Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
File:                     AcvG50Tu-cAWdAHVbB-TgO72SUg.mft (raw, json)
Hash identifier:          t46FLnbmznOnUJMM5/oGOlRoJlCN0WWOVzc3O5hkvjU=
Subject key identifier:   D0:D0:9E:74:A8:CC:B1:D2:D1:74:E0:A1:28:F8:17:B3:BC:C5:C1:FA
Authority key identifier: 01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
Certificate issuer:       /CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Certificate serial:       0191FA478378276E412A80659119D9726C22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
Manifest number:          0147
Signing time:             Mon 16 Sep 2024 10:01:16 +0000
Manifest this update:     Mon 16 Sep 2024 10:01:16 +0000
Manifest next update:     Tue 17 Sep 2024 10:01:16 +0000
Files and hashes:         1: AcvG50Tu-cAWdAHVbB-TgO72SUg.crl (hash: qfvpY8tVlaAp5NQwepSHOBwH584lJwJeZVsmsz4fMlM=)
                          2: _zz6rMlZfM8FzIOUxg9nQiPDWDk.roa (hash: 6dUbz0s9EEc+MJ4YRoqvo9r3RgTJth8R5meo7Lo+RHY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 10:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:47:83:78:27:6e:41:2a:80:65:91:19:d9:72:6c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01cbc6e744eef9c0167401d56c1f9380eef64948
        Validity
            Not Before: Sep 16 10:01:16 2024 GMT
            Not After : Sep 17 10:01:16 2024 GMT
        Subject: CN=d0d09e74a8ccb1d2d174e0a128f817b3bcc5c1fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5f:83:8a:86:06:83:0e:fe:bf:90:db:2a:8d:
                    83:a6:7c:b0:b4:08:9b:0c:b4:9a:d7:54:78:36:11:
                    40:da:a9:18:b6:2c:0a:b3:c6:4d:28:65:c8:5c:1c:
                    f2:4d:b5:3e:96:82:f7:5f:70:b4:c1:1c:c1:fb:f4:
                    e9:88:3b:55:c7:8c:cc:80:f4:a3:cb:18:42:89:aa:
                    40:44:dc:ff:b4:49:9a:45:1d:4e:fb:e4:f1:d9:11:
                    75:0a:0d:ed:a5:f4:d8:d3:02:41:de:5a:49:b6:87:
                    ed:be:a2:d3:ba:e4:f3:dc:38:12:d0:34:8a:b8:ba:
                    66:2b:95:3a:49:c8:eb:d1:01:ee:2f:25:20:35:f6:
                    f7:68:ed:d2:b6:d0:3c:ae:b8:5e:e2:e4:af:1f:1c:
                    31:49:21:57:fe:c1:27:14:0e:e1:28:f9:4b:eb:b8:
                    11:0c:9e:51:0b:51:42:7a:85:1c:0b:b1:1f:f4:ba:
                    03:b7:d5:c2:f9:e2:28:f5:5c:85:7e:6b:1d:a2:63:
                    b4:83:f8:f8:94:e3:db:80:03:87:be:2c:35:40:a9:
                    b9:c4:d4:b2:aa:04:5f:96:22:b6:8f:4d:9a:84:a6:
                    56:be:e4:db:1c:bc:98:1e:8b:c6:f1:f0:f3:00:e7:
                    21:2f:26:7d:88:de:29:6a:e4:90:6d:09:06:fe:eb:
                    05:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D0:9E:74:A8:CC:B1:D2:D1:74:E0:A1:28:F8:17:B3:BC:C5:C1:FA
            X509v3 Authority Key Identifier:
                keyid:01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:97:32:7a:51:ad:01:f0:25:fd:09:90:5e:dc:58:e9:bc:6a:
         04:a1:94:b8:ff:c5:dd:60:aa:c2:53:b0:a5:79:36:13:02:cb:
         82:83:02:41:71:6f:81:8a:f1:b8:be:b2:2b:a2:48:80:8c:62:
         02:ac:b8:2d:3d:0e:5b:bf:7f:e1:a7:c4:89:ba:18:e0:1c:fa:
         5c:a2:c9:10:d1:77:68:5f:be:7d:3e:22:6b:da:ac:ab:99:a6:
         4f:d2:0c:40:c5:6c:2e:53:f1:cc:96:11:53:2f:7b:bd:4d:45:
         b0:89:21:51:97:6d:41:65:5b:32:c9:31:65:8f:fd:85:ab:23:
         b5:84:25:75:29:7e:6a:d5:c2:70:2f:d1:04:69:79:20:2f:63:
         c0:f0:51:0d:54:a1:c3:f3:c8:d7:fc:c3:89:75:0a:43:75:da:
         fd:34:c9:3c:ce:56:dc:72:7b:8b:0f:5d:18:6e:92:88:3d:cd:
         4c:3a:40:8b:26:17:80:fa:43:01:7f:a7:a0:82:e0:9e:3c:4e:
         5c:d1:17:e4:c3:ac:c1:a3:01:b7:e1:cf:67:d8:b9:b0:55:5b:
         46:c9:1f:7b:42:db:8f:2a:a2:d8:c9:17:69:68:82:1a:72:e4:
         fa:9a:7a:b2:69:d8:af:72:59:1c:94:6d:fc:32:cd:45:78:62:
         c4:b3:d2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----