Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.mft
File:                     pF3taOImAyG8o56EZbScJdWKVuY.mft (raw, json)
Hash identifier:          qKqi9Qacluoa0X/e6Sy2SnoNRAD9yeqVhCW/7BsUyzQ=
Subject key identifier:   5C:0B:EE:74:9F:25:8C:80:FE:2B:D4:34:BD:2E:0F:AB:77:50:DB:0A
Authority key identifier: A4:5D:ED:68:E2:26:03:21:BC:A3:9E:84:65:B4:9C:25:D5:8A:56:E6
Certificate issuer:       /CN=a45ded68e2260321bca39e8465b49c25d58a56e6
Certificate serial:       0191EB7A1BEF9CECCAF4CD7ACA99F087B8BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pF3taOImAyG8o56EZbScJdWKVuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.mft
Manifest number:          0A2E
Signing time:             Fri 13 Sep 2024 13:02:13 +0000
Manifest this update:     Fri 13 Sep 2024 13:02:13 +0000
Manifest next update:     Sat 14 Sep 2024 13:02:13 +0000
Files and hashes:         1: 9vHrqQ9e6Tk0PoHoqRwnWYOs6TQ.roa (hash: Rtagawwq1eAQVgDt0Tz4oz4Q1TjQ01SF2sdkaVR8AtM=)
                          2: DqQLTGlYPqP4PbcWT9xn9ttyRhQ.roa (hash: 62EApHSCW/VajssDqzexu4Amaw2ffAl20HJf9/ETHkQ=)
                          3: jX7UTDcWPV66DrTelOBJVcoyOp8.roa (hash: ZJAnzxoEc86PcWxo0bZXyNAURKDOZOu4LKhVeql4Zzs=)
                          4: pF3taOImAyG8o56EZbScJdWKVuY.crl (hash: +WbLSCF35dWNE/H1p5HUZXRir7aXafNCjUxXJfdjdMw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pF3taOImAyG8o56EZbScJdWKVuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Sep 2024 13:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:eb:7a:1b:ef:9c:ec:ca:f4:cd:7a:ca:99:f0:87:b8:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a45ded68e2260321bca39e8465b49c25d58a56e6
        Validity
            Not Before: Sep 13 13:02:13 2024 GMT
            Not After : Sep 14 13:02:13 2024 GMT
        Subject: CN=5c0bee749f258c80fe2bd434bd2e0fab7750db0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:42:f4:5a:51:b2:b8:d3:3e:e6:30:7e:94:36:
                    64:13:94:98:e9:69:81:8d:79:e6:09:89:ba:10:53:
                    09:4e:c7:d7:25:75:b1:6a:7b:84:98:8a:e2:d3:bf:
                    76:b8:52:cd:92:3a:6e:b5:26:9f:12:b8:2c:61:b6:
                    65:51:c1:cb:11:0f:cd:21:f1:95:c3:f2:6d:3a:31:
                    83:f9:4a:76:04:b0:78:9e:47:00:92:3d:6f:8f:08:
                    22:e2:4d:ef:28:c6:14:be:0a:e2:99:ed:2a:0d:7d:
                    87:21:40:66:a9:c1:b3:67:a2:ee:b7:1f:3e:cb:c1:
                    34:40:cc:ec:3e:50:26:57:ca:c8:7e:5e:b2:eb:02:
                    f1:c8:88:79:f2:2b:82:06:9a:f7:65:f2:05:13:db:
                    8a:07:e0:1f:63:40:47:2f:4b:77:b8:97:b5:33:ef:
                    6e:18:ba:e1:c7:4e:8d:46:12:1e:72:90:3c:71:78:
                    4e:fe:49:c6:8c:59:80:6d:7b:42:22:00:38:eb:cb:
                    2e:bf:58:43:a8:60:83:39:97:d7:1f:4d:bd:d1:1a:
                    5b:13:e1:c6:b9:9d:4b:c6:0f:ef:6d:81:28:b0:c4:
                    09:f7:16:e9:78:d7:43:45:78:60:92:83:cb:9a:77:
                    f8:6c:de:15:9a:c3:ea:ac:5e:c6:1e:79:4a:9a:1b:
                    99:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0B:EE:74:9F:25:8C:80:FE:2B:D4:34:BD:2E:0F:AB:77:50:DB:0A
            X509v3 Authority Key Identifier:
                keyid:A4:5D:ED:68:E2:26:03:21:BC:A3:9E:84:65:B4:9C:25:D5:8A:56:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pF3taOImAyG8o56EZbScJdWKVuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:49:cb:19:9b:f5:e5:43:df:d5:f6:64:3c:47:c9:89:01:43:
         30:ae:86:5a:9f:56:19:c6:35:82:f0:f5:56:a4:d3:2b:bd:54:
         7a:8c:16:d6:dd:43:de:03:f9:e5:fd:4a:e4:c6:75:5d:5e:72:
         8d:27:22:e4:cc:41:25:9d:c0:2d:1a:1b:4c:6b:da:f4:69:60:
         63:9c:6a:c9:86:30:65:f4:2a:7f:41:d4:0b:85:79:d1:8a:12:
         58:ec:e5:ef:39:f6:25:bb:86:6c:d0:a5:e8:9c:da:6b:c8:a8:
         79:fd:f8:e0:18:1d:b1:4d:96:c8:cc:7c:85:94:6b:a2:2b:8d:
         f3:82:6f:9a:5d:26:bd:59:6b:34:b7:b8:5d:22:a8:68:98:e8:
         13:75:d9:67:9c:3f:f8:63:35:60:f0:41:cd:6c:62:b8:36:36:
         5a:35:76:5f:49:c7:8f:1f:48:87:b4:18:ea:d8:d4:de:8c:6b:
         e9:2c:46:9b:5c:ea:22:3d:c3:7e:2b:c9:27:ab:87:74:ca:33:
         3b:15:6e:2a:c8:71:f3:8f:93:0e:8c:d4:b1:4d:12:f3:52:74:
         21:1e:35:9a:58:b1:3a:3c:99:07:e5:ad:22:f7:d9:3c:62:cd:
         8f:72:17:d0:63:fe:a8:15:e0:a7:76:bf:48:da:2a:34:99:e5:
         43:30:dd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----