Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
File:                     cWAmJ2eaSYC3DYreV48UGS-v65U.mft (raw, json)
Hash identifier:          KaYp14DHZYlXlnTmEVRurDkBIYTKljswbyD933IYW4E=
Subject key identifier:   36:98:14:3E:2D:8A:17:84:4C:5F:56:4E:C8:F2:A3:6C:58:B6:2A:68
Authority key identifier: 71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
Certificate issuer:       /CN=71602627679a4980b70d8ade578f14192fafeb95
Certificate serial:       019049B0FFAA6AE58416D87F05C2977C9EE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
Manifest number:          11DB
Signing time:             Mon 24 Jun 2024 10:00:54 +0000
Manifest this update:     Mon 24 Jun 2024 10:00:54 +0000
Manifest next update:     Tue 25 Jun 2024 10:00:54 +0000
Files and hashes:         1: C-ToZctXskEo7ARwENJUXwZGxX0.roa (hash: CTPzIfEo9JOvgMwNdwgn/W3Ibt4FTsPz8hO7zpCw9A4=)
                          2: R55O6GrI9dEow3zVRMqpT_u3l9A.roa (hash: 7K49bZPdIgV8V2lQsa+XxhGNxxe8C5ANphSLl+Y8AJA=)
                          3: Z8IfPGXjkdSfxtl3jEithYwq2ZA.roa (hash: c06sBkRzaUvvxRM+6uc94KatauWGrxt21uvGe9eQ4ls=)
                          4: cWAmJ2eaSYC3DYreV48UGS-v65U.crl (hash: pWovj9NQTgOmJ3LaODIhH0g51Vg0Hw6GUAhxAwzoRig=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:b0:ff:aa:6a:e5:84:16:d8:7f:05:c2:97:7c:9e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71602627679a4980b70d8ade578f14192fafeb95
        Validity
            Not Before: Jun 24 10:00:54 2024 GMT
            Not After : Jun 25 10:00:54 2024 GMT
        Subject: CN=3698143e2d8a17844c5f564ec8f2a36c58b62a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9a:c0:66:65:56:26:62:4b:ef:b6:ec:28:0e:
                    66:11:fa:7a:c9:7b:dd:bf:91:44:30:25:cb:6e:87:
                    c4:a6:07:5d:c6:cd:ad:78:6f:83:75:26:f7:98:da:
                    9b:ea:15:28:bb:c4:71:9f:ea:a6:35:d8:8c:51:e1:
                    39:9c:0d:aa:99:29:a9:0c:c8:26:f4:3b:db:82:68:
                    60:f9:3a:94:0f:b5:26:34:08:d2:43:6c:1f:4d:d8:
                    ca:82:26:78:8b:49:53:dc:35:d6:4a:b3:8f:90:47:
                    17:37:6d:f1:86:f5:25:9b:fe:5a:d4:83:a4:68:e2:
                    bd:70:e2:b2:72:c4:49:80:5f:4c:f9:2f:ed:28:f8:
                    de:1a:6a:a8:b2:bd:7f:d5:45:55:e9:3c:a7:89:6f:
                    1b:02:78:5c:5f:59:39:d8:a3:b7:d6:32:d0:6b:d5:
                    67:7f:00:99:67:3d:d4:67:83:95:1f:d4:35:69:22:
                    2f:41:5b:92:4a:e4:83:99:50:cd:9e:3e:7c:9c:e8:
                    26:7f:77:54:c2:d1:34:0c:fe:f6:25:4a:02:8f:bd:
                    5c:97:f7:73:5b:f8:79:01:9c:8a:41:e1:fe:95:f8:
                    f9:fb:03:2c:10:c8:2b:11:2c:d0:37:5e:ce:c6:c9:
                    aa:d9:e7:f7:88:97:fb:96:c4:35:66:bf:50:49:6a:
                    f4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:98:14:3E:2D:8A:17:84:4C:5F:56:4E:C8:F2:A3:6C:58:B6:2A:68
            X509v3 Authority Key Identifier:
                keyid:71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:d5:b3:05:69:65:61:1d:56:df:89:5a:76:34:78:f5:7a:e0:
         88:ba:60:d6:a4:14:a8:2d:1a:ff:20:b6:87:d0:c9:59:65:7a:
         60:c4:0e:be:fc:21:1c:a5:4a:69:56:78:21:a4:62:42:de:b2:
         cf:47:14:56:04:9a:d5:13:6d:96:5d:20:0c:62:db:eb:24:27:
         e1:ef:a2:48:de:b2:41:24:0d:24:06:8d:f3:f2:66:c7:8c:d9:
         bc:42:88:9b:67:40:ab:8c:6b:a8:da:6f:d0:e3:fe:fa:04:cc:
         04:06:8f:45:4d:e1:86:93:90:e6:bf:ba:5b:f7:6d:28:3a:f3:
         fc:66:7b:35:57:e5:3e:33:ca:4d:ad:b4:ba:16:34:bd:bf:b6:
         80:b9:09:8c:fa:ee:e0:65:bd:9e:e6:a4:cd:4e:1b:0b:a9:d0:
         7d:fe:22:f8:8e:79:be:fd:d0:b1:48:10:2c:85:2c:f8:19:75:
         27:8e:b9:49:b6:34:1f:a9:0a:9d:25:95:ee:50:cf:06:67:c9:
         db:74:f4:1a:e6:bb:b7:79:c7:dd:dd:81:45:43:04:f8:51:1a:
         e0:41:b5:01:df:29:cf:92:56:7f:a5:dd:14:64:b6:a8:37:29:
         e7:59:b2:51:cd:e2:d6:24:30:72:70:dd:a6:43:49:29:6c:a9:
         62:76:d0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----