Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
File:                     yvlojhds84ZDbXu4jTpAW0bQ4rk.mft (raw, json)
Hash identifier:          8xsQwID3m3mdRffGECVsFFUk4so9aOir0OY1d0Vtyik=
Subject key identifier:   6B:8A:50:FC:96:EF:0F:47:A8:FF:42:4A:0E:9F:D1:91:21:39:01:C9
Authority key identifier: CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
Certificate issuer:       /CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Certificate serial:       0191F9A2DC340A100E93150046E04100B5F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
Manifest number:          BC
Signing time:             Mon 16 Sep 2024 07:01:25 +0000
Manifest this update:     Mon 16 Sep 2024 07:01:25 +0000
Manifest next update:     Tue 17 Sep 2024 07:01:25 +0000
Files and hashes:         1: bDGRuxkT59Z6ZB75B8wYlq_pQ6Q.roa (hash: 3069c8AKBflA7Qf5itUct3lXPIMT3zsgJd5D/2cUcko=)
                          2: yvlojhds84ZDbXu4jTpAW0bQ4rk.crl (hash: 7oq/f06pO7A82wB8/wG1JfWO+SCKk/Wq4pOH3mf+ZrE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:dc:34:0a:10:0e:93:15:00:46:e0:41:00:b5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
        Validity
            Not Before: Sep 16 07:01:25 2024 GMT
            Not After : Sep 17 07:01:25 2024 GMT
        Subject: CN=6b8a50fc96ef0f47a8ff424a0e9fd191213901c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:d5:41:9c:8f:ec:5a:5f:9e:35:8f:25:66:
                    ff:dd:3f:1f:71:e8:96:f2:82:5b:b2:cc:20:9b:6d:
                    19:83:85:f3:b0:de:84:46:03:2a:ec:b6:42:13:4c:
                    25:77:21:ef:7c:f7:a8:4b:0c:13:aa:65:c4:54:da:
                    8c:10:e0:41:89:a8:dc:5a:73:70:14:84:f1:2a:cd:
                    70:75:fc:1e:8b:28:9d:c4:e4:47:19:3f:07:f2:a2:
                    ae:5f:a0:b4:8b:69:98:fe:58:6f:d7:c1:e8:bb:31:
                    25:5e:ca:e4:3d:ca:4f:e9:8d:ff:93:c7:5c:0d:90:
                    d8:a7:7a:f8:f4:51:6c:8d:53:5e:73:46:6f:ff:c5:
                    66:af:09:28:46:a1:53:57:5a:ef:61:dd:dd:ea:98:
                    c5:02:9a:01:06:39:1e:90:03:8c:83:9d:52:0d:fa:
                    06:0b:1f:08:97:7f:07:6d:b4:a9:31:17:b4:4a:2e:
                    d8:08:71:9c:bd:b1:bc:ac:a1:1d:8d:d3:86:1c:65:
                    8b:87:72:f5:13:bd:1a:eb:bb:ad:73:76:4b:a3:7c:
                    47:b0:00:27:df:f4:62:4a:9d:dd:28:f1:a9:e7:64:
                    b0:f9:8b:ed:1b:78:3f:17:3f:b7:1c:9d:cf:d4:8d:
                    e9:97:ea:94:bb:f4:9f:75:60:63:c3:a9:79:26:25:
                    2d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8A:50:FC:96:EF:0F:47:A8:FF:42:4A:0E:9F:D1:91:21:39:01:C9
            X509v3 Authority Key Identifier:
                keyid:CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:c3:e6:1d:e0:eb:a7:49:1b:3c:96:eb:96:ce:5e:03:84:15:
         84:ae:29:ee:bf:8d:69:66:2d:67:1e:17:aa:2b:67:dc:81:e3:
         11:48:89:48:95:1e:0c:e5:6b:7a:7c:8c:23:aa:14:ce:a1:57:
         2f:d7:ae:6d:7c:ca:12:f3:8e:63:58:22:d0:cf:7f:04:49:99:
         04:06:9b:3a:4b:e9:93:b2:1f:1a:b5:d3:a7:e3:84:c1:4d:28:
         c6:78:f2:a7:bc:cb:43:a3:d1:4f:ce:7c:94:f1:9c:08:4d:6c:
         d5:73:ce:56:b9:df:0c:5a:ac:6f:df:ca:e3:9b:61:65:d1:d3:
         87:b3:46:32:48:b9:f0:9b:e5:dc:ce:a5:92:c8:6d:ed:d3:41:
         31:c3:00:51:a0:99:d3:23:1e:5e:2e:53:ad:96:99:49:9c:2e:
         c1:36:2f:c7:39:7d:6d:b7:58:e7:b8:fe:c8:41:24:2a:6d:54:
         2e:d7:5e:b9:e6:69:01:56:e9:34:56:8d:f7:1b:45:70:2d:e7:
         8d:ed:a6:5c:20:3d:22:d8:88:3a:3c:ea:4f:54:93:83:e9:62:
         1f:e4:c1:c7:b1:c5:ab:49:1c:b8:fe:25:26:d6:99:a5:a6:5a:
         0d:d5:89:f3:63:5b:0d:f6:cb:f8:eb:9c:82:84:c4:11:e7:c6:
         f7:7e:00:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----