Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
File:                     m2fALef8jRGhr-euYsWFTRd2dVM.mft (raw, json)
Hash identifier:          4bqXDvugsjO0B3TzJvmGFnAlcpvC7UVOpwisvd/6BAw=
Subject key identifier:   E9:C5:F5:BB:5E:0F:53:6F:61:5B:B4:C4:B0:FC:29:43:32:9A:CD:3D
Authority key identifier: 9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
Certificate issuer:       /CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Certificate serial:       019037AB27B4B1A63EFEFA2D1AAB8F242C7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
Manifest number:          11D7
Signing time:             Thu 20 Jun 2024 22:01:21 +0000
Manifest this update:     Thu 20 Jun 2024 22:01:21 +0000
Manifest next update:     Fri 21 Jun 2024 22:01:21 +0000
Files and hashes:         1: ZtanexAjnASLIyjImlPsjusJZ0Y.roa (hash: lCmO2Je6tKQjaYjobZPZRUNxx0G62xuxkbA/4WCFa1Y=)
                          2: hlbBIyTcK6rDdM4CpTZX68UbXp4.roa (hash: o4P1QqYRGpGU6CCD/diIE28ER8KkY1e25BXvTJ4Q3L0=)
                          3: m2fALef8jRGhr-euYsWFTRd2dVM.crl (hash: 7Ps+qFcLaGaBpyFsphhHIkP2b37GsviZ66IHJQSIEGI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 22:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:ab:27:b4:b1:a6:3e:fe:fa:2d:1a:ab:8f:24:2c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
        Validity
            Not Before: Jun 20 22:01:21 2024 GMT
            Not After : Jun 21 22:01:21 2024 GMT
        Subject: CN=e9c5f5bb5e0f536f615bb4c4b0fc2943329acd3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:e0:c3:2c:89:95:83:c3:2e:75:d6:34:7e:
                    74:49:7f:08:a3:b4:af:8c:d5:43:5c:bd:0e:e7:f2:
                    46:c6:ba:6d:10:8d:11:0f:19:9b:36:31:d0:06:ed:
                    ad:d9:92:a5:8b:ed:8b:70:e4:9e:f1:a0:9b:a8:f6:
                    bb:ff:cb:66:96:39:03:19:3b:60:b4:fa:f0:e9:91:
                    fa:bc:e0:70:b4:0f:cd:1b:e3:bd:c3:26:48:4a:44:
                    eb:ff:c0:a6:98:00:77:07:77:60:89:9c:8f:8a:24:
                    84:45:5a:73:50:ce:da:6c:2d:e5:4f:73:35:d7:ba:
                    8d:d2:3a:e2:3a:53:e9:56:31:1c:89:eb:64:2d:4d:
                    d4:c0:d7:43:2a:e3:a2:f5:9b:9d:53:6e:68:a1:f7:
                    6a:1d:24:28:ef:04:9f:7a:ff:37:ea:33:03:0e:87:
                    e4:93:78:60:d2:7c:e5:0e:29:ea:44:a7:95:6e:25:
                    93:b6:a5:1b:dd:71:0c:34:d7:ff:43:31:3e:cf:f5:
                    eb:df:d5:4b:a7:1c:1a:f2:06:b1:bc:ec:0a:b6:45:
                    f6:66:8b:ef:f2:a5:c8:45:20:ed:ac:ba:0b:0a:48:
                    ac:02:b5:d7:b8:41:9e:8f:09:15:3e:bc:0a:12:06:
                    2c:d9:55:03:ad:2b:49:02:f4:0d:e0:1f:b4:5c:e2:
                    95:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C5:F5:BB:5E:0F:53:6F:61:5B:B4:C4:B0:FC:29:43:32:9A:CD:3D
            X509v3 Authority Key Identifier:
                keyid:9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:22:fd:55:61:c4:80:fb:19:ba:1b:ca:90:22:df:36:3f:22:
         2d:57:63:c2:47:99:16:49:90:f3:c1:39:de:33:38:73:3f:9a:
         d4:af:03:41:c4:88:bc:1d:90:d3:97:8d:8a:43:7d:87:51:14:
         e4:20:6a:a1:1b:91:b2:da:5a:2b:82:d4:5e:4a:e9:09:81:0e:
         55:42:8b:50:2c:71:e1:8d:9c:c6:fa:25:d2:46:45:7e:04:d5:
         c1:32:fa:bb:c4:8b:c4:c0:0f:a0:48:8f:db:55:74:a7:55:72:
         e8:c7:09:eb:22:c1:1a:21:7e:2a:f9:ed:72:6d:ab:d2:67:3a:
         24:4b:45:dd:91:ce:5c:c3:b4:30:65:3d:37:ab:53:3c:55:8e:
         a6:b8:93:39:f1:1a:8c:db:42:35:7b:d6:f2:11:e3:ef:a2:04:
         58:7d:74:1c:1c:0d:35:80:0a:69:75:5a:59:fa:80:35:6f:0c:
         da:27:c9:8c:8a:09:9b:d6:7f:ad:04:32:de:75:b3:14:91:fc:
         82:96:5b:17:f3:1a:8a:50:bd:64:8c:27:49:57:49:16:3d:ef:
         d6:ff:1e:7b:f7:78:c3:0d:31:2e:e9:84:ba:c1:d3:e1:04:3a:
         68:a5:cb:41:66:fb:7f:f5:72:7c:ee:18:f0:db:9b:55:40:b6:
         d1:ae:5c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----