Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
File:                     0Q1bMLRse5ey28RYnOo2Iq11YVY.mft (raw, json)
Hash identifier:          pKyO1lX+tbMdlZNKkrY7ynqiod22ys8PVGN2XTLWbS8=
Subject key identifier:   7D:AA:9C:73:8F:74:FB:FC:71:6C:30:D1:95:AE:9B:52:94:80:52:04
Authority key identifier: D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
Certificate issuer:       /CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Certificate serial:       018F893768B4234139AB0191E62F481192F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
Manifest number:          1177
Signing time:             Sat 18 May 2024 01:01:00 +0000
Manifest this update:     Sat 18 May 2024 01:01:00 +0000
Manifest next update:     Sun 19 May 2024 01:01:00 +0000
Files and hashes:         1: 0Q1bMLRse5ey28RYnOo2Iq11YVY.crl (hash: ySwaYgpGg4L4N1H40p9ZixnVRhT3VfW2yzW0fc73LAw=)
                          2: ECHKwWWJLDt_9gXV_TfltqPmATU.roa (hash: oqg7TTEMNnBkXPEKhDtwDAjoa3VS5TBz5PuWODnEQy0=)
                          3: Glr0pxpXKUvkQiBq0__UGqpEZNQ.roa (hash: 3I1JzdFBx95hXYXMbZglQbQ7A9UO7sJL3pCjLgGLHwk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 01:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:68:b4:23:41:39:ab:01:91:e6:2f:48:11:92:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
        Validity
            Not Before: May 18 01:01:00 2024 GMT
            Not After : May 19 01:01:00 2024 GMT
        Subject: CN=7daa9c738f74fbfc716c30d195ae9b5294805204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bb:7c:dd:98:6a:4a:fa:c0:1c:ff:83:3f:8e:
                    5c:75:43:d9:03:57:7d:aa:2b:b5:d6:34:bc:2d:1c:
                    5a:40:27:f2:e2:58:93:67:ad:95:7d:18:43:4d:78:
                    94:2e:d9:98:03:a2:ca:3b:83:16:76:e7:df:cd:7e:
                    fd:8a:e7:c3:2e:55:e5:23:26:27:e2:c4:14:03:06:
                    f4:b8:ab:2e:f9:97:ab:3c:ca:23:52:2a:03:19:91:
                    4d:1c:32:a0:4d:03:54:b8:a2:e2:37:aa:b2:c6:fc:
                    71:7d:3e:55:1b:46:18:cf:bb:38:dd:ed:bc:c7:9c:
                    aa:b6:96:d4:21:91:0f:2a:0e:84:4e:4c:e2:3e:29:
                    aa:f1:ac:4d:2c:cf:38:70:c5:8f:04:48:01:ea:0c:
                    b2:8e:31:a7:79:0a:94:8c:d8:9f:68:c2:9b:15:ec:
                    34:38:08:27:62:e1:10:c5:90:29:48:36:c6:4d:6a:
                    c4:1a:07:57:e5:81:d2:2d:8f:4b:aa:bf:fa:4e:8a:
                    55:3c:fc:90:7e:80:df:9b:01:24:47:7a:8c:fe:dd:
                    35:7d:6f:2d:4d:40:98:79:15:47:7a:79:db:92:9a:
                    4b:87:0d:0c:49:39:20:df:88:3f:a0:a6:e0:f6:13:
                    ff:d0:67:a2:4a:6c:92:78:51:aa:67:be:4d:11:6d:
                    e5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AA:9C:73:8F:74:FB:FC:71:6C:30:D1:95:AE:9B:52:94:80:52:04
            X509v3 Authority Key Identifier:
                keyid:D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:97:ff:a7:f7:2e:b8:48:99:a5:56:6b:7b:b7:45:17:f0:bd:
         4b:d2:d3:a4:3a:f6:40:5a:9b:67:4d:af:16:45:34:ab:e8:cf:
         7d:30:ca:c4:c8:f7:d9:3b:d5:ad:ce:01:2b:24:b7:01:25:32:
         a0:2a:5c:c8:61:18:4f:88:b9:bf:f9:55:b0:fb:a0:79:06:3b:
         60:c5:6b:6c:3c:60:75:e6:57:da:f0:7c:a8:e3:62:c8:de:d8:
         09:95:b9:ec:e6:2b:ac:fa:9d:e1:01:00:1f:97:5a:51:c1:1a:
         97:2f:91:77:8c:cf:ae:15:cd:04:f1:be:0a:07:3e:b8:6e:be:
         10:df:a7:9b:22:66:02:14:13:9e:f2:c2:5b:5b:d1:e4:3b:7b:
         e1:b2:2a:95:df:ce:6b:d0:a3:53:29:25:01:b9:e5:44:8f:8d:
         d6:9f:21:55:fd:1e:ed:9c:c0:d9:81:45:86:aa:2a:4d:92:de:
         6e:77:6c:0b:89:c7:e5:8b:2f:8f:7b:80:bb:7a:c8:a3:d2:5c:
         89:f8:08:c2:cb:40:66:38:17:c7:bc:0e:6e:bf:70:a3:4d:da:
         3c:03:93:f9:f4:a9:af:bc:7f:c2:1b:e1:38:45:d9:c8:6f:e8:
         a4:50:d2:58:da:3b:af:47:d7:af:a9:38:e0:10:fc:7b:ab:ef:
         f2:cf:26:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----