Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
File:                     v6yXEHYmO92w7s9b6mV0pAW5hd4.mft (raw, json)
Hash identifier:          3QFD59pKT+RHVPH7MHZ4ipreNGtGBOnFKnrgoEdUdYk=
Subject key identifier:   BC:D7:AB:52:10:C1:02:D3:8D:B2:11:14:98:AE:0B:4E:8E:CB:DC:5C
Authority key identifier: BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
Certificate issuer:       /CN=bfac971076263bddb0eecf5bea6574a405b985de
Certificate serial:       01901CD870AC5EABA44DAAD75FB99B46F429
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
Manifest number:          0103
Signing time:             Sat 15 Jun 2024 17:01:04 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:04 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:04 +0000
Files and hashes:         1: BocOZQwPV4MYslalTRVu5bKaSTc.roa (hash: Enm2ooftgo+lJHbwmMyL1O6aEtwge9eUOZ+RfI/cKaI=)
                          2: v6yXEHYmO92w7s9b6mV0pAW5hd4.crl (hash: C0Z06HuVo2B81ChRgfM/L+lHEWTXLBbzNBHlhv8Ccsw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:70:ac:5e:ab:a4:4d:aa:d7:5f:b9:9b:46:f4:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfac971076263bddb0eecf5bea6574a405b985de
        Validity
            Not Before: Jun 15 17:01:04 2024 GMT
            Not After : Jun 16 17:01:04 2024 GMT
        Subject: CN=bcd7ab5210c102d38db2111498ae0b4e8ecbdc5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ae:5b:cd:d5:de:b9:62:7e:b1:d0:3e:65:b8:
                    3b:a3:07:9d:5e:1c:49:12:29:2a:f8:b0:5d:8a:4b:
                    e5:85:74:4d:d2:31:5a:c4:0d:ca:da:60:69:d3:96:
                    f2:8a:3a:19:8f:34:ae:33:1b:d1:1f:03:b4:47:5a:
                    a2:11:6f:d3:3b:ac:82:dd:63:7c:86:8d:e9:a8:ac:
                    5d:8a:00:fe:c6:35:8e:ca:e0:b7:2a:6b:1c:37:62:
                    a0:49:55:47:fb:ee:f6:06:7a:c6:47:77:d9:de:5e:
                    7d:2d:1f:13:31:87:9c:dd:c2:22:0a:2b:30:3e:68:
                    83:39:da:f0:c2:ba:0e:83:d1:9f:78:35:6f:03:91:
                    da:3e:6e:db:a5:99:e7:8b:a8:0c:96:c3:e7:38:fe:
                    82:d2:54:86:52:09:f1:0d:e1:06:05:48:7e:1e:60:
                    05:bb:f7:e9:e7:d9:19:7c:f1:b7:82:6d:c1:25:04:
                    f3:da:fa:66:3b:c3:85:cc:e6:86:ac:aa:15:11:fd:
                    b0:e1:96:80:fb:40:9e:72:02:f6:12:a6:a4:b8:14:
                    04:fb:28:cd:ed:aa:55:73:ad:86:50:01:91:a8:af:
                    e1:f4:b1:a6:0b:c1:a9:f9:66:f2:ea:14:50:98:da:
                    22:40:bd:de:6b:61:c2:75:08:f6:4e:be:3b:60:29:
                    1d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D7:AB:52:10:C1:02:D3:8D:B2:11:14:98:AE:0B:4E:8E:CB:DC:5C
            X509v3 Authority Key Identifier:
                keyid:BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:a3:d8:1f:ce:9b:19:04:05:5f:d2:42:c7:7c:99:c5:d6:a3:
         8f:04:1e:d2:e4:f2:4d:01:d6:3a:2d:21:25:22:0c:be:aa:c9:
         db:4f:db:1d:9c:e9:25:36:78:68:7c:ad:f0:35:a9:77:7b:44:
         dc:40:37:00:ff:cf:6b:0b:4d:f4:78:e6:e5:38:9b:5e:23:15:
         4c:b5:cf:e0:57:83:00:9e:25:5e:c5:2c:75:89:f8:64:0a:08:
         0a:81:d7:99:e0:12:75:7b:3b:94:47:b3:fb:79:6a:d7:b3:3e:
         68:90:0e:86:6b:b3:5c:79:80:e7:59:30:ad:68:a0:8e:cc:1e:
         7b:a2:d9:fe:49:c9:42:24:a4:70:36:ed:51:c6:dd:e4:c1:8d:
         08:16:7d:aa:0c:f9:40:8f:88:69:ef:87:2a:ae:ab:5e:95:09:
         ac:0c:42:c7:d7:e6:f3:b0:cc:f7:7d:36:0a:3c:23:fa:9f:ff:
         d1:43:e8:0f:6d:4d:e7:87:92:83:a0:ac:8a:0f:be:fb:94:3d:
         41:94:8e:c9:7f:ac:61:d5:f0:61:cd:25:38:93:bf:8e:50:95:
         ed:94:a5:47:3a:4c:dd:8f:27:0a:49:de:0c:a0:ca:8d:65:1d:
         7f:9e:b0:21:1b:99:86:eb:58:f1:34:b7:d5:f7:35:ec:c2:7f:
         04:34:f4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----