Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
File:                     p4wD9FkI30xFw_B9KkssQCRdUTI.mft (raw, json)
Hash identifier:          +j4eFYMoHMQ0oHML75fk2nNwHp+8c/JTgmpdN+aIKLA=
Subject key identifier:   6F:5A:A9:AE:A4:79:01:24:7A:60:08:73:7D:60:21:ED:86:DC:2C:7D
Authority key identifier: A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32
Certificate issuer:       /CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
Certificate serial:       01901D0F640C8B5EBD39BB35631B56C0C11A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
Manifest number:          11C8
Signing time:             Sat 15 Jun 2024 18:01:06 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:06 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:06 +0000
Files and hashes:         1: P6mU7zqXkmUrEOL_gQQ-LD5GyB0.roa (hash: /tjwbMLFEYfqIW7kYGsgU4Qiw9sMATebwQOdbgCR2dY=)
                          2: p4wD9FkI30xFw_B9KkssQCRdUTI.crl (hash: rpM1h8vzivzngV5hi5b1MVIGBxpQ3p0D5teNeIMiwyo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:64:0c:8b:5e:bd:39:bb:35:63:1b:56:c0:c1:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
        Validity
            Not Before: Jun 15 18:01:06 2024 GMT
            Not After : Jun 16 18:01:06 2024 GMT
        Subject: CN=6f5aa9aea47901247a6008737d6021ed86dc2c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:81:f9:f6:50:ea:1d:d9:7f:3f:fd:89:c3:25:
                    5e:ed:a8:b2:5e:42:26:09:85:33:5c:b8:97:28:33:
                    c9:cd:7e:65:6c:0b:ce:f6:30:12:62:25:eb:82:b9:
                    31:72:77:84:2c:5a:4b:dc:d0:07:c4:03:94:dd:b2:
                    36:17:58:16:96:4d:eb:a2:bb:40:c5:dc:2b:03:b2:
                    81:f8:29:23:63:66:8b:09:31:f0:d5:3f:53:d7:4e:
                    f0:b0:5b:2a:24:5a:b8:48:20:92:aa:94:c7:9a:4d:
                    b4:3e:36:6d:c6:04:c5:ec:75:f5:79:0e:1a:a8:d9:
                    fe:76:50:a2:fa:e5:d7:42:3d:ce:6f:09:7a:51:90:
                    17:bd:58:33:b0:a4:b5:69:fe:a7:8f:60:b9:6d:73:
                    18:72:9b:41:9b:77:6e:ea:c1:3b:a2:4f:72:7d:41:
                    ff:f6:b4:dd:55:f2:50:3e:e3:75:f4:6f:52:46:af:
                    db:ff:c6:81:f7:48:69:06:cd:44:73:a5:39:15:d1:
                    34:58:6b:85:1a:6f:82:ba:ae:dc:a7:d4:45:f9:06:
                    78:4f:b0:db:ef:69:c4:e6:8b:b2:49:b6:66:0c:9c:
                    f9:5e:45:2e:98:d7:b3:17:1c:da:e0:7d:50:97:e2:
                    07:5a:61:d0:06:a4:2e:3e:56:73:ac:29:5e:f9:3a:
                    ce:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5A:A9:AE:A4:79:01:24:7A:60:08:73:7D:60:21:ED:86:DC:2C:7D
            X509v3 Authority Key Identifier:
                keyid:A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:22:25:23:30:ce:66:58:d5:ad:50:90:b7:e0:1e:92:8c:87:
         23:fb:b5:4a:39:43:62:3f:5e:21:3c:f7:9e:96:9b:33:f9:6d:
         16:dd:d2:aa:d7:93:ed:b7:9d:32:ad:bd:0f:4f:28:5f:7e:c7:
         b7:7e:e4:a5:09:04:ef:04:9f:5a:13:21:e8:e5:10:72:82:9e:
         3b:36:b1:00:84:18:46:e9:4c:12:35:4b:94:ec:c2:a9:bb:9f:
         62:43:15:2f:66:b4:6e:cc:d4:85:9d:2d:53:6d:46:08:2f:4e:
         79:23:1b:74:7b:2e:32:7a:72:58:0a:07:60:fe:28:6a:9f:76:
         1b:b7:6d:99:64:84:67:23:1d:3f:81:b0:68:ce:50:e0:b1:bf:
         e5:66:dc:89:1c:29:56:e6:02:d0:d4:31:b6:09:dd:ac:65:70:
         cf:c8:d6:7f:57:63:68:16:22:b9:3d:80:5d:1f:61:bb:c7:d5:
         41:b2:81:10:25:15:b2:a9:e2:a5:b1:1f:78:95:62:a1:c6:04:
         73:95:1c:86:9b:17:cd:20:3b:95:a8:22:cd:49:59:2c:76:ad:
         d9:fe:65:26:99:1b:5b:17:34:fa:c1:fb:97:59:d0:17:f1:c2:
         a4:5a:dd:20:cf:27:c8:64:a1:53:11:4e:c4:32:77:7b:13:b2:
         39:59:bf:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----