Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
File:                     cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft (raw, json)
Hash identifier:          B+ezRa+msDZxW/sNQZiI8vOgwF+7fy5OkcxaaGYyicw=
Subject key identifier:   6E:DB:8F:46:79:5B:28:74:25:D1:26:0C:F0:11:FF:59:17:B1:99:22
Authority key identifier: 72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
Certificate issuer:       /CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Certificate serial:       019233C93C61D28A03C6A684EE6497A51397
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
Manifest number:          12D9
Signing time:             Fri 27 Sep 2024 14:01:18 +0000
Manifest this update:     Fri 27 Sep 2024 14:01:18 +0000
Manifest next update:     Sat 28 Sep 2024 14:01:18 +0000
Files and hashes:         1: 2_Lor6pJoPyeGobTxIk3qzMNWfo.roa (hash: C3p+fj9T6wVc3CfOCCVHQWPcTJC80MTrbouZx+LQzng=)
                          2: ZbAgCt6LQuL_KKhyK_i_9lrtxlk.roa (hash: 4PS5EazVnJU+GbJa3cVfLrZ59rdhEQBnwMZ1E7QaXVM=)
                          3: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl (hash: lmidG24aF4/PqSZtEL1Gvvws+KtYXcWMui0PDyU98HY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:33:c9:3c:61:d2:8a:03:c6:a6:84:ee:64:97:a5:13:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
        Validity
            Not Before: Sep 27 14:01:18 2024 GMT
            Not After : Sep 28 14:01:18 2024 GMT
        Subject: CN=6edb8f46795b287425d1260cf011ff5917b19922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6e:96:22:b6:04:78:48:52:37:94:26:b6:14:
                    36:aa:7d:f9:cb:e2:b4:11:f4:4a:66:e9:89:78:d3:
                    b7:34:d3:96:ed:50:9f:18:ee:47:db:b2:6c:17:13:
                    a2:09:d9:8c:7c:b8:b9:76:cb:19:67:6a:02:fe:00:
                    8f:8c:e3:bc:32:d2:79:23:b5:a6:09:b8:46:20:2f:
                    f6:0c:44:2e:40:e3:df:f0:6e:f9:3d:c5:35:f9:df:
                    92:78:df:47:d0:5b:9e:e9:42:95:3f:04:6b:4e:5b:
                    99:cd:14:67:c2:88:fd:a8:da:5f:d4:7a:f4:e7:02:
                    b7:0a:c0:68:75:d7:1c:89:8a:60:55:d7:8d:93:83:
                    dd:52:b8:83:19:55:15:c9:d1:ed:8b:64:65:22:e7:
                    44:c0:39:35:58:61:98:7c:f4:ae:d4:4b:b4:a4:e8:
                    22:26:19:d2:27:27:00:60:31:0c:1a:f1:c1:92:df:
                    0a:ba:fa:f6:b3:70:93:d7:eb:47:52:41:21:b2:76:
                    95:87:fb:d5:44:05:dc:24:99:1f:f5:a1:7b:a1:d1:
                    d0:36:54:37:74:95:4a:0d:72:28:07:80:18:27:05:
                    63:e7:f9:52:3b:bd:dc:b1:e9:1f:99:47:c0:e8:07:
                    0e:4d:9d:d1:35:a7:3d:d5:cc:0f:31:bc:4a:42:e4:
                    60:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DB:8F:46:79:5B:28:74:25:D1:26:0C:F0:11:FF:59:17:B1:99:22
            X509v3 Authority Key Identifier:
                keyid:72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:8f:74:cb:fd:68:76:9e:37:67:62:26:aa:a5:5a:e5:98:f3:
         00:ef:d3:af:41:c5:62:e8:ad:d9:6e:94:80:d7:9d:cc:86:03:
         c6:b4:1b:8f:bc:4a:62:16:31:ff:24:0e:86:99:54:8d:8d:ee:
         6f:06:ad:a2:ef:66:02:95:27:c8:02:96:f7:05:1f:1a:a7:6d:
         fb:8e:59:62:ec:74:4d:74:41:98:2c:cd:26:c3:50:dc:ec:7f:
         27:f7:71:c6:a3:23:6c:95:4a:9a:2e:15:d8:02:ee:22:d7:3c:
         60:32:60:54:b1:bb:c7:d6:31:2a:8c:5a:90:80:a2:5f:82:0a:
         92:3a:93:0a:b6:99:a5:24:bf:f0:67:7d:d1:c1:8a:ef:41:95:
         8d:4b:bb:70:c3:b0:4f:45:a0:73:f2:61:5d:0d:d5:d9:e8:8e:
         6a:33:6c:bf:1f:3a:7b:03:52:9a:77:33:83:7e:3a:17:10:8c:
         17:2b:2d:57:3c:17:8a:ec:2b:f4:94:60:4e:bc:b1:80:71:02:
         3f:5e:12:fc:01:4c:cc:67:46:3e:f7:56:e6:9a:3e:ef:a9:2b:
         ed:4d:a6:83:75:ea:ad:ad:33:f0:a8:f1:77:db:5a:02:70:21:
         3a:bc:dd:ac:c7:30:a4:2c:57:75:e3:4b:c2:8d:05:e9:83:15:
         36:c4:46:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----