Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.mft
File:                     nLgLxLWXwXa9hTjBiP7HPaJeboQ.mft (raw, json)
Hash identifier:          EbQayF9XjA5R52mwjIN7+Bk/FNCXs+Md+3vQtm5hfeE=
Subject key identifier:   71:02:C2:FA:BB:9D:80:51:A4:4C:30:2B:55:77:DD:04:98:21:95:15
Authority key identifier: 9C:B8:0B:C4:B5:97:C1:76:BD:85:38:C1:88:FE:C7:3D:A2:5E:6E:84
Certificate issuer:       /CN=9cb80bc4b597c176bd8538c188fec73da25e6e84
Certificate serial:       0191F9A2EDC901BD939D647F64E2BC6C3463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nLgLxLWXwXa9hTjBiP7HPaJeboQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.mft
Manifest number:          CE
Signing time:             Mon 16 Sep 2024 07:01:29 +0000
Manifest this update:     Mon 16 Sep 2024 07:01:29 +0000
Manifest next update:     Tue 17 Sep 2024 07:01:29 +0000
Files and hashes:         1: Cvu_J8KK3HffpomqwmtHEOG6IfI.roa (hash: nc+SHHaYkKy62ZRBmO9003A7wHr6Pg0FTEeSwuvmbzM=)
                          2: aJVemnNm8fB4E6i4LmpuI9BWhsk.roa (hash: krHg8fJEioNKnb8Qlidwf5dp7iQnC2K3ykTr/NDbcoo=)
                          3: nLgLxLWXwXa9hTjBiP7HPaJeboQ.crl (hash: 1mW62RxsSjPy6TPJqTKrb34XAZVobhOElilXXnFNFFA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nLgLxLWXwXa9hTjBiP7HPaJeboQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:ed:c9:01:bd:93:9d:64:7f:64:e2:bc:6c:34:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb80bc4b597c176bd8538c188fec73da25e6e84
        Validity
            Not Before: Sep 16 07:01:29 2024 GMT
            Not After : Sep 17 07:01:29 2024 GMT
        Subject: CN=7102c2fabb9d8051a44c302b5577dd0498219515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:97:aa:19:9a:a5:87:c0:51:8e:22:97:67:73:
                    dd:9b:21:27:a9:5e:3c:52:ed:9d:62:00:62:7d:ff:
                    01:ec:29:85:ee:d9:b1:f5:4c:b6:49:fe:c2:c2:3d:
                    0c:f2:4f:67:5e:e6:98:52:ae:1f:52:94:ec:89:ea:
                    fe:05:92:ee:2b:6f:00:38:9b:c7:eb:be:d5:c8:65:
                    c6:12:1c:63:af:a6:16:a3:cf:34:bd:38:e4:eb:28:
                    af:ae:a6:8c:94:f0:fc:2b:db:cf:65:08:b5:e9:56:
                    84:16:9d:ab:a8:17:ac:e5:d2:25:10:02:8f:21:37:
                    5a:18:d2:df:5c:36:f3:a5:c7:57:da:73:bf:b2:e5:
                    8c:7b:6d:df:48:a3:a7:b8:3c:7b:75:07:3b:6e:5f:
                    46:f8:e3:d6:7e:6a:e3:3d:67:82:4a:ed:3f:47:4b:
                    8f:d5:0f:7f:ef:41:20:4a:fe:36:69:bf:1f:54:51:
                    52:b6:9d:63:2d:9f:8a:2d:6e:80:bc:f1:5a:1c:36:
                    fa:95:fb:d2:46:f4:df:cf:67:a7:ec:b7:fa:8b:f6:
                    25:cb:47:d1:a2:6e:7b:68:c1:d1:41:12:b8:d5:79:
                    fb:6f:ff:90:b9:34:62:7f:04:3d:ad:f4:8b:eb:25:
                    40:9e:b1:26:96:d6:c8:4c:5f:61:58:5b:da:c5:56:
                    df:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:02:C2:FA:BB:9D:80:51:A4:4C:30:2B:55:77:DD:04:98:21:95:15
            X509v3 Authority Key Identifier:
                keyid:9C:B8:0B:C4:B5:97:C1:76:BD:85:38:C1:88:FE:C7:3D:A2:5E:6E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLgLxLWXwXa9hTjBiP7HPaJeboQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:6d:59:c3:c3:1c:c1:aa:db:23:9f:7d:b5:50:b6:7f:01:72:
         1a:ee:a6:63:d6:8b:a6:2c:22:1b:83:73:4f:06:c8:93:9a:74:
         35:f1:33:98:99:14:50:3b:b3:d2:a8:43:3d:8f:09:55:4c:aa:
         bd:78:1a:b5:22:23:d5:8c:16:d5:5a:85:af:40:cb:78:48:c4:
         d1:8e:96:6b:2f:8f:8f:0a:04:7d:fc:db:66:a9:73:cb:6d:b3:
         5a:6b:f7:fb:ed:92:e5:19:db:8e:8f:b3:b6:30:b0:68:ce:3c:
         50:62:ec:69:92:2c:39:dd:10:24:25:3d:9f:a4:78:23:52:50:
         0e:96:86:fc:9c:ea:c9:5a:3e:23:d4:67:00:58:19:81:9e:91:
         e9:54:0a:42:4f:a6:a2:ea:17:c9:77:a7:30:f1:a4:17:32:4e:
         a6:78:34:1c:79:38:4d:f8:6e:cf:1d:29:6b:03:94:0f:de:ea:
         6e:d7:b7:60:8d:1f:11:1e:4e:85:a5:8f:d5:0c:b6:6e:99:dd:
         54:13:a3:2c:e7:08:58:56:4a:1e:51:19:0d:34:ea:37:53:56:
         df:81:f9:e4:d3:dc:9f:99:30:31:ba:62:72:25:c0:4f:8f:b6:
         b5:10:53:cb:4c:77:c7:bb:27:54:3d:e2:b8:23:41:70:ef:09:
         7a:8e:29:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----