xyL+5dyxaI=)
                          3: YdJKJ77YC9bj6-D1OUI9lR6GUoc.roa (hash: y2XYRSOF5HozzUJMwEx6ctxVfnoBzpbVCUNaV85Y0kY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ee:06:13:64:c7:d4:52:50:29:41:f1:a8:b9:dc:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc327af32a98492757b200ea040db24ec3136592
        Validity
            Not Before: Sep 16 13:03:08 2024 GMT
            Not After : Sep 17 13:03:08 2024 GMT
        Subject: CN=88eab72a21c729dc540176e266b9d63515208043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:64:37:10:97:ee:58:9b:bf:4f:ed:da:89:86:
                    ee:f4:24:19:f8:fa:08:fa:5c:e7:0d:82:87:49:1a:
                    32:f1:c3:c7:50:68:b8:59:63:94:f0:b8:48:30:1b:
                    de:b3:3b:7d:9e:c7:d3:00:d1:02:06:fb:56:eb:8e:
                    65:ee:9c:b9:e4:f3:68:0b:39:e0:34:37:9b:1c:4a:
                    66:5b:df:e2:77:63:84:93:2b:59:38:21:bf:da:7b:
                    ca:aa:b1:48:ef:08:8f:36:45:d1:1e:c9:75:94:88:
                    d7:c1:3b:3b:16:e0:4f:72:9c:af:fa:bc:bb:e3:af:
                    34:44:3d:62:30:c4:d2:dd:15:24:45:89:fd:3d:f5:
                    83:25:d5:06:a1:94:81:36:36:7c:32:f1:ea:05:57:
                    91:a7:c3:02:9f:10:3c:f7:1d:5e:c2:5e:d0:5c:43:
                    7e:5e:85:57:c2:2d:6f:fa:b1:18:7f:c0:17:c9:3f:
                    5f:04:0a:73:76:0e:68:ff:d7:68:a0:7f:65:b3:09:
                    d4:2e:91:66:75:ee:6a:47:8d:72:61:36:22:56:d8:
                    6a:ab:d3:a6:32:31:e5:3c:07:de:9a:47:6c:90:b6:
                    3f:f0:95:ee:00:e3:68:9f:7d:7b:50:7e:d6:6d:d9:
                    32:bd:e4:4e:2f:44:40:66:9e:3e:35:27:b2:13:52:
                    e8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EA:B7:2A:21:C7:29:DC:54:01:76:E2:66:B9:D6:35:15:20:80:43
            X509v3 Authority Key Identifier:
                keyid:DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:93:42:3a:79:82:5f:26:a4:cf:47:95:b0:c3:55:81:0c:91:
         ea:43:52:02:72:f7:30:22:ef:72:f3:80:31:13:b4:1c:8a:79:
         c1:82:7a:08:a4:4d:60:eb:b7:0c:96:0a:e4:55:6a:ba:b0:0f:
         a5:62:6c:a2:b5:30:c0:2a:b0:df:3a:cd:e4:6a:6c:40:f2:81:
         b7:dc:54:a9:3d:fb:fa:eb:b7:d5:e6:1e:ac:ea:db:df:ea:cf:
         59:0d:c7:33:cf:4f:61:de:41:eb:0d:bd:c6:52:65:c0:8f:0b:
         2e:1a:b2:4d:e5:1d:be:5c:2b:6d:97:37:b5:a3:ca:2e:80:50:
         cb:db:6d:13:1e:ae:8d:ca:e1:35:f4:1c:5a:1a:6f:39:98:80:
         fd:18:c0:ec:62:b8:ca:bf:f7:03:63:8f:14:2b:7d:51:27:a6:
         ca:3f:c7:b9:51:cd:55:48:18:33:c5:b1:50:75:16:08:cb:6b:
         46:ec:07:d1:4d:b7:8f:c8:a7:ac:f5:5c:76:98:3d:f5:84:a5:
         b4:0d:6e:77:c6:69:30:55:83:e2:d9:5d:80:ac:c2:07:f8:a3:
         09:98:c3:c2:a4:ff:aa:4c:72:4a:9b:ac:e9:39:2b:84:91:30:
         e0:11:2f:16:4e:3f:7d:3d:30:73:78:00:db:ad:eb:03:ca:e9:
         15:ec:e8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----