Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
File:                     GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft (raw, json)
Hash identifier:          h3xZb4Jfsit+z0Y5xlk1tcpaDCFGDMlqU1LMjQBf/Ms=
Subject key identifier:   B4:38:86:9B:B1:07:91:73:52:2B:67:0C:11:CD:7D:72:4F:1A:28:EB
Authority key identifier: 1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50
Certificate issuer:       /CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
Certificate serial:       0191F96C24C90328D259DB3B9509D4B57086
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
Manifest number:          C4
Signing time:             Mon 16 Sep 2024 06:01:39 +0000
Manifest this update:     Mon 16 Sep 2024 06:01:39 +0000
Manifest next update:     Tue 17 Sep 2024 06:01:39 +0000
Files and hashes:         1: GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl (hash: gjkCKaCd3zx9uWIx6jMtfoQ8riz7ErOBCdn+Xl95Wq4=)
                          2: Q7j4rDlvWr64Z5WHqrjOoVNkI-0.roa (hash: RLhmnW1tSxKRjPeX4vAwpctEBiYJbkH9CT1QNOBM25c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 06:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:6c:24:c9:03:28:d2:59:db:3b:95:09:d4:b5:70:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
        Validity
            Not Before: Sep 16 06:01:39 2024 GMT
            Not After : Sep 17 06:01:39 2024 GMT
        Subject: CN=b438869bb1079173522b670c11cd7d724f1a28eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b5:3d:f4:1c:35:6e:5e:97:f0:c3:de:ec:3a:
                    4c:21:e4:69:7e:e2:59:2c:60:78:d6:85:db:62:4b:
                    5b:8b:94:dc:5f:62:a4:06:00:b3:2f:f1:dc:76:9e:
                    6a:3a:8c:c7:91:84:8a:cd:09:51:9b:ac:49:ae:d5:
                    01:7c:4f:45:db:96:fa:3e:21:7c:29:a5:26:38:61:
                    e6:10:68:ff:6b:fd:56:69:93:5a:61:f3:97:46:a5:
                    2e:45:68:af:e4:4b:ee:6a:c6:29:82:c9:2d:e4:66:
                    58:d0:a7:a2:96:2b:6e:a5:21:43:43:d3:c1:5f:fe:
                    8a:3d:f1:4d:c3:10:5d:10:25:ef:57:51:63:7e:5b:
                    a3:e0:61:9e:8f:0a:51:07:ce:b8:47:10:3e:24:00:
                    ae:dc:0a:f7:82:10:11:95:d1:11:54:27:07:1d:e7:
                    b2:55:7f:71:d0:bc:51:77:1e:25:5f:65:49:d9:50:
                    29:2b:cf:a5:99:35:92:92:76:d7:1d:80:c5:6f:30:
                    18:9e:8f:59:54:7a:22:73:9d:b4:86:42:5a:bd:a3:
                    d1:c9:b6:4a:33:e1:c7:2c:7d:55:83:a5:1e:2d:98:
                    d2:94:9c:7d:5a:86:8f:23:e6:b5:db:86:fe:ea:b9:
                    ea:d6:f7:96:60:8c:47:0d:b3:ef:67:7b:08:e5:55:
                    9d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:38:86:9B:B1:07:91:73:52:2B:67:0C:11:CD:7D:72:4F:1A:28:EB
            X509v3 Authority Key Identifier:
                keyid:1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:a9:e6:29:d8:ca:22:41:d5:3a:45:e4:50:1b:89:13:52:38:
         6e:8b:c7:7e:00:d8:10:d2:6b:3e:ed:b6:4c:29:a8:d5:ae:4b:
         44:aa:38:6f:54:9f:f0:4f:6b:91:0c:f5:7e:1e:0f:59:b6:41:
         a7:71:f5:8a:a0:b4:f2:20:d8:81:29:9f:6f:91:b0:2e:6d:04:
         7f:db:17:a9:71:3d:e2:ff:08:52:55:0c:95:5d:71:ab:d6:76:
         6b:45:07:4f:c5:69:ca:dc:68:86:16:bc:e9:80:06:ca:66:04:
         86:29:87:36:9f:02:aa:b6:d0:1f:06:53:41:c4:55:37:c4:bf:
         9d:ae:d8:23:97:9e:df:a0:14:50:b0:36:04:8f:c5:08:a7:b6:
         7c:45:9d:12:d6:fb:f7:14:dd:49:3e:c0:e6:59:42:07:b4:51:
         c2:3b:7e:f9:11:fb:8e:99:5b:f3:ff:82:34:94:d1:9d:d5:af:
         b8:c8:15:58:3b:69:b9:c2:fa:6e:c6:36:fc:31:53:69:9f:ce:
         b0:09:b0:ae:fc:86:7c:bb:a9:61:26:d5:54:44:47:0d:74:12:
         9d:54:a0:dd:12:ba:25:9f:43:a8:d3:10:95:27:a0:f3:0a:b1:
         95:b3:fe:ae:64:8b:2c:34:61:93:3d:df:43:78:54:0d:93:5d:
         96:55:7c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----