Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
File:                     y5l80U86a8NEosk47g_etU0iEkA.mft (raw, json)
Hash identifier:          b1Pzac56mduCxm2jyu5lq1SWFEJEu68Y0QjreLnLvz4=
Subject key identifier:   8D:F7:93:D1:45:00:43:EF:C8:B0:E2:B3:D6:AF:FA:04:AE:EE:57:A1
Authority key identifier: CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
Certificate issuer:       /CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Certificate serial:       0191FA104C403A4195CEF9BD309A2C7DF09B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
Manifest number:          8F
Signing time:             Mon 16 Sep 2024 09:00:57 +0000
Manifest this update:     Mon 16 Sep 2024 09:00:57 +0000
Manifest next update:     Tue 17 Sep 2024 09:00:57 +0000
Files and hashes:         1: kcAlQ7uHMceQyJotVv9nR81dLTI.roa (hash: /uJ2+3mpdELrZ02rPp1L0ybbZLI1BsOYokjhpaejQB0=)
                          2: y5l80U86a8NEosk47g_etU0iEkA.crl (hash: PXj8atL+T1MxVINpk+m7axJaKchYhHO5dEbANvSdhYQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:4c:40:3a:41:95:ce:f9:bd:30:9a:2c:7d:f0:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
        Validity
            Not Before: Sep 16 09:00:57 2024 GMT
            Not After : Sep 17 09:00:57 2024 GMT
        Subject: CN=8df793d1450043efc8b0e2b3d6affa04aeee57a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fe:30:0e:b6:3b:a6:42:37:76:4f:c1:0d:08:
                    3c:5d:bb:6b:0f:94:e9:fd:6d:c9:c0:98:cf:73:04:
                    e9:5e:45:ef:63:2e:47:89:18:f5:89:35:74:6e:7d:
                    f5:88:5f:1f:5c:67:cb:3b:d2:a2:03:ad:1a:e2:1f:
                    6f:28:59:33:44:6c:dc:e3:46:7e:89:0a:86:5e:5d:
                    05:a2:c1:01:a2:45:c5:2d:c3:b7:64:42:46:13:40:
                    d6:0e:52:4e:5a:e3:c1:6c:73:c6:c3:73:88:31:e6:
                    09:ea:32:fc:d6:c2:b5:14:5c:49:0e:a2:cb:35:cb:
                    c4:35:f5:5f:aa:91:66:d9:e4:ab:0c:81:9c:cf:c8:
                    15:59:9d:e5:aa:ae:a2:3a:b9:19:45:09:ec:47:b9:
                    ce:45:1d:a4:c5:4d:fb:01:2f:45:19:14:56:5e:61:
                    e6:4d:eb:c1:39:c3:64:2f:04:ac:d0:5a:61:da:33:
                    9d:df:28:71:59:d3:a9:08:8c:f8:05:98:fa:d7:2e:
                    b5:7a:f0:ee:bc:3c:0a:4a:0e:94:61:b7:e7:00:22:
                    39:3d:36:54:87:fd:32:3c:0e:f8:5c:98:14:09:2c:
                    15:d8:5c:18:28:e5:b2:bf:d4:2e:3f:83:76:aa:b7:
                    26:f7:a2:5d:a5:fa:70:fc:2b:b3:32:31:65:94:aa:
                    d5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F7:93:D1:45:00:43:EF:C8:B0:E2:B3:D6:AF:FA:04:AE:EE:57:A1
            X509v3 Authority Key Identifier:
                keyid:CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:9b:cf:73:2c:41:33:98:a7:28:be:9d:63:d4:fb:ba:f4:41:
         a4:04:32:43:26:76:98:f1:ce:9f:e8:43:cb:e7:79:4a:08:c6:
         d3:cd:f8:5c:c9:a7:99:59:cf:47:76:1b:92:ce:89:41:62:34:
         3f:00:9e:50:01:b7:26:41:9d:2b:12:bd:72:82:78:8e:e5:d7:
         18:31:e4:ff:bb:c9:0f:4d:a7:ba:32:1b:8b:57:f3:d3:9a:95:
         af:16:64:84:c8:d6:d3:ce:a8:81:d9:66:2c:cb:6d:2e:d8:6a:
         ca:b3:a8:d4:6e:c2:6b:e3:24:1d:e9:59:e4:a7:ef:d0:58:1d:
         4a:2f:d5:1a:f4:43:91:31:1f:df:7b:cd:11:1c:ab:f9:78:a7:
         c6:e3:6f:2b:ec:1e:b6:27:c1:c3:6e:e3:7b:69:5b:b9:a0:e6:
         18:13:e5:dd:74:cb:a1:2f:11:5d:e0:f7:e1:f5:58:3a:a3:cc:
         e9:61:8b:d8:1e:53:e1:a6:06:de:94:02:1c:79:0c:e4:bf:8d:
         b7:d6:95:e0:c1:d1:34:e6:86:1a:d6:84:89:bd:d1:33:9e:df:
         c9:ab:07:87:b8:87:fe:8f:f1:22:6c:10:8f:4c:82:bc:1b:47:
         db:ec:58:38:a2:f8:d6:a1:b4:9b:07:4f:5b:4b:37:4f:24:29:
         bf:2e:f8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----