Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fdafd2-3dcf-4043-86e6-3e801694e048/1/GxL4tWgfVUoDsw4uT4BcZvgxXgo.mft
File:                     GxL4tWgfVUoDsw4uT4BcZvgxXgo.mft (raw, json)
Hash identifier:          r4ssbkNsnn4peK7rRMCnftWafc0qpFDecvFI/ZgHDIQ=
Subject key identifier:   2B:E2:A3:D7:BB:EE:D0:DB:C0:05:88:77:CC:5F:D4:30:4F:2A:A3:F4
Authority key identifier: 1B:12:F8:B5:68:1F:55:4A:03:B3:0E:2E:4F:80:5C:66:F8:31:5E:0A
Certificate issuer:       /CN=1b12f8b5681f554a03b30e2e4f805c66f8315e0a
Certificate serial:       0191FA104F44EB949FCD779877402E68ED7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GxL4tWgfVUoDsw4uT4BcZvgxXgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fdafd2-3dcf-4043-86e6-3e801694e048/1/GxL4tWgfVUoDsw4uT4BcZvgxXgo.mft
Manifest number:          EF
Signing time:             Mon 16 Sep 2024 09:00:58 +0000
Manifest this update:     Mon 16 Sep 2024 09:00:58 +0000
Manifest next update:     Tue 17 Sep 2024 09:00:58 +0000
Files and hashes:         1: GxL4tWgfVUoDsw4uT4BcZvgxXgo.crl (hash: YjpOvIPAe6rQ+tdJaftR64ASItexMCq7YOh31DCDErs=)
                          2: NJXziIlJYgbBGydQaQPeI4MJjpI.roa (hash: ujGy/n3hEVnZYpUbwco1uYfl/4NT+/I1rgR6gTcP/pw=)
                          3: QR-zQIVibRJB9ns_9zLe6nWD96k.roa (hash: jMrO0doBp+THPWATLIAWRCiu1D+dZsrkTGuCrPHOfLU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fdafd2-3dcf-4043-86e6-3e801694e048/1/GxL4tWgfVUoDsw4uT4BcZvgxXgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fdafd2-3dcf-4043-86e6-3e801694e048/1/GxL4tWgfVUoDsw4uT4BcZvgxXgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GxL4tWgfVUoDsw4uT4BcZvgxXgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:4f:44:eb:94:9f:cd:77:98:77:40:2e:68:ed:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b12f8b5681f554a03b30e2e4f805c66f8315e0a
        Validity
            Not Before: Sep 16 09:00:58 2024 GMT
            Not After : Sep 17 09:00:58 2024 GMT
        Subject: CN=2be2a3d7bbeed0dbc0058877cc5fd4304f2aa3f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a3:4e:1d:c4:d2:c2:8f:14:a5:f8:ec:92:0e:
                    55:bf:43:5c:63:e9:b9:b4:20:45:d0:f2:db:c3:c0:
                    47:d6:3a:2a:c7:50:54:38:fb:14:ea:90:cf:4d:17:
                    5d:71:79:2c:d6:48:7e:e0:b9:3f:d3:49:5f:ce:f9:
                    21:4f:bd:6e:90:3e:1e:85:0b:75:9f:64:c9:7e:64:
                    68:fe:77:60:0a:4d:e8:73:3f:ac:1c:e2:51:ee:d4:
                    d8:d8:22:02:73:8b:d7:ce:9d:e0:16:94:e2:8c:81:
                    7a:4d:b2:b8:f3:0c:94:68:3d:bd:72:01:c9:40:67:
                    f1:17:1d:b2:03:f4:36:58:d1:45:f3:01:d6:06:58:
                    43:37:f0:6d:93:99:46:b6:a5:bb:e1:b7:09:07:ba:
                    21:22:ba:9e:4a:75:dc:3c:fa:b3:3d:81:2f:0e:b2:
                    e6:1a:2c:e7:99:85:1a:0f:9b:e2:1f:7f:ef:aa:60:
                    8a:7b:f6:f8:bd:19:b1:ab:f6:f9:37:9a:73:65:af:
                    9b:e1:9c:32:ba:7d:0e:22:6c:da:e2:d3:44:ea:d6:
                    ae:de:72:06:3a:f4:a4:08:3f:1e:73:74:5a:b2:94:
                    15:fc:48:9e:4d:37:0f:aa:ca:b1:cc:76:ce:9f:ba:
                    a4:e9:a7:6c:5f:7e:c3:40:14:11:f5:cc:e8:eb:3e:
                    da:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E2:A3:D7:BB:EE:D0:DB:C0:05:88:77:CC:5F:D4:30:4F:2A:A3:F4
            X509v3 Authority Key Identifier:
                keyid:1B:12:F8:B5:68:1F:55:4A:03:B3:0E:2E:4F:80:5C:66:F8:31:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxL4tWgfVUoDsw4uT4BcZvgxXgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fdafd2-3dcf-4043-86e6-3e801694e048/1/GxL4tWgfVUoDsw4uT4BcZvgxXgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fdafd2-3dcf-4043-86e6-3e801694e048/1/GxL4tWgfVUoDsw4uT4BcZvgxXgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e5:fa:f7:54:06:d9:35:c1:5a:01:32:f7:e4:9a:cd:8e:72:
         47:a1:54:5e:eb:92:38:c2:9f:74:ee:93:64:98:be:77:49:34:
         42:55:77:1b:5c:19:2e:3a:28:30:ba:ec:4f:f5:0e:70:eb:e8:
         ee:35:2b:3a:bb:85:06:f7:c5:9e:2b:e7:c8:3f:09:ff:6b:2b:
         99:f2:dc:ac:a5:66:50:a2:29:d6:c3:9c:0d:56:cf:cf:44:d9:
         5a:5a:a3:65:07:d4:22:3d:e7:8b:7c:a6:fe:69:d1:05:52:6c:
         5b:b4:4c:85:2e:98:da:ba:0f:34:b6:00:48:bb:53:b1:fb:28:
         48:26:a2:42:33:b1:48:f3:07:7b:8a:a3:68:ec:b9:55:ce:94:
         22:16:07:25:8a:cb:93:49:81:65:a9:33:59:02:a6:21:0d:ba:
         81:d9:71:55:e0:aa:28:3d:52:c6:ec:a2:b9:18:ec:cc:57:28:
         65:f0:ad:78:82:ac:7b:c8:21:0e:b9:6b:b4:6f:f4:ce:8d:ba:
         3d:d4:e0:51:3a:45:e1:17:dd:8f:bd:71:71:4b:4f:c0:8c:df:
         dd:23:d7:72:ce:62:3e:76:ae:1f:9f:21:04:84:6f:dd:23:cf:
         db:9c:d9:08:45:a5:26:25:4f:65:51:13:f0:87:c4:46:7d:47:
         d1:29:c5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----