Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
File:                     E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft (raw, json)
Hash identifier:          2IMoT2o1sa87TIzb2FgWqeNWdlCT99A8Yelqjd4fWSs=
Subject key identifier:   8B:5C:1D:E8:38:47:BA:A8:27:FC:2A:CB:E8:62:E1:18:19:9A:ED:B2
Authority key identifier: E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
Certificate issuer:       /CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Certificate serial:       764F267D7E8ABD24291EC7B0F6D17209FE10E03C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
Manifest number:          0280
Signing time:             Mon 16 Sep 2024 00:06:43 +0000
Manifest this update:     Mon 16 Sep 2024 00:01:43 +0000
Manifest next update:     Tue 17 Sep 2024 00:06:43 +0000
Files and hashes:         1: E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl (hash: xE4eQ3k1ls1q8udmL4U3Gyc24CcaFg/nZuyWN2jC+M4=)
                          2: 39312e3233352e3230352e302f32342d3234203d3e203630353034.roa (hash: j6vYZtEefm6U9xRcCycNawpFSUKH1P79zkEqzcAmwPc=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Sep 2024 17:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4f:26:7d:7e:8a:bd:24:29:1e:c7:b0:f6:d1:72:09:fe:10:e0:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
        Validity
            Not Before: Sep 16 00:01:43 2024 GMT
            Not After : Sep 17 00:06:43 2024 GMT
        Subject: CN=8B5C1DE83847BAA827FC2ACBE862E118199AEDB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:78:6f:4a:b2:c2:64:62:4a:a6:cc:e9:17:d1:
                    1a:bd:f1:d9:c5:80:81:53:5d:85:a3:25:43:0a:5f:
                    8d:76:d2:08:30:54:0e:bd:5d:a5:46:cf:57:df:f1:
                    ca:c0:93:63:19:33:49:b4:eb:f9:06:fd:16:e7:7b:
                    96:e0:7f:c6:89:14:85:05:5b:34:e5:20:04:db:f1:
                    7b:30:80:c5:bf:5b:31:4d:67:5d:95:f3:3b:01:20:
                    4a:2b:b2:ff:f7:81:f3:1d:99:9d:2e:d2:a7:ef:99:
                    0a:88:45:fc:57:29:e5:fe:32:ab:e5:73:1c:9d:a0:
                    1e:70:23:a0:17:fd:28:a8:7e:df:e8:e8:33:ff:c2:
                    5c:79:d2:6c:43:7a:db:9f:24:98:a6:c9:60:94:9b:
                    14:45:53:0a:59:15:bd:db:28:82:f4:ca:87:3c:b2:
                    68:16:32:bc:6d:5f:8a:57:ed:a4:5b:9b:e6:5d:73:
                    f4:5b:b8:35:be:4c:c5:3f:ff:41:6c:a5:b0:86:7d:
                    12:fe:25:b5:73:aa:ea:8f:9f:00:82:7d:d7:4a:42:
                    7a:9b:28:62:e2:3b:5e:7e:28:2a:24:32:c6:79:9e:
                    1f:ba:19:df:f8:6f:35:4b:fc:a1:24:11:85:6c:b1:
                    7f:30:fb:c9:ed:ce:38:3e:21:f5:b3:83:9b:35:53:
                    82:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5C:1D:E8:38:47:BA:A8:27:FC:2A:CB:E8:62:E1:18:19:9A:ED:B2
            X509v3 Authority Key Identifier:
                keyid:E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:87:89:e1:bd:06:13:2c:b0:dc:4a:25:ae:48:b4:e3:46:e1:
         d7:c7:63:52:c8:45:e6:dd:cc:9e:00:65:1b:f7:ae:99:87:28:
         b2:24:ff:e2:ca:3c:11:52:98:4f:6f:42:fd:b7:e3:7e:78:bd:
         17:a9:08:58:18:66:dc:1c:41:c4:0e:10:33:e7:1e:8d:18:1c:
         23:28:74:41:84:0b:4d:70:1f:6a:f8:28:fc:5f:be:d7:d1:1c:
         2b:3b:a2:2d:4a:bf:5e:5c:00:94:17:99:1c:cb:e9:1b:18:8a:
         67:af:e6:f9:b2:20:0f:4b:4d:28:3f:86:e9:eb:bc:02:13:8d:
         23:49:01:d0:e4:59:79:98:58:89:2b:30:e0:07:4e:24:18:85:
         93:72:ba:82:0f:a6:3e:20:5f:44:84:44:94:66:52:3e:e0:e0:
         a0:ec:f5:d4:b6:40:ba:41:9a:06:ce:0a:77:c1:cc:70:6c:c2:
         e9:2d:1e:f3:2d:ea:ba:cb:ff:4f:95:36:74:3d:25:21:67:7c:
         63:5b:18:9f:5a:04:1d:39:df:36:62:b4:d2:b2:80:a0:7a:36:
         10:59:cf:87:27:4f:97:4d:ec:94:28:9f:bc:65:4a:81:d5:54:
         59:f5:4a:3c:8e:af:84:5e:de:80:90:3f:80:24:4c:32:13:68:
         0a:77:66:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----