Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
File:                     jBPrj9nY20toqWnI_91IRoAqsKs.mft (raw, json)
Hash identifier:          G0lCKz9IxThjB5BE6LW1dVrGiSLqXsU2dggmwD0JHiM=
Subject key identifier:   30:64:F6:F0:48:0F:B1:95:F9:D2:3C:58:42:CE:E2:75:38:86:6A:2D
Authority key identifier: 8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB
Certificate issuer:       /CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
Certificate serial:       01901E58E6E493AD069BF22F9AD93B08A98F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
Manifest number:          0549
Signing time:             Sun 16 Jun 2024 00:01:01 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:01 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:01 +0000
Files and hashes:         1: YgsfBcZ5juN_9kjdn9zXMzd3Je4.roa (hash: XyR7IGzyeYy7FE/K7LfsXKb3JW6Hi8maCPxW7pi1040=)
                          2: jBPrj9nY20toqWnI_91IRoAqsKs.crl (hash: KB1t1xG4wjed2PHjNDKIWgDg6A81pBB0F9++jY78m+Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:e6:e4:93:ad:06:9b:f2:2f:9a:d9:3b:08:a9:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
        Validity
            Not Before: Jun 16 00:01:01 2024 GMT
            Not After : Jun 17 00:01:01 2024 GMT
        Subject: CN=3064f6f0480fb195f9d23c5842cee27538866a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c0:01:61:9e:f1:92:6e:3c:df:75:10:64:93:
                    1f:63:d4:bc:32:01:f0:7f:82:94:29:36:7c:42:04:
                    50:86:3e:a5:42:50:ff:ec:6a:5c:fa:13:d1:6f:ad:
                    a6:d9:ab:9c:56:8d:e1:90:74:f6:37:eb:b0:91:64:
                    91:97:80:df:ad:c9:f7:80:a1:d3:95:f7:e3:81:70:
                    ff:81:40:e1:31:92:d3:4b:c2:c3:34:a3:ce:20:b1:
                    0e:44:bd:d0:ff:a1:97:e5:9c:0d:1b:a6:3a:cf:73:
                    92:2c:0e:3b:b2:67:3a:09:77:66:8f:b8:bf:d1:61:
                    04:04:2e:e6:d4:0a:8f:ea:63:5c:18:ca:66:98:f4:
                    f3:61:91:1b:ab:ce:14:b8:ee:42:7b:fb:b0:4c:a7:
                    44:64:cd:ca:e4:ae:de:aa:4b:d3:9f:3d:26:0c:17:
                    4e:8a:4d:01:59:e9:6a:35:9f:30:5c:de:0e:6e:e1:
                    fd:2d:0a:13:23:10:22:95:16:89:a0:78:d9:83:d2:
                    c8:9b:2d:28:70:c0:a6:4c:a4:fd:9f:bc:5b:30:41:
                    ab:20:24:95:62:aa:31:6b:ae:bb:a6:90:0e:6f:ba:
                    1b:19:4b:04:e5:b2:bd:c3:fc:d8:2f:c8:d9:b6:c9:
                    31:fc:53:a3:a4:fe:ea:64:d8:91:f3:8e:50:da:a5:
                    d0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:64:F6:F0:48:0F:B1:95:F9:D2:3C:58:42:CE:E2:75:38:86:6A:2D
            X509v3 Authority Key Identifier:
                keyid:8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:a0:e1:b0:a4:c4:2f:8f:b9:42:e5:df:79:a7:d4:0a:ec:a5:
         f3:46:34:ac:f2:ad:da:fa:0a:d2:a4:79:c1:f3:46:15:a2:30:
         60:fa:c4:50:93:2f:6c:a3:bb:c1:8e:24:1c:99:fd:0f:3d:eb:
         f6:ef:aa:9c:ef:b4:2e:2d:8c:20:ae:53:20:b8:78:7d:35:f1:
         e5:4d:36:e7:77:3c:93:31:e4:97:bd:1b:13:0e:3d:2b:9e:ab:
         95:c1:e6:65:88:b8:5b:ef:2a:35:79:ae:ad:f1:dd:d1:7c:5a:
         24:b7:07:6b:6e:3b:d6:bf:a9:a8:73:f9:1b:c4:a6:ab:72:87:
         21:02:55:c0:6a:91:31:5d:6d:31:95:55:2e:08:cb:a2:e5:54:
         ca:8d:31:a9:3f:fd:99:45:3e:c4:c4:f1:b7:c3:b0:ed:74:28:
         7e:8d:11:69:4e:40:c7:0d:e9:ba:6c:c0:cd:ab:f4:bc:3e:e7:
         ba:bc:7a:2c:4e:b7:27:7e:fc:ed:d5:08:15:56:4d:e4:0f:45:
         c9:72:d5:c5:b6:90:13:c5:90:8d:e4:20:9d:9f:48:93:4a:57:
         ea:4c:b1:52:4b:08:9d:9c:a3:e7:7d:92:9b:6e:bb:73:5d:84:
         34:bf:31:01:ba:bd:5a:ec:fe:94:04:d7:d3:dd:91:98:f6:2f:
         33:7e:e4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----