Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
File:                     1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft (raw, json)
Hash identifier:          epNERBDX3+8HslEO2Zr4FAag5DXHRG4wMAFkhXPcu+Q=
Subject key identifier:   75:57:06:3B:E2:25:38:D2:4E:75:4F:C3:F3:57:3C:DC:F0:2E:E4:36
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Certificate issuer:       /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial:       01905AA46A5A69D05E037163C14D4EE7E574
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
Manifest number:          0425
Signing time:             Thu 27 Jun 2024 17:00:42 +0000
Manifest this update:     Thu 27 Jun 2024 17:00:42 +0000
Manifest next update:     Fri 28 Jun 2024 17:00:42 +0000
Files and hashes:         1: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl (hash: jMPsOBuViqvGFOmifPm+a5PldvKyyLChA+FbqQ/h4wA=)
                          2: 2lo36amWMgj0fEGnDQsYmQqm67o.roa (hash: NwJ2UTmo1pjhar/MnXQcFto1PSocSEpc30WuKRP1Bho=)
                          3: UobijqsT01yksFX416B4aDAZYqg.roa (hash: vGSG8S2JKQJckhUHJIWn6OfwCdZKR5PsPdLUkm44BXo=)
                          4: sFoTxQ6Gm90qZG4sUc2jeApVsS4.roa (hash: 74WQf6mTUSnPPvHI5udi5Qm/cVykUsHLW0yubS1l5YA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Jun 2024 14:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:5a:a4:6a:5a:69:d0:5e:03:71:63:c1:4d:4e:e7:e5:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
        Validity
            Not Before: Jun 27 17:00:42 2024 GMT
            Not After : Jun 28 17:00:42 2024 GMT
        Subject: CN=7557063be22538d24e754fc3f3573cdcf02ee436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bc:94:5b:da:39:fc:1f:c8:30:8d:58:a6:4f:
                    8f:47:c5:9d:a2:35:ec:aa:05:7f:fc:29:71:d8:b9:
                    8c:a1:2b:94:d2:2c:57:fe:df:2c:d4:ce:79:ee:54:
                    74:ab:60:24:ba:27:45:bd:7a:63:51:fb:a8:95:ae:
                    62:bb:af:d0:35:6c:30:42:66:8e:9c:01:e4:67:80:
                    d3:0b:c6:06:02:ea:d2:a2:9a:5d:e5:61:6b:0a:9a:
                    06:a0:f3:76:60:25:3e:5e:eb:35:33:dd:dd:b5:b9:
                    91:4b:55:77:4a:ed:8a:34:8b:62:76:63:72:26:6a:
                    b9:68:bd:9f:12:bd:e5:81:51:d4:a0:83:83:86:41:
                    0a:80:da:8e:51:c7:cf:a0:f6:b8:ce:b8:b6:f6:e4:
                    95:25:07:b5:33:a1:61:f8:b4:7e:ec:61:93:ae:71:
                    bb:49:7d:3e:64:46:a5:bd:29:fd:c2:e8:c4:64:e1:
                    1a:23:ad:3a:4d:a8:1d:9f:d0:35:b8:cf:ae:91:fe:
                    d1:47:fb:e5:3b:94:44:b8:eb:25:5b:de:71:c0:0c:
                    aa:ca:c0:76:4c:ff:b6:b8:cf:cd:8f:bf:cb:ca:76:
                    53:59:f5:57:72:c3:74:49:a6:5c:03:dd:c7:c2:ad:
                    7f:a3:44:dc:cb:d1:2d:a7:97:0e:31:87:c9:a5:35:
                    b9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:57:06:3B:E2:25:38:D2:4E:75:4F:C3:F3:57:3C:DC:F0:2E:E4:36
            X509v3 Authority Key Identifier:
                keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:75:11:ea:51:80:37:ed:6c:bd:d8:2f:0d:9b:c4:6b:eb:d2:
         06:03:93:35:65:45:65:93:69:15:60:40:04:51:30:f9:55:10:
         18:38:0f:d0:6f:79:6e:80:3d:c3:8e:8b:b2:b9:ef:6f:00:9c:
         44:22:1a:a1:a1:c1:2e:f5:4c:f2:20:58:af:1a:07:d1:4b:f6:
         fa:c6:65:f1:79:87:f6:fb:f4:f3:97:d3:74:a1:cf:28:e6:d1:
         15:ee:60:2f:18:bd:4d:ab:2b:fa:d6:11:cf:df:45:4c:c1:e8:
         b5:c1:ac:20:65:63:8b:93:39:56:65:fd:f3:b3:06:6b:08:35:
         0b:22:92:0a:ec:31:25:d1:ee:d1:e3:f9:3d:d7:6c:90:de:20:
         f5:28:4a:77:1c:1a:f4:73:8e:42:e8:89:ab:d7:11:29:47:1b:
         d5:d1:d2:4b:b5:35:5e:2e:97:d0:0c:e2:c5:55:a6:33:fa:95:
         4f:df:1d:a1:b7:99:e2:f9:0d:91:7b:08:00:fd:3b:d5:83:3b:
         73:70:5f:16:3e:ff:a5:4f:57:3e:0e:3b:80:15:33:92:57:41:
         4c:64:0a:1c:cc:5b:86:34:cf:aa:9f:27:ac:6f:79:2e:65:a7:
         bc:c3:81:92:c1:50:fc:3d:cd:62:58:53:1b:b4:4f:66:7d:9a:
         c4:db:45:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----