Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
File:                     crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json)
Hash identifier:          Gix8cJzS1JNJoD64r7vPV3134RS7rfdSfEizwoXlYhE=
Subject key identifier:   16:54:A1:2F:06:6E:E9:25:BF:F9:31:85:5D:94:69:AA:FD:FE:CD:AA
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Certificate issuer:       /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial:       018FB67E2FE0006ABC1345DAEFC40014E772
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
Manifest number:          0297
Signing time:             Sun 26 May 2024 20:01:14 +0000
Manifest this update:     Sun 26 May 2024 20:01:14 +0000
Manifest next update:     Mon 27 May 2024 20:01:14 +0000
Files and hashes:         1: OutjT0tfDG3D4Z419UN077RX0s4.roa (hash: MtR6gwYg/VeRmJlPHAfWQj6+WaOkz76BoJM8IZlY9Qk=)
                          2: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: gXIJ21SaOKfkvKQ61ChZY9T3ca0wsM3OBil8D1t70Vk=)
                          3: nYUf1Bpqqw81PIYMP7zHI8LPCbE.roa (hash: uJVn/a2pRVY++zObgnKFP8ShblwX/c0Fyji2zoPxzak=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 20:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b6:7e:2f:e0:00:6a:bc:13:45:da:ef:c4:00:14:e7:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
        Validity
            Not Before: May 26 20:01:14 2024 GMT
            Not After : May 27 20:01:14 2024 GMT
        Subject: CN=1654a12f066ee925bff931855d9469aafdfecdaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e3:7b:d4:87:b4:ba:e0:6e:e5:1f:4b:85:1e:
                    ba:1d:2b:d3:7b:ba:e7:f7:f9:8d:3a:b8:16:df:4d:
                    b6:8f:7d:51:36:28:1e:52:62:61:8f:b8:8e:03:48:
                    26:0e:a4:32:ca:ca:a7:8c:44:60:3c:d5:d9:46:10:
                    65:6f:72:c5:2b:0b:94:75:d4:42:50:7a:ab:bb:b8:
                    ba:ea:8b:b7:e7:79:7b:da:26:6d:4b:25:a9:6d:93:
                    b3:bd:8f:71:f6:1a:8c:92:2d:dd:e1:db:3f:8c:6a:
                    85:ac:e7:bc:b1:f5:3d:44:42:95:c3:d5:e5:23:e1:
                    e9:10:2f:48:e1:7a:36:85:eb:1a:47:c6:f8:08:6d:
                    62:7b:5b:ea:19:80:09:47:cd:48:73:06:53:e1:6a:
                    c5:fd:86:77:a2:57:4b:f6:62:a6:69:9a:96:54:f6:
                    ba:f4:60:f4:4f:6c:71:eb:17:f8:b0:54:b5:bd:84:
                    d1:cf:20:62:71:bf:11:02:51:67:d0:7e:66:68:4d:
                    1e:7a:f6:e7:9c:c8:a4:e2:5f:27:e3:60:af:d7:0d:
                    1b:02:b6:3b:86:fd:ec:70:38:8e:46:c1:e6:70:f2:
                    d9:ad:ff:8a:f0:1f:10:ae:0f:ae:30:70:18:64:9e:
                    c3:10:4b:fe:a3:a9:b8:1b:6c:66:14:c7:32:58:fa:
                    7e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:54:A1:2F:06:6E:E9:25:BF:F9:31:85:5D:94:69:AA:FD:FE:CD:AA
            X509v3 Authority Key Identifier:
                keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:a3:f3:4f:90:1e:bc:f6:5d:d4:ce:2c:3b:c8:94:66:d5:3f:
         d1:8e:3f:46:84:62:18:a7:1d:7a:b3:07:d7:a4:9e:0a:84:f7:
         8e:50:dd:11:15:e4:fa:7d:c7:96:0b:e0:aa:71:13:45:1b:33:
         27:80:cc:3d:e1:ef:9c:0c:30:e1:b8:ae:1b:72:a1:18:cd:84:
         40:c5:05:b3:61:68:3e:f3:c4:44:c6:aa:8f:a1:99:0c:0c:94:
         29:f7:dd:dd:03:f4:fc:b3:0e:f9:ee:34:ed:68:37:34:40:fa:
         85:f0:40:48:ac:ed:07:7a:5a:76:db:f1:de:b6:d8:cf:e6:86:
         c6:9f:76:7c:f4:03:38:9d:4d:cf:f3:ca:3e:52:5a:c6:d9:e5:
         db:02:70:af:ba:43:90:34:59:cd:28:e0:98:aa:37:be:a2:38:
         8c:0d:30:58:38:42:cf:c7:f2:13:d5:76:d8:35:f5:12:eb:21:
         55:a0:27:ea:b0:7c:56:5a:15:c2:be:f9:03:5e:dd:3b:56:e4:
         30:76:02:4a:c7:1c:f7:ea:2c:ad:86:14:b9:27:ad:f3:29:e2:
         f8:90:ca:69:37:e2:67:4e:18:b0:97:85:80:87:e1:40:8a:11:
         43:f0:68:9b:fb:5e:5e:a9:6d:43:9a:c0:07:8b:65:f0:1a:f9:
         8f:52:e5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----