Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
File:                     dxPzWC9jkBMFUwtLGTbNbmYRowo.mft (raw, json)
Hash identifier:          f1nzNiX0tbx7y8keLc0g4psOsnGS9KaKQmWzx2/hWFk=
Subject key identifier:   2A:9E:9E:86:00:E2:E2:CF:ED:06:4B:64:F8:C5:DE:F2:E4:DE:7A:65
Authority key identifier: 77:13:F3:58:2F:63:90:13:05:53:0B:4B:19:36:CD:6E:66:11:A3:0A
Certificate issuer:       /CN=7713f3582f63901305530b4b1936cd6e6611a30a
Certificate serial:       0191F96C1CCD0D817DC6C11B7B545AC9299E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
Manifest number:          BC
Signing time:             Mon 16 Sep 2024 06:01:37 +0000
Manifest this update:     Mon 16 Sep 2024 06:01:37 +0000
Manifest next update:     Tue 17 Sep 2024 06:01:37 +0000
Files and hashes:         1: Jb09PQl1ogXdZmpHG33rZFY89xw.roa (hash: Nkg5WjTHVPz575+lFUrOY/sD73z5e5yLipLyJi0pFwM=)
                          2: dxPzWC9jkBMFUwtLGTbNbmYRowo.crl (hash: GlqjeEFXI4llKMoVtIOz6dDgu6+EWiaVgKDvLk+ohlQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 06:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:6c:1c:cd:0d:81:7d:c6:c1:1b:7b:54:5a:c9:29:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7713f3582f63901305530b4b1936cd6e6611a30a
        Validity
            Not Before: Sep 16 06:01:37 2024 GMT
            Not After : Sep 17 06:01:37 2024 GMT
        Subject: CN=2a9e9e8600e2e2cfed064b64f8c5def2e4de7a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:43:f9:70:ae:01:ec:f4:bf:16:ad:2d:f4:49:
                    88:17:1a:6a:e7:a0:a3:27:cc:78:0b:47:9a:9a:87:
                    db:af:bd:03:62:b4:72:d7:92:44:71:30:02:de:99:
                    23:97:7a:f6:92:6f:0f:fb:54:70:ca:f4:bf:80:13:
                    63:76:05:ce:c7:b4:c9:7f:dd:b6:c8:0e:b5:c1:17:
                    80:dc:53:47:e3:ef:e3:84:94:a7:b7:de:fe:16:8e:
                    cb:30:92:e2:a7:09:97:38:2e:38:5a:1f:a5:fa:97:
                    03:04:ce:48:e8:d7:07:ac:96:84:02:40:fb:e6:3d:
                    d8:e2:7a:2d:88:46:ab:fb:f1:97:5a:31:44:d0:e2:
                    05:4f:69:d0:19:a8:72:57:7b:b3:9e:65:9e:d2:b7:
                    7f:2a:f7:9f:df:aa:8b:81:ac:24:73:22:31:9e:d2:
                    be:c8:6b:81:2b:c9:61:41:57:16:f5:7d:53:f5:8d:
                    a5:1f:c1:de:bd:e2:f6:ef:bd:93:5a:0e:d9:23:18:
                    93:19:6a:19:0b:8a:d5:dd:d4:ad:e2:d3:70:2c:38:
                    38:e2:a0:9f:d3:07:ff:16:da:a8:2b:14:aa:15:d9:
                    da:f2:39:73:47:82:b4:7d:52:cf:dc:b1:ae:33:56:
                    1e:67:9c:17:f1:52:23:f2:a7:03:b7:c7:51:09:c9:
                    ea:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9E:9E:86:00:E2:E2:CF:ED:06:4B:64:F8:C5:DE:F2:E4:DE:7A:65
            X509v3 Authority Key Identifier:
                keyid:77:13:F3:58:2F:63:90:13:05:53:0B:4B:19:36:CD:6E:66:11:A3:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:76:19:ca:e8:33:f6:69:c7:54:07:6a:c9:fc:24:22:47:84:
         84:bf:ca:28:63:fe:de:e5:c4:0c:ce:64:11:71:4e:c6:b7:8f:
         a6:c4:3a:ae:20:44:88:2d:3a:04:d5:25:b5:a4:4f:82:8d:af:
         92:68:98:dc:1d:75:e9:94:a8:8f:82:b9:8b:1b:f9:98:25:b1:
         a3:61:c8:08:79:99:d9:c9:8e:37:2d:cc:73:f5:35:00:87:c0:
         66:8c:f3:26:98:17:9d:50:30:ce:a7:48:09:61:a9:75:f4:ff:
         7a:e7:b7:36:05:02:ec:a9:c5:01:ef:13:e7:d7:6d:09:d8:5f:
         d6:4e:64:35:17:1a:b6:69:74:05:5e:4e:83:d9:39:25:9d:fa:
         f9:53:48:39:28:19:4c:9f:70:c7:01:8b:51:75:f4:1b:3a:31:
         1e:c5:03:12:19:d5:ee:86:38:e4:b7:f3:7e:51:0e:7f:23:0b:
         5d:f7:47:c2:c0:63:d5:c2:19:4c:17:90:75:21:26:8b:89:42:
         33:9f:da:b9:94:52:06:6b:88:6b:65:11:1c:eb:18:61:00:e8:
         70:df:ba:ac:ba:51:81:0a:e9:79:63:44:8b:79:f0:b0:79:5c:
         d6:13:14:b9:7f:b4:c2:f3:c9:fd:b6:b7:0a:4e:fa:f8:28:6b:
         7e:a5:17:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----