Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
File:                     Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft (raw, json)
Hash identifier:          Jwcjvb81xRBb/hep8iCuqtbnUIX6YJ0cTYFT9qkd45o=
Subject key identifier:   43:A1:A0:B8:BB:19:6E:2E:35:EC:BA:AB:5F:98:1B:51:30:CA:E3:6F
Authority key identifier: 56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
Certificate issuer:       /CN=56376def1224839a6113d1d0cdd398104faaf2fb
Certificate serial:       0191F9A2814CBB8ACDC4915FCA0F0B569B9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
Manifest number:          0136
Signing time:             Mon 16 Sep 2024 07:01:02 +0000
Manifest this update:     Mon 16 Sep 2024 07:01:02 +0000
Manifest next update:     Tue 17 Sep 2024 07:01:02 +0000
Files and hashes:         1: Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl (hash: 2NSEjuqgNy7SBkfDoPGYyG2oBySz79tYnSViXCX9WUg=)
                          2: hFyGtH7qYxRaCrSMYokNmp1YevA.roa (hash: Ba2DOsPIXyjwuWDE3EdTe9G/WoUwcT4NaK3C0fWsvRo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:81:4c:bb:8a:cd:c4:91:5f:ca:0f:0b:56:9b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56376def1224839a6113d1d0cdd398104faaf2fb
        Validity
            Not Before: Sep 16 07:01:02 2024 GMT
            Not After : Sep 17 07:01:02 2024 GMT
        Subject: CN=43a1a0b8bb196e2e35ecbaab5f981b5130cae36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2b:c3:a7:de:9e:61:af:02:03:e8:f1:68:04:
                    d2:61:84:90:7c:e5:64:68:c6:45:7b:98:05:8e:27:
                    c1:9a:98:a9:04:93:3c:26:5d:c0:44:cf:9b:18:f9:
                    eb:28:87:26:d3:5e:46:42:f7:91:9e:be:89:64:12:
                    2b:c2:4e:46:71:0e:9f:6c:1f:1b:e1:1e:3a:0f:59:
                    3a:44:eb:92:fe:bd:00:4e:35:cc:cf:eb:5a:60:7d:
                    4e:c3:69:34:7d:04:19:a1:09:9d:bc:14:67:a3:f1:
                    3a:21:33:d3:41:d2:3d:d8:df:e0:3b:45:6a:e1:23:
                    75:b5:40:ac:b0:8b:9c:97:c2:ae:87:2e:ec:6d:f9:
                    33:3c:b7:4d:df:91:2c:20:51:93:89:5e:d8:dd:58:
                    82:26:76:e7:bc:57:81:e5:1f:d8:9b:43:26:9e:e4:
                    a7:a1:2f:cc:88:6c:b9:fd:8c:68:4b:dd:0a:93:7a:
                    9d:0e:c9:3e:b0:52:15:be:0a:4f:c5:f9:19:59:e0:
                    0e:71:d2:1a:ca:66:b2:45:08:b2:e4:28:66:9b:78:
                    fd:91:3d:60:5b:a9:e7:5e:ff:15:fe:20:b4:5c:8e:
                    64:62:cb:12:90:91:e6:15:5e:ea:1a:4c:7f:c2:b3:
                    c9:c4:5a:29:1f:3e:63:3b:77:db:cb:e2:62:44:53:
                    a4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A1:A0:B8:BB:19:6E:2E:35:EC:BA:AB:5F:98:1B:51:30:CA:E3:6F
            X509v3 Authority Key Identifier:
                keyid:56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f3:c0:48:28:08:8e:b9:c9:7b:4f:5b:d1:42:7d:0f:06:ef:
         d9:07:b3:37:4e:66:31:b1:35:32:67:ed:90:11:49:8d:05:56:
         c5:99:c1:e3:9a:d1:7d:23:4e:e3:8e:05:21:63:b4:d0:92:99:
         15:17:c8:1f:33:03:a4:0a:e9:19:fa:74:06:37:73:ab:32:86:
         40:b3:58:e8:5b:85:94:00:d7:d7:6e:d8:f8:d8:b9:ee:a8:db:
         1b:17:bd:23:f7:dd:67:0b:d3:7e:92:28:f1:0d:ed:6c:05:c4:
         48:50:42:f2:d5:00:1d:c6:33:7b:f3:2e:8b:25:08:60:dd:09:
         bb:90:4c:89:8c:74:78:7b:7c:07:56:c6:f4:68:df:11:35:06:
         cc:0f:d1:b0:4c:f4:38:2b:80:e6:8e:5f:6c:e1:0d:55:17:90:
         cf:22:f6:b5:3f:e7:62:f4:42:4f:bb:ab:a2:a9:eb:d9:55:17:
         e1:3c:eb:9b:54:cb:7a:f1:f4:aa:85:b4:6f:d6:f7:c1:45:24:
         27:c2:84:99:9d:f7:67:33:c2:6a:3e:90:45:b3:b0:bd:0c:cb:
         26:b9:70:dd:58:50:a8:79:ef:9d:08:de:57:60:05:d3:6d:b7:
         8f:6d:37:15:1c:5e:b4:f4:65:f4:5c:04:bc:4a:70:c5:1f:5b:
         97:1f:68:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----