Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
File:                     GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft (raw, json)
Hash identifier:          yMPl+o8Q+Xfk20yDOaw671lF3MDtRx39N5CLO1QQZbY=
Subject key identifier:   58:B3:8C:7B:CC:4A:03:41:18:2F:39:D3:FF:A5:AE:33:79:9C:84:61
Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
Certificate issuer:       /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Certificate serial:       01901BFE3AF7C72E014ADF588605045DC208
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
Manifest number:          097A
Signing time:             Sat 15 Jun 2024 13:02:44 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:44 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:44 +0000
Files and hashes:         1: FB1kSpEsqenueojYSA6hfV_kN5o.roa (hash: QbjPqlvhFNGii+MNvcX/LOo2lMH8REvBU5pA91JGeNo=)
                          2: GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl (hash: gi9l9wCSF6jeZRcJqHYzKU5sLE3JMW+ACozQi18SSWA=)
                          3: fe6Yy9korup9F2kMZiiTL7BvA3M.roa (hash: qqRxkLVN8S1ZpqkTvz7EZDtPY7vfUE+45rJQBLBdb7A=)
                          4: kFSRtmMOtwDfwBC5J8D08nFS8zM.roa (hash: hLpuqDzezNkfZRXiou8HpcUCYeNcwBMGTZWK8AbjUhk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:3a:f7:c7:2e:01:4a:df:58:86:05:04:5d:c2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
        Validity
            Not Before: Jun 15 13:02:44 2024 GMT
            Not After : Jun 16 13:02:44 2024 GMT
        Subject: CN=58b38c7bcc4a0341182f39d3ffa5ae33799c8461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:db:5a:4c:fc:10:d4:5a:5b:3d:3b:ea:1f:2b:
                    f0:f2:6d:4e:4a:a2:35:4b:0d:0f:5e:c4:bf:6a:a5:
                    21:7c:17:a1:bb:3d:7d:d2:e9:31:c3:a7:71:92:5c:
                    31:a7:74:e2:40:67:12:0a:e3:e3:3f:8e:4e:e2:c3:
                    14:ef:db:09:00:b8:9c:26:15:32:b8:2b:47:37:1f:
                    b3:4c:4e:8c:ec:a2:5c:3d:81:71:ac:e3:bd:b1:79:
                    44:93:44:3a:f4:67:24:de:0a:e5:88:21:1b:ed:b5:
                    9d:47:b6:71:81:74:0a:6e:eb:db:f0:b1:ba:79:fd:
                    15:b0:d8:3b:f3:33:f7:6c:c8:6b:e1:66:88:5c:81:
                    34:48:d1:2d:b8:1f:8b:c5:1d:43:6f:e6:b6:77:c5:
                    18:70:db:be:fb:e5:12:28:ca:61:a9:37:a4:cb:2b:
                    aa:1d:b9:1b:29:46:ac:ec:81:10:82:dd:33:87:38:
                    f4:5a:07:3b:99:12:94:83:df:10:68:69:7d:2c:cb:
                    f7:8b:32:a9:4f:2b:52:2c:a4:25:79:1b:e3:e1:78:
                    d7:96:1a:76:39:57:0d:be:23:65:25:37:6c:53:e4:
                    ab:74:a5:11:62:25:1e:d9:2f:1e:11:9d:67:cf:d1:
                    4c:f6:92:9b:b7:e8:92:14:36:72:cb:5f:7a:c2:0b:
                    8e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B3:8C:7B:CC:4A:03:41:18:2F:39:D3:FF:A5:AE:33:79:9C:84:61
            X509v3 Authority Key Identifier:
                keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:8e:63:41:2d:80:b9:57:38:e5:88:ec:e8:c1:89:b6:c1:bb:
         59:03:db:ef:74:b8:63:a4:c1:01:ba:0c:e1:71:c6:80:18:d5:
         8b:e2:8e:2a:91:b4:86:e8:ed:4d:cf:70:b2:65:bf:a5:1b:6e:
         93:04:75:f1:8f:32:0a:66:98:e6:7d:42:cd:12:46:43:82:aa:
         d7:6e:eb:86:d1:27:e1:78:87:d2:4f:73:eb:e9:e5:52:c7:ab:
         18:39:5b:6b:b6:fb:5e:da:87:aa:fd:41:d7:bf:1e:03:fb:e1:
         e2:a5:b7:48:cf:e5:3e:03:99:7c:22:28:b5:1d:d0:07:2f:f5:
         cd:4b:a4:95:44:0e:ee:9e:bb:49:3d:4f:8e:0e:22:8d:c7:ad:
         e0:52:ed:a2:9f:c1:b7:05:2c:28:9e:a7:49:38:f6:83:09:e0:
         a9:8e:58:5a:da:02:7e:fa:63:d6:33:5d:34:35:bb:04:5d:db:
         78:c4:cf:29:cb:36:7e:75:14:3f:77:a6:35:6c:54:a9:e0:19:
         f8:46:df:f4:b5:44:2d:70:f3:f0:c1:92:9e:0b:8d:f9:f4:e7:
         ab:1e:61:ac:44:60:e9:7c:e8:6a:05:18:16:ed:64:ce:b8:89:
         9c:e5:1f:b0:e3:f4:bb:c8:b0:07:93:50:8a:2a:6c:83:3a:6e:
         94:03:09:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----