Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
File:                     Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json)
Hash identifier:          1UD+CVz0hsNRBj89DMY1kUV4dGdoeGuKu02c4CYEkqw=
Subject key identifier:   85:DD:71:BA:BA:7B:43:9B:9D:C2:2A:1B:A5:3E:3E:7D:24:76:C2:61
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Certificate issuer:       /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial:       018FA2C0B10838D93E1B36257A56C01A6F1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
Manifest number:          11AF
Signing time:             Thu 23 May 2024 00:01:28 +0000
Manifest this update:     Thu 23 May 2024 00:01:28 +0000
Manifest next update:     Fri 24 May 2024 00:01:28 +0000
Files and hashes:         1: DdSuzVrnQuEz_GME-nJwDwNPNhs.roa (hash: 89I5SCNHp+5BqwMRXk62zbJcFzfKtfXp5TpByYKv6mI=)
                          2: HFgx3Od64Q3tjLHQ_xEFGphlFFQ.roa (hash: 9MlA1vRyYeBqIFb2xdG5n9AqmEq6CXjjOLR0lETupaY=)
                          3: Jz4_3LJfhjGJ8A28OdtsyTTqAI4.roa (hash: sNE6CLALbMwmz56DpzavC9QThbouUFpmKO/uM07gX90=)
                          4: Po69f-KQr3bInlHXMKKO1uJ0zFs.roa (hash: N7PEEx2FQ4eDG6ZDMvAqMbxJr23ZsKb4tEvV0JwnszI=)
                          5: RDbvzDX5JYdPDwPeV6ioG6xLZuM.roa (hash: oTaJ6927xUsd2AJELjVpRo4BsBoo0+xMH8AFX4Ssz8o=)
                          6: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: xxPAJPkD3U2KHvogwWdc/d1S7G9WtSRSKS+FEkfRSkg=)
                          7: qSGma9mRcaAnlqhpG_Wu9n6s9Cc.roa (hash: J25rBIkF5/dJA+rYoGVRJ8hW04kT0p4HDWTHMpTKXRg=)
                          8: zMQrfXsMQO3Wag983QgrwS6mZBM.roa (hash: aXSp/CGhOyC8unYcXBbTnxMIVitcuMaY7BDnicLTJAM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 22:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a2:c0:b1:08:38:d9:3e:1b:36:25:7a:56:c0:1a:6f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66df7742890173927935206a28efbf48123e787c
        Validity
            Not Before: May 23 00:01:28 2024 GMT
            Not After : May 24 00:01:28 2024 GMT
        Subject: CN=85dd71baba7b439b9dc22a1ba53e3e7d2476c261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f6:65:77:62:ac:c9:9a:7e:7c:62:eb:98:ef:
                    24:d8:1a:89:ad:ee:d0:99:6b:83:9b:04:f4:10:9a:
                    e1:d3:d2:8c:76:e2:1f:39:21:41:31:9f:dc:c2:e8:
                    de:5f:b9:68:14:dc:53:4c:1a:95:87:f3:c7:67:ed:
                    d5:46:a8:4f:0b:4d:5c:87:9d:d9:99:a9:67:ff:d7:
                    f2:bd:d2:ac:06:04:a6:45:0d:21:00:5c:2d:fc:a0:
                    b6:18:cb:44:ae:6c:18:98:e6:38:f1:6d:86:3f:00:
                    26:6c:8a:56:fd:a1:65:16:33:c5:e1:c8:ac:ca:48:
                    b2:b8:f5:a2:e7:8e:9f:8d:76:b2:0f:cf:87:bc:bb:
                    dc:3e:9c:ae:f5:ce:80:02:c1:ee:7f:86:6e:3a:f3:
                    1d:19:c4:fb:86:bf:9c:2d:7e:06:93:cd:e0:a9:12:
                    29:c8:2c:ab:fd:de:dd:f2:b6:ee:f7:cc:d2:96:76:
                    18:2a:2b:66:7b:0a:cc:05:44:25:b6:0c:fa:0a:18:
                    e0:29:e9:de:2d:cf:0d:bf:2f:3f:de:a9:77:09:f9:
                    c4:00:4d:cf:48:50:e6:85:ac:34:06:f8:a8:b2:f9:
                    89:5e:ec:8a:2c:20:0f:87:14:f0:f6:98:16:74:bd:
                    1b:0c:af:2f:21:49:38:75:b1:f9:4a:21:bb:6e:b8:
                    e1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DD:71:BA:BA:7B:43:9B:9D:C2:2A:1B:A5:3E:3E:7D:24:76:C2:61
            X509v3 Authority Key Identifier:
                keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:93:01:ac:0d:a1:74:0c:2f:a8:c7:e8:70:7f:a0:7d:02:62:
         61:f6:1f:21:b4:31:1d:90:ea:f9:9a:f4:5b:55:d8:74:ee:9f:
         3e:71:da:1d:8b:50:6d:8b:13:0f:8c:7d:ef:86:14:dc:c3:23:
         bf:fc:c0:e1:cb:a6:5b:d7:63:9b:8e:cb:e6:dc:06:11:d9:ef:
         b0:99:6d:8d:3e:6b:0b:d3:4e:c1:f5:90:f1:64:bf:f3:10:7c:
         e9:f2:9e:9f:3e:93:40:1d:df:ea:7a:ee:57:17:4f:7a:eb:0c:
         e6:dc:06:e4:a1:3f:58:a1:86:a6:7a:4a:27:35:da:4f:d1:d0:
         17:30:49:7a:cb:33:ad:c1:f5:b1:13:7a:2f:63:98:8c:2c:bc:
         58:27:b7:3a:f3:59:2d:b6:49:98:bb:55:18:9f:56:c5:e6:81:
         d2:db:81:ef:61:cd:8a:04:5a:61:0f:45:c0:0e:2f:2e:77:68:
         e1:f0:dd:e3:0f:41:d9:a0:48:cf:de:0a:31:de:b5:ce:a8:29:
         ef:57:bd:aa:52:4c:5b:9a:48:21:8f:c5:d1:14:3b:84:c8:9a:
         22:34:9c:c2:25:51:d7:33:09:6f:44:d6:4d:12:e8:18:02:80:
         83:a0:54:8d:35:73:9c:f8:8a:19:07:20:22:63:21:1a:ed:42:
         78:49:0d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----