Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
File:                     F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft (raw, json)
Hash identifier:          6eC7bdE5q7RVi+fbVPpgZf3/nREy4FOhg0AAJPR6T/4=
Subject key identifier:   0F:5C:6E:8E:79:26:39:B5:9A:41:1D:10:1F:61:40:8E:EA:2B:CD:C7
Authority key identifier: 17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99
Certificate issuer:       /CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
Certificate serial:       018F893937BF0067B99F745DE1C8FF6422BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
Manifest number:          0CB8
Signing time:             Sat 18 May 2024 01:02:59 +0000
Manifest this update:     Sat 18 May 2024 01:02:59 +0000
Manifest next update:     Sun 19 May 2024 01:02:59 +0000
Files and hashes:         1: 4JzgTC3OZ5HTTYA8TSczNgMRI0s.roa (hash: LWb+fXIwTwBhm7xD6ldZwihz5ry1lRkdiTdGQ1rkqro=)
                          2: F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl (hash: PBgYZd889wO2OvCwrnWhGkUCNF627CFGrXzE1HiUK6k=)
                          3: NxoMKFeXdg4eH4dApgQF5eGA_qQ.roa (hash: xqStYIF0oXo/tJk6AlDXDx1t3kzCR4JpCBSFW7S9BAg=)
                          4: e4OoxymcplF2t96_Jif4Sfncn44.roa (hash: /NughOs45Nu+HARUwH7tDl3MvtHJsP5Kp5idWCFXI60=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 23:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:39:37:bf:00:67:b9:9f:74:5d:e1:c8:ff:64:22:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
        Validity
            Not Before: May 18 01:02:59 2024 GMT
            Not After : May 19 01:02:59 2024 GMT
        Subject: CN=0f5c6e8e792639b59a411d101f61408eea2bcdc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c3:6b:3f:e9:8c:e6:f6:10:9f:e3:ba:f4:da:
                    fc:8b:d7:40:4a:51:c3:1f:7f:eb:a3:82:29:8f:ce:
                    5b:9c:49:d6:53:33:f9:9e:3f:e5:d5:ed:46:e4:e8:
                    19:85:22:7b:b6:56:a6:2a:93:db:c1:f7:58:75:b6:
                    41:64:ac:4f:9b:e0:c2:e9:e4:5a:ec:1f:1f:76:10:
                    33:e8:27:2f:0e:a9:94:14:cf:16:43:2e:3c:df:48:
                    12:8e:61:a2:d6:31:0f:cc:1b:02:75:df:47:b2:4d:
                    d4:d9:1f:bd:b1:75:49:66:69:d3:b5:52:3e:e9:09:
                    48:37:01:51:06:f0:dd:62:1b:ca:fc:b9:ba:4d:a9:
                    3b:df:c8:f5:3b:53:87:e9:0b:4f:40:17:bc:59:93:
                    2e:c1:08:eb:fc:3e:05:24:71:35:4f:84:ba:d4:1d:
                    08:75:1b:9c:5f:d7:70:69:db:7f:21:58:59:31:8b:
                    b2:22:91:fa:e9:58:5b:28:a4:90:13:30:3e:7b:84:
                    13:48:fc:1b:2f:28:65:ef:1a:f4:c6:d1:96:75:2f:
                    0a:1f:34:84:ff:cd:1f:5f:8e:94:7e:9a:1a:1e:b3:
                    9a:56:38:a9:eb:d5:ae:8e:ba:bf:3e:dc:67:13:47:
                    3d:88:82:73:c5:39:85:3e:b3:fc:bd:83:47:14:91:
                    ff:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5C:6E:8E:79:26:39:B5:9A:41:1D:10:1F:61:40:8E:EA:2B:CD:C7
            X509v3 Authority Key Identifier:
                keyid:17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:1a:06:7f:34:97:17:b0:19:2f:48:0d:9e:49:b0:71:92:35:
         ee:cc:f3:bc:1a:52:0e:f2:33:c2:c1:fd:c4:75:a1:d3:7f:b2:
         6f:97:8d:93:53:82:d8:b4:dd:e9:e6:25:34:24:83:7e:fe:50:
         81:21:d8:dc:af:93:11:d8:0a:3a:42:7c:60:eb:19:b3:4a:e7:
         97:47:43:f7:57:c0:9c:88:12:72:5b:59:c1:28:54:35:15:ea:
         45:e9:9f:2f:51:e5:ba:2e:7d:92:ee:cc:62:df:6f:42:02:0e:
         91:b1:51:1f:dc:59:85:b2:14:eb:95:e7:88:9d:04:0d:4d:a9:
         5e:42:81:33:08:8f:b6:37:39:23:d9:ef:61:f5:f6:d6:a8:8d:
         02:40:3c:d0:68:d2:e2:52:38:69:83:0a:86:f8:55:c8:ba:b8:
         85:f4:96:d3:8b:68:1b:b9:ae:b4:a9:26:ec:72:e4:8c:f9:a9:
         38:4e:b5:33:33:2f:d9:0c:3d:d4:e1:8e:4f:11:91:f2:f1:48:
         f3:7d:bd:87:0f:1e:fb:09:32:b1:80:8c:0e:f1:66:b3:35:51:
         88:a8:63:86:fa:f9:7e:15:8e:1b:69:6a:4c:19:67:04:b3:34:
         fd:72:e9:9e:9e:19:41:e6:41:91:bb:1f:e6:72:88:de:31:59:
         53:f2:5c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----