Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
File:                     153OHAWhQ_3YWEdABMR_bzv_90k.mft (raw, json)
Hash identifier:          AWkmLRk6s+ACx7/S7LsZF3zrLUZPeKw85+io4IlzSJs=
Subject key identifier:   6D:F6:E8:56:6A:6D:2A:8D:B8:FB:2A:90:31:4E:71:CF:7C:C6:09:1C
Authority key identifier: D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
Certificate issuer:       /CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Certificate serial:       0191FB22D5ED4D80CE122BEFBD3508AFC1D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
Manifest number:          015F
Signing time:             Mon 16 Sep 2024 14:00:49 +0000
Manifest this update:     Mon 16 Sep 2024 14:00:49 +0000
Manifest next update:     Tue 17 Sep 2024 14:00:49 +0000
Files and hashes:         1: 153OHAWhQ_3YWEdABMR_bzv_90k.crl (hash: je5dJ8f8DgIq1l40VaL1tgX5vIeVQvch0dYbgPTU+Vw=)
                          2: 8UpMixWrF4KZxATwaYXu73Tl6J8.roa (hash: Y8luonwBpec3sNaM3psXiCVoIk0+spympNdZePAZnw0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:22:d5:ed:4d:80:ce:12:2b:ef:bd:35:08:af:c1:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79dce1c05a143fdd858474004c47f6f3bfff749
        Validity
            Not Before: Sep 16 14:00:49 2024 GMT
            Not After : Sep 17 14:00:49 2024 GMT
        Subject: CN=6df6e8566a6d2a8db8fb2a90314e71cf7cc6091c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e5:1f:ed:7d:e6:a4:04:a7:e3:c3:64:a3:7d:
                    77:28:a3:5f:0e:c7:2a:34:bb:e5:95:c8:2d:62:7f:
                    a5:cd:d3:94:02:3c:3e:de:df:3a:7b:a7:89:99:48:
                    6b:43:58:96:ac:98:bc:26:7a:82:52:3d:46:04:7e:
                    9b:77:27:10:8c:05:eb:32:23:d9:c8:4d:76:18:ee:
                    60:5c:3f:dd:49:38:65:7e:a7:74:6a:df:5e:2a:9d:
                    55:d9:a6:54:46:76:ad:d9:f2:a0:12:fb:20:11:b8:
                    45:36:5c:09:a4:59:9a:dc:57:29:e9:8e:b9:3c:46:
                    99:c6:dd:5f:5a:6d:3b:6f:cf:4a:4b:0f:75:2b:dd:
                    14:48:1b:53:69:97:c5:4b:1f:92:19:c2:16:e8:c9:
                    bf:3f:c4:b3:44:31:47:21:aa:65:0f:08:4d:3f:29:
                    45:48:0f:b1:28:ab:3f:4d:68:4c:5a:96:23:62:da:
                    51:7e:89:bc:67:5c:49:c2:79:c0:dd:91:01:8e:d0:
                    ed:88:06:7f:a6:0a:95:aa:8f:c1:58:a9:a1:92:2d:
                    69:1a:3c:d0:2b:fb:63:13:50:3e:13:09:cc:de:b2:
                    98:10:c9:67:de:a7:32:f7:a6:10:cc:b8:26:da:3f:
                    00:90:fa:84:43:89:7f:c8:0b:ec:20:2a:97:67:ec:
                    70:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F6:E8:56:6A:6D:2A:8D:B8:FB:2A:90:31:4E:71:CF:7C:C6:09:1C
            X509v3 Authority Key Identifier:
                keyid:D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f7:98:2c:39:bd:6d:24:89:fa:cc:5d:09:fe:54:18:19:65:
         35:e3:e4:6b:53:91:e4:51:a0:c6:65:5f:08:d8:6e:22:d3:ba:
         df:09:fc:46:4f:aa:ac:f1:0c:18:1d:08:fa:f8:a2:76:73:7a:
         30:34:a1:e5:58:2b:39:6e:9b:a3:76:6a:1f:6a:fb:79:e0:70:
         2b:e9:6e:65:26:32:da:5c:9c:60:a3:fb:8b:72:af:25:55:77:
         c8:11:ea:38:98:0b:7a:f6:8a:bd:d8:38:e7:1b:8a:ac:f8:d6:
         5f:b0:38:98:be:c6:e0:7e:55:5f:fc:a0:2f:08:7a:ce:d5:d7:
         48:8f:66:08:db:48:3e:8c:e8:f2:8a:68:4d:0f:65:7a:1b:bf:
         6a:83:7d:d2:53:9b:0d:ae:21:6c:84:fa:bb:8c:0f:2a:43:3c:
         f8:ac:ad:fe:2d:93:10:1e:45:dd:6f:17:17:f7:4c:b3:97:70:
         1e:75:e0:48:7f:d5:f0:75:ba:00:94:99:ed:21:ee:b5:db:0d:
         4a:b9:2c:75:0d:6f:58:fb:ee:dc:e5:e3:ad:e6:49:bd:5f:35:
         9d:17:20:eb:b0:34:20:47:c4:24:10:13:fb:ce:b2:48:ab:a6:
         15:a8:55:cf:75:93:d1:74:75:f3:af:1e:49:14:6b:f4:91:d6:
         b3:57:91:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----