Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
File:                     3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json)
Hash identifier:          vPo6kQaG8Iel9u2dECxOMvQ/Vfh3mX5uF16xOZs9tTw=
Subject key identifier:   76:11:AC:AA:24:C6:2A:4C:3B:51:95:C9:54:4C:11:D2:F1:BE:39:3B
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Certificate issuer:       /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial:       0191F96B7C34B6B10C76C2978C7AA118139F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
Manifest number:          0BFB
Signing time:             Mon 16 Sep 2024 06:00:56 +0000
Manifest this update:     Mon 16 Sep 2024 06:00:56 +0000
Manifest next update:     Tue 17 Sep 2024 06:00:56 +0000
Files and hashes:         1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: ckmmKwVs9phB4C34FXIYXhpvKGMGWLkqe+Asy6HLBUI=)
                          2: 7FmbgIyEcnNlCtI0e4dQoxcE6gM.roa (hash: bY0ACuZfN1E9zSxlVVfi47hMrlYVLdbmPVj7nq30shk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 06:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:6b:7c:34:b6:b1:0c:76:c2:97:8c:7a:a1:18:13:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
        Validity
            Not Before: Sep 16 06:00:56 2024 GMT
            Not After : Sep 17 06:00:56 2024 GMT
        Subject: CN=7611acaa24c62a4c3b5195c9544c11d2f1be393b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:44:65:da:06:0d:c8:fc:46:9b:9e:2d:0a:c2:
                    81:36:14:db:a5:7b:46:a8:61:b4:70:17:52:b2:fe:
                    53:b6:14:56:41:87:a4:86:bb:12:d9:50:65:24:13:
                    3a:88:2d:46:77:8a:3e:76:b9:75:93:91:7f:74:4c:
                    70:5f:5f:92:2a:4e:d6:cd:60:37:33:6d:fd:23:58:
                    5d:45:af:52:37:ae:de:6e:de:dc:8e:29:1f:29:f4:
                    e7:1d:4b:7d:ed:8d:ea:81:bc:51:6a:44:38:8b:8b:
                    c2:56:24:63:98:89:da:42:c1:84:e2:31:32:a8:4b:
                    74:fd:5a:7a:c8:c4:2d:b8:64:d1:8e:06:f6:fd:5e:
                    02:d8:7a:6e:4a:21:8f:df:5d:8b:2a:00:74:7a:ea:
                    40:ef:69:d7:78:76:c4:c9:3f:d8:ce:9d:6a:9b:06:
                    be:95:5e:c8:63:ed:b6:14:81:f2:44:65:f4:fe:fe:
                    b4:ad:e5:0e:cf:5c:bd:b6:b7:42:e3:e7:fe:f0:89:
                    7c:48:94:33:78:9f:c1:a7:aa:e4:26:df:0b:23:81:
                    8c:79:2d:5b:f4:4b:77:e1:06:e3:5b:3a:6b:ac:d9:
                    2e:e6:2c:22:83:4d:c1:68:76:c5:3a:49:5d:c0:27:
                    8d:0e:ae:b9:f1:f8:4d:f9:73:83:25:1c:f6:ca:90:
                    2d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:11:AC:AA:24:C6:2A:4C:3B:51:95:C9:54:4C:11:D2:F1:BE:39:3B
            X509v3 Authority Key Identifier:
                keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:82:35:35:26:ac:b4:ee:c5:78:fe:3c:2d:f5:5f:a5:89:06:
         8d:fc:33:f3:5f:6f:b4:44:f1:a5:62:e5:36:aa:04:0f:66:9d:
         4f:44:12:3b:fe:cb:a2:fe:f4:00:b1:fe:25:c6:1f:7b:c9:44:
         4b:4f:df:40:a1:38:28:9f:f3:fe:0c:03:bf:fd:9e:57:b1:3c:
         a5:e9:3b:85:78:c6:b8:1b:53:b4:73:9e:52:75:b2:cf:82:fd:
         2c:35:7e:16:ca:12:03:51:4b:34:f7:11:79:18:df:fb:aa:96:
         24:f6:e2:d2:1b:54:d7:49:27:02:25:e7:39:b5:5f:39:1e:ad:
         1d:41:a4:09:4d:a4:ec:f7:96:9c:1b:e3:37:56:d9:c3:ff:51:
         73:d4:bc:f4:78:e3:ab:ad:82:4f:fb:f5:db:17:71:a9:8a:80:
         99:09:6a:c2:72:aa:9a:da:98:d4:d3:88:3e:04:0f:1a:6c:9a:
         bc:12:9b:27:b4:43:c8:7c:84:4d:58:1d:d7:fd:fa:fd:f9:e2:
         95:13:96:17:6e:cd:fe:c1:6b:11:38:32:b7:05:35:db:60:cc:
         9b:fe:0e:22:46:46:94:38:53:b1:73:c3:2e:7e:48:37:e7:3d:
         df:4d:36:c3:8a:f5:9b:d2:97:45:8a:f0:0e:e6:2a:60:4b:90:
         fe:96:d7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----