Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
File:                     FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json)
Hash identifier:          mzKv2OsGEF9qxoDsIZ5VwItVV5FFw2o+p3X9XBjEQ50=
Subject key identifier:   C2:EE:6F:7B:0C:94:16:12:7E:C2:3A:A0:48:62:6D:A1:C8:37:3B:EB
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Certificate issuer:       /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial:       01901DED67988C99CD6CA76268E0BB6450E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
Manifest number:          102E
Signing time:             Sat 15 Jun 2024 22:03:36 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:36 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:36 +0000
Files and hashes:         1: 4iuGq-VWGgHQhLj4nds89YHROaI.roa (hash: 87WRFQXToutiGRbBy/iffGVB/EGVXGZhDbxq70sSagQ=)
                          2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: JOox/njRC+lSiz0GaTl3rpgPVVLhTyY0r2wQf3o4My8=)
                          3: wO3gO3AtzjwYiKYp9AfWbXKMxKA.roa (hash: 7FDysw6a2Tuu5B5ron14GV8BgfKfajXbaEOiK3IwJLs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:67:98:8c:99:cd:6c:a7:62:68:e0:bb:64:50:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
        Validity
            Not Before: Jun 15 22:03:36 2024 GMT
            Not After : Jun 16 22:03:36 2024 GMT
        Subject: CN=c2ee6f7b0c9416127ec23aa048626da1c8373beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:37:82:f7:25:bc:1b:7f:e7:3b:c3:da:6e:bb:
                    a2:f6:50:c1:a0:17:91:4b:5d:a4:ab:24:3d:db:c4:
                    c5:82:75:51:fb:93:84:a2:23:9a:00:a0:c8:37:80:
                    c9:c7:27:42:47:f3:05:91:f1:43:34:ae:4d:d3:1c:
                    57:ce:df:35:37:d7:53:4f:00:bd:03:fe:97:0f:c0:
                    7b:88:d2:4b:fa:2f:80:7f:d2:8a:4e:e2:d6:84:7b:
                    08:85:be:fb:b6:2f:a7:3a:c0:fe:5a:03:bc:7c:74:
                    01:68:4b:ed:cb:40:a5:26:b0:1d:86:ad:c7:86:bd:
                    3e:c3:75:49:7f:fa:72:a1:81:32:ba:0c:39:5b:66:
                    5e:e8:d8:e1:38:3b:a6:74:81:d1:30:56:1a:d7:3f:
                    aa:99:8d:83:3b:30:18:88:44:f1:d5:f4:85:1b:b8:
                    b2:e7:b8:6e:55:f4:a8:0e:90:8f:ce:e3:2f:f7:40:
                    c3:3b:bc:8a:89:a7:e2:9b:b8:2b:c2:ee:a4:38:ac:
                    f7:32:22:09:4e:6f:6f:25:03:b9:0f:bd:ec:2f:f4:
                    74:e2:65:3e:0b:31:19:87:6b:cf:8d:4b:e5:42:28:
                    68:42:32:d9:1c:bb:b3:f3:ba:03:1c:ff:5d:49:e5:
                    88:94:6b:e0:f4:57:1f:b2:1c:ed:83:f3:ac:8e:23:
                    87:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EE:6F:7B:0C:94:16:12:7E:C2:3A:A0:48:62:6D:A1:C8:37:3B:EB
            X509v3 Authority Key Identifier:
                keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:34:24:48:fe:4e:31:32:26:98:ac:a8:4f:66:36:e8:21:4f:
         1f:e5:18:63:1b:79:70:85:b8:d3:09:76:ea:51:dd:36:3c:60:
         84:e0:78:9e:ed:10:d7:8f:e5:1e:c9:9d:49:bc:c8:96:b7:1b:
         cb:d0:41:63:28:7b:ee:82:66:47:85:13:aa:97:1c:2c:e7:87:
         9b:52:06:af:b5:70:13:46:c6:60:7f:6c:42:ad:1a:22:0b:ec:
         9b:a6:58:b6:b1:a6:a5:27:62:20:e4:50:46:5b:6f:76:96:58:
         c2:3c:69:b3:eb:e0:66:a9:93:2b:ca:6a:61:ae:de:09:e7:00:
         8b:c5:13:0f:2f:c1:ac:88:82:f5:ff:de:b6:df:14:cc:8f:df:
         a2:23:c4:b7:91:11:a5:68:f5:14:7c:81:0b:20:2a:d4:84:42:
         de:49:9d:f5:66:3f:ff:8c:54:50:f6:f4:b7:6c:a6:5c:39:f4:
         eb:8e:6d:eb:de:95:17:d6:96:65:50:2e:e2:84:bc:e2:14:13:
         9d:48:3a:6b:bc:9d:93:36:23:9a:89:4d:5b:f4:9e:b7:25:e5:
         48:50:61:5c:58:f4:1f:39:1d:fc:d1:35:48:61:99:94:21:5d:
         22:5a:b0:bf:c0:18:f9:d2:1d:61:c7:57:6d:88:fb:06:4c:e0:
         e3:3d:f4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----