Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
File:                     nHPZRT--37gMRUO7Up_DMMH4wc4.mft (raw, json)
Hash identifier:          JsVYSMRgl4HfRZTMC6ljzaxbWCkAXkBusRvdik9Fx+8=
Subject key identifier:   DF:0C:F0:FD:A7:65:94:FA:C8:6D:8C:27:77:6A:96:A5:B4:69:B3:6B
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Certificate issuer:       /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial:       019234DC0D0D23666B7588BCFC81DF9FC741
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
Manifest number:          088F
Signing time:             Fri 27 Sep 2024 19:01:29 +0000
Manifest this update:     Fri 27 Sep 2024 19:01:29 +0000
Manifest next update:     Sat 28 Sep 2024 19:01:29 +0000
Files and hashes:         1: 71j7-DdUGyJiroE2WUEstBNC1EU.roa (hash: KY6SOm/7cUfg7AEM0g91/8Tq198cY0Aqx910YYVqvD0=)
                          2: 8NxqwNwik_mO_nrf5Fs5nynUvxQ.roa (hash: Yd1/SVHjGPeRbU2G+cZVgH/KTpiZEhJ8+x0L3Gy6nBM=)
                          3: DdRCFIheUFidGVYkqyyFDq2Fupc.roa (hash: ZuRnTsFjjRzqtn5Q2uk0bKS1nWBcS7a3xm0Q/qBs1XU=)
                          4: E91MkQvI1BpwRvYEJEj3FV4HTiM.roa (hash: dWpiR5XtjwLZS2Ajf5QMRzZUj8gf50Hcty3K+CAltRQ=)
                          5: nHPZRT--37gMRUO7Up_DMMH4wc4.crl (hash: R5ozym2JDA1ykfLh0UnDKKkEyS5ykoTRByZ5LmZBjDE=)
                          6: rXUctUPnpjBD4HC2V17aKdpCVho.roa (hash: +Wbze0nJCCbNbNp0AVq7CiFXwdmmUMLIxTCn4x3kJ1c=)
                          7: sX-1_2wMCrTfQs6f1T_8ORS2sVI.roa (hash: +p1iJpQHcRA4XfYm05LKL/YmLXPIAi52sduqP7aeNLU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:34:dc:0d:0d:23:66:6b:75:88:bc:fc:81:df:9f:c7:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
        Validity
            Not Before: Sep 27 19:01:29 2024 GMT
            Not After : Sep 28 19:01:29 2024 GMT
        Subject: CN=df0cf0fda76594fac86d8c27776a96a5b469b36b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:30:4c:00:e3:4d:04:02:00:bf:34:44:cf:1e:
                    02:77:cf:5c:1b:95:35:49:86:c1:a3:a4:79:e8:88:
                    d7:1c:47:17:ef:92:9e:10:2f:47:c0:b2:cf:90:0f:
                    95:62:c9:3b:71:36:7d:bc:05:25:a8:5d:95:07:2c:
                    13:35:d9:e3:aa:37:d3:75:6c:2b:e1:92:2e:54:7b:
                    2e:36:fe:6e:c1:4c:06:44:60:7d:44:11:9e:8b:ff:
                    6d:16:4f:73:ea:ff:5a:6d:1d:11:41:3d:32:02:08:
                    e0:60:3e:12:5a:ca:33:76:22:ed:63:bd:4f:86:d7:
                    0b:85:c2:15:12:96:ee:ae:bc:23:79:ae:e1:bd:e4:
                    4e:2a:c5:0b:0d:d1:2e:79:e3:30:2d:ee:25:86:33:
                    b1:67:f1:b2:bd:e6:85:1f:84:ce:1b:b0:14:eb:58:
                    e9:65:9c:f2:2a:d0:6b:16:6a:ac:11:f5:74:e6:a9:
                    a7:1d:c1:51:ac:7b:67:33:3e:02:5b:7f:d8:2e:c5:
                    e1:ce:3a:1f:1e:bb:f9:69:a9:96:6d:e6:4a:2e:73:
                    52:bf:7e:4c:a4:62:78:eb:84:a6:f4:8a:d2:4a:3d:
                    3a:99:b6:97:e0:f7:fa:43:a4:75:ed:99:ac:e6:3d:
                    9f:89:9f:5d:aa:1d:03:48:bd:6a:74:2c:d0:73:78:
                    1a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0C:F0:FD:A7:65:94:FA:C8:6D:8C:27:77:6A:96:A5:B4:69:B3:6B
            X509v3 Authority Key Identifier:
                keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:74:51:c4:91:2b:46:de:0d:1c:a3:0c:64:65:48:7f:bc:e9:
         d7:3f:80:8c:fe:3c:b5:34:be:46:15:e1:60:dc:6e:33:84:5c:
         ac:56:fc:38:21:0d:9d:54:ed:17:28:4c:4b:51:ca:8b:46:25:
         04:0a:77:13:68:04:b6:ab:67:de:37:59:ef:29:81:93:a3:dd:
         fa:70:96:bd:04:01:f3:98:41:0e:a7:58:eb:73:b6:cb:01:f8:
         02:84:54:ba:71:be:b7:b0:4e:77:05:99:e8:3a:b3:93:36:59:
         25:07:0e:98:01:1b:03:8d:3a:0f:59:bb:f8:68:b1:51:60:9e:
         5d:9b:05:82:20:69:86:1a:b2:1a:89:0b:10:d3:92:c2:62:5f:
         7f:03:cb:2e:a7:58:6e:22:8a:96:c3:96:9e:ad:44:a4:cf:cb:
         c9:98:14:b2:61:96:39:9f:af:36:76:2d:23:1d:b5:35:e8:8b:
         33:c9:ea:76:5e:5c:7d:cd:fd:68:a3:91:96:56:08:92:38:b3:
         6c:f8:92:cb:c7:2c:87:cd:0a:46:cb:d0:be:51:28:cb:ae:2b:
         75:f7:33:d7:32:1f:93:df:66:7d:a2:9d:12:d2:e6:ec:15:a4:
         48:f8:58:ba:b9:8c:5c:8c:74:44:8d:b0:eb:24:cc:5b:c2:12:
         66:23:93:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----