Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File:                     0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier:          hPvs6UDl913Dxtp/zYn00dobiCkBsnHxVtQawTWS+6w=
Subject key identifier:   7C:11:79:D0:D0:60:5F:6E:BD:D6:80:5A:DF:98:46:29:64:85:9B:82
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer:       /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial:       4F56FE50DD172D522C6470EA2A59F6D6271ED8C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number:          AB
Signing time:             Mon 16 Sep 2024 13:21:44 +0000
Manifest this update:     Mon 16 Sep 2024 13:16:44 +0000
Manifest next update:     Tue 17 Sep 2024 15:02:44 +0000
Files and hashes:         1: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: aYgIlKiSJ4ioWL0iywiOQHZgGMKhrRUwH6j6yolmnUs=)
                          2: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: Wy3H+o9WiXZFn7GPklkmaaaijF7JXVzdOjtWlWRRbnE=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:56:fe:50:dd:17:2d:52:2c:64:70:ea:2a:59:f6:d6:27:1e:d8:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
        Validity
            Not Before: Sep 16 13:16:44 2024 GMT
            Not After : Sep 17 15:02:44 2024 GMT
        Subject: CN=7C1179D0D0605F6EBDD6805ADF98462964859B82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b9:f7:7d:e9:0f:fa:b1:75:e5:ba:a6:c4:43:
                    35:2a:f3:2e:60:3d:bc:78:fd:3b:76:e5:d0:ce:ab:
                    7b:fd:30:27:c8:20:5d:80:58:c9:6e:37:f6:c2:60:
                    a6:db:1f:e8:e4:66:e4:25:1c:b3:fd:69:c3:b8:b8:
                    46:1a:5c:48:22:e9:a7:1d:8d:ac:a3:5e:2b:97:80:
                    c8:2b:60:fc:18:bf:0c:48:8c:a6:fc:d5:61:50:bc:
                    44:15:1c:b1:4e:d6:b5:fe:f4:8b:63:50:2e:39:6a:
                    7c:9d:99:5a:53:b8:45:2f:9d:e9:73:0c:09:cd:62:
                    7c:75:cf:eb:8d:c1:05:de:38:96:0d:d0:2e:17:6b:
                    c7:26:8d:26:39:48:38:cc:41:74:79:ab:3a:fb:61:
                    2d:32:7e:ef:5d:a4:3b:c0:21:05:16:cd:5f:1b:5f:
                    08:49:91:e2:bc:d4:91:b3:8b:6b:67:17:f2:91:b0:
                    41:6d:69:c8:04:98:82:47:58:9b:d1:88:c6:26:56:
                    f4:cb:8f:5b:7e:5c:58:26:5f:b7:ef:6b:ad:12:67:
                    fe:99:97:60:16:51:b2:6c:85:18:43:d7:f8:26:5b:
                    d9:bd:55:9d:68:79:ef:c3:f1:9b:56:22:26:53:c2:
                    b1:31:7d:54:ee:ea:98:3c:02:2d:ed:24:d7:74:da:
                    30:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:11:79:D0:D0:60:5F:6E:BD:D6:80:5A:DF:98:46:29:64:85:9B:82
            X509v3 Authority Key Identifier:
                keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:52:fd:d3:61:b4:9a:fb:78:dc:d5:85:8d:a9:eb:d4:e0:32:
         13:26:f4:e5:91:b9:45:82:9c:cf:eb:61:d1:45:da:f4:89:04:
         78:47:ac:e5:51:e0:ed:94:b4:21:af:db:70:16:2e:3e:54:14:
         9b:93:ed:51:1f:2b:b9:a5:db:2b:50:72:ac:7b:ca:10:c9:08:
         6a:0a:90:b4:a1:94:4d:d8:a7:4a:32:28:ee:90:34:90:f8:ae:
         04:79:13:f4:72:1c:8c:23:4a:f4:da:3f:a2:ff:3e:72:25:54:
         a2:40:39:3f:b5:2c:f8:c1:ef:bb:59:f5:fe:22:3c:e0:d2:74:
         9a:58:d8:e4:22:eb:43:f7:60:c5:33:b2:49:ea:7c:fb:c9:e0:
         7d:ea:f0:5a:55:34:74:d8:87:ff:a9:56:6c:d9:84:8a:6b:8e:
         0e:3c:60:9e:e7:76:1a:6f:99:ba:cb:e2:20:65:47:a5:b9:46:
         56:77:98:8d:f1:a0:8e:5b:a7:95:e8:5b:21:de:af:13:44:27:
         0e:5d:82:0b:d3:31:f0:73:3a:44:75:69:c9:a0:ea:bd:8b:93:
         d0:23:06:8b:df:2b:ab:2f:1d:26:69:28:d1:dc:8d:03:63:1e:
         1f:da:f8:ff:0d:7d:88:7b:00:6e:2c:0d:91:97:76:cc:d3:27:
         d7:be:cf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----