Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
File:                     9SMu6AX3jlku_yzKYVORCeWjRn0.mft (raw, json)
Hash identifier:          2aqmK9IUk7YJnMDhbzikHDyVQr1SiUfaftrqPrd+Bkg=
Subject key identifier:   AC:F8:6E:36:8E:6F:BF:5C:93:80:94:B4:BB:31:89:82:56:84:C2:7F
Authority key identifier: F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D
Certificate issuer:       /CN=f5232ee805f78e592eff2cca61539109e5a3467d
Certificate serial:       0191FA476652C577E03A4AFAF36DEC6F6565
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
Manifest number:          EA
Signing time:             Mon 16 Sep 2024 10:01:08 +0000
Manifest this update:     Mon 16 Sep 2024 10:01:08 +0000
Manifest next update:     Tue 17 Sep 2024 10:01:08 +0000
Files and hashes:         1: 1-FYvMC6ph_CcKlep5DWb8ylHlyg.roa (hash: dpkEx8PngDVOCDmuL/BxaGfyBhSAAc6TQb7M6y0VZFc=)
                          2: 9SMu6AX3jlku_yzKYVORCeWjRn0.crl (hash: XasswHUyABSrzg6bXqCQWWgql3USSmeSm6lFU0eCm5w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 10:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:47:66:52:c5:77:e0:3a:4a:fa:f3:6d:ec:6f:65:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5232ee805f78e592eff2cca61539109e5a3467d
        Validity
            Not Before: Sep 16 10:01:08 2024 GMT
            Not After : Sep 17 10:01:08 2024 GMT
        Subject: CN=acf86e368e6fbf5c938094b4bb3189825684c27f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bf:52:72:26:6e:f2:f7:b9:2e:8c:4b:25:50:
                    45:b5:7a:18:c8:25:e1:1f:c9:cd:7d:7f:3c:5e:9c:
                    e8:66:ce:e0:4c:4a:eb:23:1c:c7:bc:56:22:36:3c:
                    91:01:64:1c:4a:e6:ad:51:57:85:43:2f:6e:e0:0c:
                    bb:ce:a6:f7:b4:71:02:a8:4d:87:1b:a1:cd:90:6e:
                    69:32:c5:f0:89:d3:f1:f2:01:2b:39:ef:31:20:db:
                    fa:7a:91:68:13:88:ee:83:fe:dc:46:28:3a:33:ef:
                    95:7d:8d:fd:a0:72:17:97:34:e7:36:63:fb:17:74:
                    ab:7e:c4:1d:30:e5:f0:0d:aa:05:28:8c:fe:17:60:
                    9d:be:02:f8:f8:56:4a:be:70:bb:3c:f2:02:05:2b:
                    7d:67:3a:c2:a1:89:8c:6d:c7:9e:c7:52:73:d2:7f:
                    c7:04:fd:d2:04:ba:dc:d3:3f:d7:67:6e:29:51:cf:
                    c4:48:6f:44:e2:52:e3:6d:93:ce:7e:48:93:9f:d0:
                    ad:df:3b:38:2a:94:95:dc:91:c3:1b:83:f8:b8:99:
                    9a:fc:2a:9a:1b:dc:8e:ad:39:e3:a5:b5:e9:bb:27:
                    79:a3:66:2c:76:f4:21:de:51:9f:ca:30:5a:06:97:
                    8c:1c:3d:2f:b0:b0:57:06:18:a8:2e:d5:7f:55:ff:
                    29:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F8:6E:36:8E:6F:BF:5C:93:80:94:B4:BB:31:89:82:56:84:C2:7F
            X509v3 Authority Key Identifier:
                keyid:F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:2b:ec:cc:b0:2b:fc:7c:df:d3:6c:57:29:59:15:b9:d2:a5:
         16:0c:30:08:3d:ea:23:83:9d:03:9c:c0:3c:fe:6c:bc:c6:3d:
         1f:0c:cf:05:27:e9:42:e0:70:5c:99:2c:40:ef:21:53:52:ea:
         4c:6f:89:04:19:49:49:6d:0e:bb:a7:0a:c8:99:f6:df:b4:18:
         e9:c2:fb:06:4f:7e:96:32:5f:2a:7f:52:a2:29:66:e0:5d:c3:
         3b:ad:3d:46:d1:1f:7d:4b:c6:d4:1a:fd:03:df:cb:d1:5b:5b:
         15:4c:8f:d0:82:be:db:20:8c:09:48:e4:36:4e:a8:ae:6b:00:
         cf:a3:ee:8a:3f:eb:f4:5c:ab:07:de:c0:1a:c0:de:2a:35:e3:
         d2:d6:b1:40:6b:cc:8e:d8:3f:4f:a2:b6:7a:c2:58:c4:9f:18:
         9b:66:47:ab:b4:8b:34:b3:64:7b:a1:22:83:2d:82:98:a5:b4:
         4e:fd:85:01:3f:27:07:02:07:70:c2:2a:23:5e:8b:f5:e7:d0:
         ea:3d:a2:ef:2e:9c:5c:77:83:6a:f5:e5:2d:ab:02:bc:71:81:
         5e:10:ad:72:1b:b7:43:9c:83:32:ee:cd:2d:d3:c0:cd:08:b2:
         4c:0d:64:0d:ab:fb:06:0f:5d:4a:79:7a:ce:0a:d9:f0:03:0b:
         ec:f7:ce:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----