Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
File:                     LzE27RCZhYClF9lZiryjPZumZZk.mft (raw, json)
Hash identifier:          MhdICuVh+yiylRkXiCuthMMs3FOy6+hgLkbtHc+W6FI=
Subject key identifier:   DD:F5:82:2E:99:8C:1F:F2:38:4A:97:06:D1:D8:27:79:DA:15:BD:B6
Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
Certificate issuer:       /CN=2f3136ed10998580a517d9598abca33d9ba66599
Certificate serial:       018FB759865A0813CFD6228292547925D451
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
Manifest number:          0BDF
Signing time:             Mon 27 May 2024 00:00:48 +0000
Manifest this update:     Mon 27 May 2024 00:00:48 +0000
Manifest next update:     Tue 28 May 2024 00:00:48 +0000
Files and hashes:         1: 0leoREUtPayZKuHd4zy4TF7XWpo.roa (hash: oBmaHgdYB0wQkrtey+2HwFwxckFfGE41f0qXDbWP01U=)
                          2: LzE27RCZhYClF9lZiryjPZumZZk.crl (hash: RJm9RV4SDfYEZ19ucIzrL6HV2qoG1is+M/1Jl8yaVaM=)
                          3: OQOMqdQYrX73ibHTTsMa62iAn2E.roa (hash: jdVBxxaWaoB6OUCTe3jk9cYoyspepx3uRLClI4HtRWE=)
                          4: r0LmmfKSGCSBeK9EMZSmEZm-sGg.roa (hash: VczZSCH+Id63klUW9LwHoM2/Hc0biZptK52bTAwk4n4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 May 2024 00:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b7:59:86:5a:08:13:cf:d6:22:82:92:54:79:25:d4:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599
        Validity
            Not Before: May 27 00:00:48 2024 GMT
            Not After : May 28 00:00:48 2024 GMT
        Subject: CN=ddf5822e998c1ff2384a9706d1d82779da15bdb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3f:0b:d4:ff:a4:7e:3a:ea:1b:99:ad:7d:ef:
                    ed:90:1f:de:23:da:ae:53:e2:7d:5e:60:fa:31:f5:
                    65:d9:59:c8:6e:40:d9:8a:a3:a7:11:f9:84:fb:d7:
                    b4:43:d3:cb:4e:49:6b:67:e6:0c:f5:36:10:f2:dc:
                    ab:b9:ab:c4:88:a7:27:12:2f:34:22:4c:15:de:30:
                    eb:11:f6:5e:d4:ce:b5:e3:d5:10:e8:b6:88:09:46:
                    59:a3:e5:c8:26:d7:d3:2e:a1:18:c8:21:93:27:59:
                    34:e5:ba:95:05:07:39:8f:bd:98:0c:f1:53:e7:36:
                    e4:d4:32:97:83:48:06:e8:7e:fe:29:b7:05:b4:df:
                    c0:ca:5b:a7:b9:1c:44:45:e1:a6:f5:c8:cc:89:f8:
                    f1:fe:03:c0:9e:38:a6:9b:30:96:76:07:12:25:cb:
                    58:6f:71:c2:46:ef:5c:38:17:c0:8c:50:11:6c:a7:
                    de:b4:e0:ed:85:46:02:3f:b4:04:05:65:d3:29:9b:
                    97:ff:73:79:ea:2d:73:df:97:a6:35:22:45:db:35:
                    d7:b5:93:9f:7d:fb:8a:86:36:34:f7:f8:95:6f:59:
                    0a:2f:e7:16:c5:07:20:99:6f:94:db:f1:86:74:99:
                    b6:5e:63:3b:a5:e0:f7:3e:7a:08:d9:e9:bd:0d:d2:
                    f8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F5:82:2E:99:8C:1F:F2:38:4A:97:06:D1:D8:27:79:DA:15:BD:B6
            X509v3 Authority Key Identifier:
                keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:3a:df:bf:3c:ab:6e:41:e8:76:48:5f:8e:f8:ae:b5:4a:36:
         1c:db:2c:b3:51:15:4b:9e:d1:1d:20:22:e1:a5:40:cc:47:da:
         e7:68:1d:16:0f:02:00:c3:2a:4d:13:40:55:b5:f7:29:dc:8b:
         c4:a2:c4:60:b0:6f:1d:f2:b5:15:dc:8c:ae:c6:f4:b6:a2:32:
         80:8a:84:91:b0:0e:bf:64:80:16:bc:fd:53:e3:87:85:1b:14:
         e2:d8:e6:80:70:1c:8d:7d:b4:90:d9:82:11:08:5b:20:a2:83:
         49:a5:da:1d:87:59:a5:09:1d:5e:e3:5d:49:fe:93:3c:cd:2d:
         d0:fd:cc:0c:af:89:93:01:55:a8:01:e8:29:e5:bf:3f:2e:c1:
         66:78:02:bb:0f:36:92:09:d0:29:c1:96:b9:83:bb:1c:62:0f:
         38:ab:9b:2c:84:27:f1:a2:87:c9:20:99:e7:1b:5d:22:3e:72:
         a2:58:40:ac:6f:c3:c5:2d:86:41:2f:c4:7c:b1:f1:3f:b2:83:
         00:97:09:c9:00:9b:d7:7a:c4:99:0d:27:a9:72:17:27:d7:f1:
         f5:11:c9:38:da:7d:c2:48:2b:70:e8:a5:08:27:1e:75:08:7a:
         e9:e4:dc:06:8d:b8:73:74:5b:1e:7a:bc:1f:f6:cd:37:6e:11:
         f9:4c:54:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----