Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
File:                     5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft (raw, json)
Hash identifier:          evT7f9dLw1Lfp6WjPinedplcas/qazChODlIvsnX/WI=
Subject key identifier:   3A:83:C0:EE:2D:13:15:C2:2D:E1:0F:D3:3E:8C:28:5C:B2:B4:8F:87
Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
Certificate issuer:       /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Certificate serial:       018F855AEC7DCFE4800DF749E0FFA638C4CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
Manifest number:          0C57
Signing time:             Fri 17 May 2024 07:01:19 +0000
Manifest this update:     Fri 17 May 2024 07:01:19 +0000
Manifest next update:     Sat 18 May 2024 07:01:19 +0000
Files and hashes:         1: 1-X3ruYLPk4tHT2Wr0Una0-CBSb0.roa (hash: mlCRS4XUt6CozuxDzTS2Vj9tt4BhTJZ9tQS8lmnnBNU=)
                          2: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl (hash: ZCADH9muLzRZ9W4ukfF1zdP5E1P4EkLydinUdT+dTbs=)
                          3: tnkq0ec-a7XriG1bwTR7_aX9S_c.roa (hash: IGtJ9gPc9LwQdtEilGvs+mP8FXvbK1PmUUM/GjqNjn4=)
                          4: vIsquNuPLGKwTWPMwS17QjxN2jo.roa (hash: 4DbuJKQJhre73k3ylB4/pU62Xo2WWYNWYsVj7h+yaek=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 07:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:5a:ec:7d:cf:e4:80:0d:f7:49:e0:ff:a6:38:c4:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
        Validity
            Not Before: May 17 07:01:19 2024 GMT
            Not After : May 18 07:01:19 2024 GMT
        Subject: CN=3a83c0ee2d1315c22de10fd33e8c285cb2b48f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:66:17:4f:d5:67:99:00:9f:01:89:46:76:b1:
                    b4:8a:f5:44:6b:53:2e:78:d3:d8:e4:df:c0:42:56:
                    03:22:e3:c2:2f:48:08:eb:7d:17:dd:3b:98:ec:19:
                    c1:a3:20:4a:3b:d0:02:c3:d9:8a:2b:8f:14:1e:8d:
                    0a:d8:19:cb:73:de:83:f3:c2:4a:96:a1:f0:2b:12:
                    f7:0d:64:38:42:08:3a:67:6c:e5:bf:f7:d6:6a:d4:
                    6b:c5:76:76:33:bf:02:d9:ee:9a:c6:50:02:66:57:
                    25:6f:13:6d:a5:aa:3b:14:58:e5:88:8f:13:d7:b7:
                    0e:49:06:74:6b:cc:61:45:ee:5d:e3:3a:43:54:ea:
                    82:ff:88:ca:d3:8a:94:46:2a:f9:8c:69:c2:85:26:
                    df:3f:c4:8a:74:c0:ee:31:09:43:45:f1:5e:4c:a6:
                    d1:99:09:23:2e:39:77:79:d9:a9:31:ce:81:12:0c:
                    20:48:26:73:30:fb:6f:00:d0:0f:a9:93:63:31:4e:
                    49:f1:f7:de:2b:b4:e9:e3:be:d8:22:cc:6a:0c:3e:
                    aa:6d:21:48:29:f1:51:5e:83:aa:40:68:5c:11:c9:
                    04:97:f5:87:8c:46:9b:1a:4f:9c:2a:ca:f3:b2:52:
                    a5:77:51:ff:26:53:ac:8b:5e:04:9c:ed:97:7d:a7:
                    d4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:83:C0:EE:2D:13:15:C2:2D:E1:0F:D3:3E:8C:28:5C:B2:B4:8F:87
            X509v3 Authority Key Identifier:
                keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c6:8a:d0:80:16:00:ce:11:62:bc:e0:06:b1:cf:fc:0c:85:
         8f:5c:7c:53:a3:57:78:7b:55:4a:c8:0b:15:b7:ad:74:0d:8e:
         08:42:f2:e4:aa:08:a0:9e:18:46:c2:33:0b:e0:e7:82:6d:61:
         6e:4e:dd:44:66:d9:ba:04:2b:ec:61:d4:48:ec:b4:38:62:6b:
         15:7e:06:e6:4e:7e:18:64:79:87:8b:00:2f:2a:4e:f7:7c:59:
         b9:29:ae:f7:1c:11:3c:ba:f9:ad:e8:c9:d2:a1:0e:43:e1:72:
         9e:d5:74:94:b7:40:85:fb:f7:2f:2e:11:9a:d4:ae:8b:84:7c:
         d6:d0:20:e2:5c:92:b9:6e:97:0f:41:1b:2e:df:71:71:17:90:
         67:ba:27:89:08:59:d2:1f:f9:14:e6:67:e4:58:ca:b5:a9:b8:
         6e:91:ba:b3:c9:c3:7e:09:87:0b:78:d5:ca:4f:6e:2e:5d:e6:
         f8:25:7e:b9:e8:4a:af:08:a4:30:dc:09:cf:f2:13:3f:4d:18:
         27:98:57:43:f5:8b:3f:94:6b:18:79:3e:19:e1:22:b9:e4:e5:
         ad:6b:26:58:1a:f9:3b:89:d1:a4:3e:93:90:6f:0c:9b:13:89:
         f5:58:5d:34:71:c3:dc:14:38:fc:28:cd:ac:84:d6:f6:b8:97:
         be:a2:16:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----