Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
File:                     E_hJa3nRwE0IKvg_G-al6rDGYIk.mft (raw, json)
Hash identifier:          uWA/Zb0w291bxoFxL4XcrzniY6fMd0gbSSUjibohBX8=
Subject key identifier:   B8:09:64:CE:8A:15:88:93:C8:8E:15:AB:14:5A:21:EA:01:C5:F3:3C
Authority key identifier: 13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
Certificate issuer:       /CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Certificate serial:       018F8D15D5CF2DC01C9518DAA4E1CB081E21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
Manifest number:          1180
Signing time:             Sat 18 May 2024 19:02:49 +0000
Manifest this update:     Sat 18 May 2024 19:02:49 +0000
Manifest next update:     Sun 19 May 2024 19:02:49 +0000
Files and hashes:         1: E_hJa3nRwE0IKvg_G-al6rDGYIk.crl (hash: mmHTx7I/A2FbpWghibcuYncDJ9KLswuEMysJN6SErQI=)
                          2: V_ojMuo48vWmsgYROIQ9e8zOEZg.roa (hash: 1p2moC7jaynmoAKYYSQwGGo/N8kN4DxSCkBYZHFM6rM=)
                          3: _gbgVcIsHmh25TNQbRO3ROY8GWM.roa (hash: DivawMRPt81D0x8oT4o/9NjK17dDIBLxtAP3BQSbOEI=)
                          4: dRX-loL7VbWKqMzz33Vq7mMaHyM.roa (hash: oa+EwmwFnuenQ44EnYx9FV+4s2v3CVS5qBe4TdcxOTk=)
                          5: nJmt27KvQvfu4Gydty5cWIWQBWw.roa (hash: T98OmS/DWnSD+StiFBrEjq77ZI+vvd316m3wGsUj2RY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 19:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:15:d5:cf:2d:c0:1c:95:18:da:a4:e1:cb:08:1e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
        Validity
            Not Before: May 18 19:02:49 2024 GMT
            Not After : May 19 19:02:49 2024 GMT
        Subject: CN=b80964ce8a158893c88e15ab145a21ea01c5f33c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:ab:80:96:5e:ee:ca:ae:ad:b3:4e:c9:0d:
                    34:84:c1:31:21:81:cc:97:1c:b1:38:0c:47:3c:a0:
                    5e:49:01:3d:c8:04:18:ad:5f:b3:fc:15:35:1a:ca:
                    d6:bd:d1:89:e1:d8:e3:93:44:ce:bd:4b:54:eb:c9:
                    e9:b3:5d:33:88:e1:e8:29:9b:bf:5f:64:de:b0:c0:
                    2b:22:47:20:fd:c6:95:11:8c:dd:aa:db:6d:ce:5c:
                    b1:f5:bf:07:6c:82:f2:f7:ac:e8:52:60:d7:47:8a:
                    0a:01:11:4e:4a:f6:47:26:83:82:8e:86:8e:e6:06:
                    5f:9b:da:73:09:25:a4:fd:4e:1f:af:9c:4d:82:d3:
                    61:e2:26:ba:ae:4a:bf:49:6d:c8:c1:f9:fd:64:82:
                    af:7e:9b:b5:61:8e:80:36:19:03:ef:0e:fc:0f:f2:
                    14:c7:78:74:df:90:b6:9c:d9:1e:a3:39:6e:50:b7:
                    9e:27:08:e0:37:e1:fb:f8:f4:dd:0a:56:fc:bd:72:
                    97:01:92:ca:10:78:8a:60:d0:55:f1:ce:a4:ba:ba:
                    f2:ec:24:47:54:b8:3e:00:6b:8a:9b:c4:26:65:88:
                    6f:f9:d6:b5:bf:4a:a1:cc:66:2b:e8:bf:ca:c2:a7:
                    45:5d:45:4a:8d:30:de:2c:4e:dd:00:d0:e1:df:73:
                    0e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:09:64:CE:8A:15:88:93:C8:8E:15:AB:14:5A:21:EA:01:C5:F3:3C
            X509v3 Authority Key Identifier:
                keyid:13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:73:96:4f:98:83:ba:db:7d:a8:32:05:04:4d:69:3e:90:e1:
         84:b0:22:b5:36:6a:7c:a6:a0:ff:4f:75:c7:9a:60:bb:9c:b7:
         31:60:a8:30:81:ac:b0:6a:d1:0c:7f:63:a1:aa:18:5a:ab:53:
         56:88:3f:26:43:36:e8:75:38:61:e4:45:14:d6:58:49:d4:b1:
         fe:99:bf:e0:08:f7:31:30:85:57:40:1d:08:75:45:89:a1:cc:
         52:ad:75:ea:95:87:06:61:ec:ed:d6:ba:4a:b2:8d:4f:79:b9:
         c4:ed:f9:54:a5:6d:17:eb:d6:ad:4c:93:a2:fc:55:5d:6c:ec:
         9e:bf:70:21:1a:17:64:c1:20:b3:d7:49:2b:dc:15:10:fa:41:
         a8:e2:0f:6d:cc:d0:4c:2f:69:9f:06:db:1d:f3:d3:01:e5:14:
         85:7c:80:39:58:f6:5d:0f:2e:ae:79:4b:7c:9e:d3:df:64:72:
         11:b3:79:19:c9:ac:b1:4e:9a:8b:c8:d8:98:39:97:a5:e6:31:
         c8:2b:24:18:5e:d4:3c:0b:e7:1b:60:7c:59:72:cf:8d:a5:2b:
         ab:9a:ba:b5:0c:de:a7:27:c9:33:d4:70:c9:11:0a:60:fc:c3:
         6a:fb:91:8e:93:d9:2e:54:41:f1:d3:92:4d:35:d8:95:01:85:
         9c:35:59:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----