Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
File:                     nxvZcy5s3W50lNeRh_yoVbUZmQk.mft (raw, json)
Hash identifier:          D6p52EHHcZ+iY1B+RBVNJNdRtFl7L0hpUjWU9uhWwMQ=
Subject key identifier:   5B:F5:8A:EE:65:BA:7C:98:DE:71:67:B2:EE:68:D5:51:BD:2D:91:BB
Authority key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
Certificate issuer:       /CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Certificate serial:       018F8D164D6D67EED37D9DBC5F6C85E4ACF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
Manifest number:          0EFB
Signing time:             Sat 18 May 2024 19:03:19 +0000
Manifest this update:     Sat 18 May 2024 19:03:19 +0000
Manifest next update:     Sun 19 May 2024 19:03:19 +0000
Files and hashes:         1: DFAFbMZBhISg-f5r84LK-HqijgA.roa (hash: SEBU+TMvz/xiznLoz5t+2xJsGYGUjl84zXnrj6gr+6A=)
                          2: KTHu7svZGnUBnUHB54bKrAQGovM.roa (hash: I+zCawFktzCalv6rBL0G7Ct/jK/Dr1Y/Xb7G3SvaOZg=)
                          3: cdtBYNZSMSXmzfBqighdWwlZ97k.roa (hash: ohCla0PxBRVN/gW08ZIQ50ga+R8HvrdkLClq7ufRxKY=)
                          4: nxvZcy5s3W50lNeRh_yoVbUZmQk.crl (hash: V30k8iED8XyjqZDX6KhIsm3sAb42rmY1qNvqSLg45lE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 19:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:16:4d:6d:67:ee:d3:7d:9d:bc:5f:6c:85:e4:ac:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
        Validity
            Not Before: May 18 19:03:19 2024 GMT
            Not After : May 19 19:03:19 2024 GMT
        Subject: CN=5bf58aee65ba7c98de7167b2ee68d551bd2d91bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0e:3d:08:e8:f7:74:b4:66:7d:ee:54:65:ad:
                    d5:bd:cf:c5:d2:fa:88:d1:c9:a9:89:a2:ba:26:a4:
                    1b:02:bc:44:02:ea:34:d4:74:8f:11:d5:aa:24:80:
                    d3:66:0e:e2:74:d0:99:e5:ed:dc:86:7f:f5:85:ae:
                    6f:6b:68:59:6b:39:99:06:c7:80:21:4c:0a:e6:f6:
                    a1:43:c5:20:44:e2:eb:2a:30:6f:9b:7c:46:19:1e:
                    2e:fb:79:6d:34:4b:75:c9:5e:6b:f0:0d:5c:da:90:
                    db:97:77:ac:ab:68:81:90:c6:f8:4a:1b:8a:d6:a0:
                    5c:94:2b:ca:12:70:04:d4:2e:0f:b0:a7:51:ea:8a:
                    99:33:49:f9:2b:ad:5c:7d:08:c8:28:82:3a:08:81:
                    d5:18:04:ee:fa:79:cb:36:53:e2:55:b8:87:3b:6a:
                    17:9d:9b:f4:84:2e:76:76:69:85:4e:33:45:b7:0f:
                    b2:39:c6:e5:c4:04:fe:1b:e0:69:11:b9:a5:5e:69:
                    45:77:44:55:a1:08:f3:7d:97:e0:ee:17:22:79:ca:
                    f4:0c:cd:7c:f0:5e:b3:e0:1b:50:ad:aa:f1:03:33:
                    1a:78:93:1f:40:76:9b:56:01:bf:eb:32:6c:94:6a:
                    0d:64:26:00:e2:ba:44:f2:d8:08:f9:37:64:13:83:
                    66:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F5:8A:EE:65:BA:7C:98:DE:71:67:B2:EE:68:D5:51:BD:2D:91:BB
            X509v3 Authority Key Identifier:
                keyid:9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:97:9e:59:64:de:6c:81:d3:71:10:3f:52:49:5d:78:1b:41:
         8a:92:1c:0c:1c:7b:ec:89:5e:04:63:27:d5:79:c7:c9:36:32:
         fd:47:5d:49:b0:83:da:62:8b:ef:f9:04:a0:03:26:08:00:4e:
         cc:92:a1:aa:bb:e7:88:d9:16:54:76:2a:d3:c9:ff:39:e4:26:
         f1:d1:75:63:d3:c1:3e:83:56:94:57:19:be:85:ec:13:89:a5:
         f1:c2:86:50:e1:43:e4:d7:29:b0:28:25:39:35:35:00:73:8c:
         a9:13:6a:5e:be:f1:cb:b4:e5:6f:1f:ed:bd:b8:18:ff:25:68:
         ee:9b:59:ef:00:c5:b5:eb:25:f0:6a:2e:9c:39:b8:e0:e2:bf:
         a6:23:62:44:a3:af:11:c5:0a:a5:fa:61:01:20:55:f7:8a:60:
         92:d3:07:47:88:a9:4c:e7:76:51:e4:91:ff:0d:63:5f:4c:49:
         d0:a5:cf:01:cc:cd:f3:3c:40:a3:92:22:ca:11:f4:d3:31:3a:
         a5:a3:9a:54:4a:2f:43:63:dd:c5:35:53:37:eb:35:3d:b6:31:
         05:bb:de:a5:09:1e:5c:50:02:47:d1:6b:9f:0d:28:0e:f5:3f:
         91:ec:83:7d:db:4b:04:7b:b1:b5:d2:31:bf:28:fd:70:d3:07:
         51:17:b1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----