Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
File:                     u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft (raw, json)
Hash identifier:          h6q3/LYqxNf+ETVX3/CxcktNgP/Wq2nf4L1i81G1IRU=
Subject key identifier:   4E:E1:B3:F7:97:E0:26:65:42:16:51:E6:3C:D0:67:F2:60:DA:3E:73
Authority key identifier: BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
Certificate issuer:       /CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Certificate serial:       0191F9D9CBF3E05C17E7907B93202F21505A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
Manifest number:          96
Signing time:             Mon 16 Sep 2024 08:01:25 +0000
Manifest this update:     Mon 16 Sep 2024 08:01:25 +0000
Manifest next update:     Tue 17 Sep 2024 08:01:25 +0000
Files and hashes:         1: OaUbixlXG3OJBvGCRVJ5CqcLE_8.roa (hash: H1FSKkUHV5QpczsTiLn0qYDoQGUZS/Grh45R7txDBqM=)
                          2: u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl (hash: I36/4McCtX07RqqWxah9fFsuOO+Nkos603QhDwcCLKs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:cb:f3:e0:5c:17:e7:90:7b:93:20:2f:21:50:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
        Validity
            Not Before: Sep 16 08:01:25 2024 GMT
            Not After : Sep 17 08:01:25 2024 GMT
        Subject: CN=4ee1b3f797e02665421651e63cd067f260da3e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f8:68:93:0e:3f:4f:12:e2:8f:e6:9c:23:73:
                    2f:a4:5a:dc:36:e5:2c:0e:1c:bd:09:59:9a:c6:8c:
                    54:a5:0e:bc:a1:fa:95:a5:7e:07:fc:84:61:f3:08:
                    b5:ad:68:3b:64:18:d9:12:67:b7:67:de:27:ad:a6:
                    34:f1:65:a8:79:07:db:7f:59:1f:c0:10:be:2a:6c:
                    56:9f:92:f9:59:8a:da:93:41:a1:73:57:a0:dc:df:
                    4e:03:ec:9c:0f:2c:b1:d4:f5:51:5b:34:3e:fd:a3:
                    d4:40:21:a3:4c:15:44:3c:93:4e:6e:66:3e:33:1e:
                    e8:7f:bb:15:c3:8f:c4:b5:a5:ae:3d:ab:c2:4c:86:
                    ec:40:0a:e0:9c:bd:44:6c:3d:2d:93:a4:f7:0f:2d:
                    27:9e:a3:b7:f7:f4:fa:c6:76:1d:8f:f9:5d:22:c1:
                    28:b3:02:16:dc:cb:ed:21:e5:66:1f:6c:75:65:cc:
                    bb:2a:95:87:63:f8:c4:5f:99:14:d1:62:58:59:5d:
                    bf:5a:af:91:c7:e0:47:82:9a:7e:66:75:4f:71:41:
                    eb:70:38:f4:a2:36:e6:b2:cd:05:20:a7:91:d1:fc:
                    c2:66:5a:e6:b7:f4:36:43:b5:bf:5c:8d:0a:d9:a4:
                    ac:90:88:5c:34:c5:a7:b0:86:11:cb:c6:8c:cc:17:
                    c2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E1:B3:F7:97:E0:26:65:42:16:51:E6:3C:D0:67:F2:60:DA:3E:73
            X509v3 Authority Key Identifier:
                keyid:BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:89:8d:ca:e3:ef:b9:48:6a:0c:dc:dd:80:9d:b1:9c:56:6c:
         7b:e1:c9:5e:25:28:74:72:6e:bb:d9:78:97:b0:f2:df:b5:53:
         42:69:ee:7b:82:6f:06:68:e1:ff:35:bf:7d:e7:b5:78:d7:64:
         eb:8b:ae:3e:5b:2e:34:b4:e0:b7:45:d9:5c:c2:fa:c3:87:ea:
         03:74:4c:b4:15:6f:55:db:66:51:ae:0a:09:5a:9c:81:ef:7a:
         f4:27:ff:dd:8d:00:80:6a:34:97:7d:34:51:69:67:33:48:07:
         86:31:3c:dd:b4:fe:96:67:f6:3a:c2:59:ee:e0:cf:7e:d2:27:
         75:d7:f2:10:b2:e5:21:95:6a:0c:9e:fb:91:5e:60:15:17:35:
         38:98:09:36:ae:5b:71:7c:e8:08:b8:19:bc:b0:49:c2:13:96:
         99:3a:94:82:d0:9a:c2:89:aa:5f:76:b8:5a:8d:d6:e4:36:2a:
         b0:c3:51:64:7c:bf:da:4c:fa:b4:87:ef:2f:0e:bd:63:9a:0f:
         dc:92:0d:45:41:52:36:00:e5:48:16:8c:9f:ba:14:a7:d3:2d:
         88:0e:14:5b:a7:86:8b:12:98:48:2a:4c:69:38:21:fd:0c:e6:
         12:af:38:39:d0:b2:c8:03:c5:92:bd:17:05:72:43:7b:8e:06:
         4b:92:3f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----