Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/cea9b6-56b4-4b04-8b71-5d4d9d0c6597/1/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.mft
File:                     l2bGSG3nTBPUnMo_C-AiSjXM6mQ.mft (raw, json)
Hash identifier:          oHQyT5vuZHpiFps0YZ8ByjRas5Gav/RrkMa3oagKnsU=
Subject key identifier:   40:AA:1B:67:D9:CA:88:FE:D2:15:45:3C:CE:9C:12:3C:EC:68:BE:F3
Authority key identifier: 97:66:C6:48:6D:E7:4C:13:D4:9C:CA:3F:0B:E0:22:4A:35:CC:EA:64
Certificate issuer:       /CN=9766c6486de74c13d49cca3f0be0224a35ccea64
Certificate serial:       0191FA477B9B0B444B4B2BFBEFF8CBA93324
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/cea9b6-56b4-4b04-8b71-5d4d9d0c6597/1/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.mft
Manifest number:          012D
Signing time:             Mon 16 Sep 2024 10:01:14 +0000
Manifest this update:     Mon 16 Sep 2024 10:01:14 +0000
Manifest next update:     Tue 17 Sep 2024 10:01:14 +0000
Files and hashes:         1: EyQ5NlR_K9K6RFpGSWmsgpyqIpY.roa (hash: aKJsancMACtdTJN/pISRUz94pKitv+vKUJ4FJVet3yY=)
                          2: l2bGSG3nTBPUnMo_C-AiSjXM6mQ.crl (hash: YwcFn8sQtyEwmJ3lenAJq9EKYV1LxLFS3+JVJHXxrlM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/cea9b6-56b4-4b04-8b71-5d4d9d0c6597/1/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/cea9b6-56b4-4b04-8b71-5d4d9d0c6597/1/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 10:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:47:7b:9b:0b:44:4b:4b:2b:fb:ef:f8:cb:a9:33:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9766c6486de74c13d49cca3f0be0224a35ccea64
        Validity
            Not Before: Sep 16 10:01:14 2024 GMT
            Not After : Sep 17 10:01:14 2024 GMT
        Subject: CN=40aa1b67d9ca88fed215453cce9c123cec68bef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f1:b5:eb:99:e4:8e:e8:ea:3e:d8:cf:73:11:
                    e6:4d:0f:a7:c7:65:b9:31:e4:19:64:75:60:06:cc:
                    37:11:fc:40:ed:2c:bc:a9:13:f7:48:bc:30:6f:af:
                    a7:af:c3:a9:41:46:b1:49:31:de:b3:1d:cf:22:20:
                    19:85:75:47:df:14:19:10:3e:6d:a0:91:66:e5:1e:
                    17:6e:99:16:ee:1a:bf:10:1f:b4:37:b0:d1:e0:ef:
                    ec:0d:52:e1:40:a8:f5:6f:ed:50:35:6b:79:39:b5:
                    53:fe:59:f5:2d:d6:fe:a8:6e:af:f5:ec:53:92:b6:
                    a5:d1:4e:6a:26:50:58:ab:ed:81:47:be:30:d1:c1:
                    ff:8c:68:9c:a2:d0:45:77:e9:7e:eb:4c:d5:f5:da:
                    6b:16:cb:6f:ad:db:ff:45:2f:9c:c4:59:ad:1a:93:
                    09:5c:f9:c1:43:d0:ae:75:fa:b2:92:67:48:34:79:
                    87:a0:de:4f:26:90:32:2b:3d:86:8f:61:d7:01:b5:
                    74:ef:62:7d:15:58:7d:a8:e6:d9:30:65:f2:4d:98:
                    1c:fc:7a:25:02:42:05:a6:18:e9:76:bc:9f:7e:57:
                    cc:18:76:5e:c5:1a:40:ce:f0:a0:37:59:ff:3b:40:
                    28:04:8d:6d:ff:33:e2:dc:0d:26:de:d1:48:5f:76:
                    77:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AA:1B:67:D9:CA:88:FE:D2:15:45:3C:CE:9C:12:3C:EC:68:BE:F3
            X509v3 Authority Key Identifier:
                keyid:97:66:C6:48:6D:E7:4C:13:D4:9C:CA:3F:0B:E0:22:4A:35:CC:EA:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/cea9b6-56b4-4b04-8b71-5d4d9d0c6597/1/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/cea9b6-56b4-4b04-8b71-5d4d9d0c6597/1/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:79:7a:49:e6:2b:80:21:e9:a7:3f:6b:97:5a:f3:f8:f6:7a:
         ed:d6:42:39:0a:ed:b3:c6:a5:e0:2b:35:c8:63:8d:45:be:ff:
         bf:6d:5f:ca:61:71:4d:35:4a:ec:24:fc:1e:c3:df:30:80:f6:
         34:db:66:48:62:2e:a4:54:6f:2b:98:0b:da:c8:40:c3:6e:d1:
         81:ea:14:0d:fd:96:aa:ad:2d:80:16:fa:88:53:cb:0c:c7:80:
         af:af:22:51:71:d0:59:03:34:e2:c7:fb:27:d3:7c:55:8c:7d:
         3b:d5:1f:d7:9e:24:6c:52:c9:06:f6:47:13:da:d4:ba:f3:23:
         db:6b:f5:b1:a5:95:ef:7b:8c:8f:df:af:bc:9b:c5:c4:63:83:
         0f:77:40:0d:01:0b:f2:40:b6:c2:8f:79:52:8d:e8:3c:38:9a:
         fd:b7:e9:49:67:66:cb:0e:c8:6d:ca:52:6e:aa:ae:f2:fa:aa:
         8d:41:45:22:3f:4d:56:df:fd:4f:20:b9:89:f8:06:9f:4e:e3:
         d2:8f:53:36:5b:02:f0:25:6a:a8:ba:b3:91:fa:1c:7b:4e:53:
         ba:e7:58:7e:af:3c:35:f2:92:e1:ac:ec:7b:90:9b:2a:11:8a:
         ba:bb:12:b5:cf:e1:fc:c5:43:7f:ba:9c:10:5c:dc:b8:94:98:
         90:5f:58:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----