Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
File:                     5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft (raw, json)
Hash identifier:          rl0Uu5PTvGO66sVXv1VABqbOJkOXPjbTdjSyN2QCFVE=
Subject key identifier:   2B:C3:FA:21:7E:4F:05:8E:7F:0F:B7:CB:CB:C1:33:D0:0A:FE:0F:F5
Authority key identifier: E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
Certificate issuer:       /CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Certificate serial:       01901DB3C89C8C96FA2FA6F06ADFBD7E9103
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 21:00:39 +0000
Manifest this update:     Sat 15 Jun 2024 21:00:39 +0000
Manifest next update:     Sun 16 Jun 2024 21:00:39 +0000
Files and hashes:         1: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl (hash: EBJFJ/4LzDWjulFXYnu8b2XJPdWehY3egs0iNFvrxaM=)
                          2: Fdmxdl0vl0PMkM42BoDkVBAKAfI.roa (hash: dtvxDJu05OeGEgy2cBgAQKq5ksDLaN18+kRnSw97P0g=)
                          3: hJmMPs6xQZ6psU6uhrcv65AI0O0.roa (hash: VYTr73AVaw+hq+ZiCnwh04bHXRL5Sw5SFL/i4pu0iKE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:b3:c8:9c:8c:96:fa:2f:a6:f0:6a:df:bd:7e:91:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
        Validity
            Not Before: Jun 15 21:00:39 2024 GMT
            Not After : Jun 16 21:00:39 2024 GMT
        Subject: CN=2bc3fa217e4f058e7f0fb7cbcbc133d00afe0ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9a:07:7c:68:11:ad:97:82:70:47:7c:ab:da:
                    d9:5f:b7:53:ef:e5:31:24:80:68:fc:57:2b:2b:26:
                    e4:99:84:02:20:e5:37:93:32:47:d6:38:c3:8b:0c:
                    73:9d:a6:b0:35:9e:03:b2:9e:cb:83:ac:38:30:bb:
                    85:ef:ec:3c:02:79:7f:0d:22:43:d0:93:76:2e:02:
                    6a:7b:f3:a1:20:55:12:06:12:22:54:6a:dd:dc:13:
                    4b:c7:d2:28:b0:75:94:fa:93:de:f2:09:71:e7:2b:
                    c4:a4:ec:40:bc:bd:1b:a7:48:77:e4:f2:00:aa:55:
                    ce:50:84:d3:cb:7b:4f:33:19:d4:46:05:e3:81:1b:
                    ae:fa:86:43:3b:b0:d9:0e:fa:8a:70:37:e7:b3:1e:
                    e7:d3:8d:cc:28:bc:a0:d7:3d:90:f4:0a:07:a7:12:
                    62:b4:7f:90:f3:b5:d2:89:db:44:63:05:97:9a:42:
                    79:78:3c:be:94:19:75:9e:b1:f2:56:36:c0:19:e2:
                    52:f4:c6:f4:5c:e9:fb:f7:0b:e8:72:5a:e3:00:09:
                    1e:b7:73:24:69:05:f8:be:cf:8a:b3:9a:ae:da:6b:
                    b7:da:fd:98:11:d0:5a:d6:b5:a6:50:c2:f5:3d:1b:
                    81:1d:6d:9c:7d:ac:35:91:8c:e4:93:ba:fc:5a:a3:
                    c5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C3:FA:21:7E:4F:05:8E:7F:0F:B7:CB:CB:C1:33:D0:0A:FE:0F:F5
            X509v3 Authority Key Identifier:
                keyid:E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:69:b3:0f:de:c6:4a:ae:28:13:01:65:68:99:52:79:68:41:
         68:67:41:1a:ca:d4:87:e2:f1:42:b4:95:03:12:03:4b:aa:d6:
         26:77:58:80:6f:e3:4d:17:55:48:fa:22:c5:59:9d:ec:4a:8c:
         39:8c:e8:29:bb:b4:47:30:79:af:4e:b6:16:aa:46:87:82:6b:
         d0:a2:23:ac:1c:61:5b:05:aa:d6:d9:db:99:92:c6:f5:e1:64:
         61:22:fd:a3:4a:57:2b:ee:99:9c:c2:5d:be:11:0a:70:e1:57:
         53:d5:54:77:0b:5e:43:1e:08:d5:95:d0:6f:1b:78:d1:ea:df:
         83:50:17:fe:4c:51:12:24:b5:a5:a4:c2:d0:2c:8f:35:bf:c2:
         8f:fc:0f:36:fa:55:28:ea:18:ee:51:72:b5:1d:be:f1:70:01:
         9c:fb:20:df:64:3c:28:db:65:ff:af:f8:2a:d5:6b:77:96:05:
         b5:d6:b6:8e:e9:1a:9b:6a:a9:4b:a1:28:f3:a4:73:e5:7c:b3:
         41:ca:6e:93:b5:79:9c:0e:c9:43:32:b4:56:7a:e8:99:4e:29:
         34:c0:23:11:d8:46:2d:c3:b7:ed:4c:c0:e7:25:73:11:8c:a7:
         bd:63:4f:d2:15:25:83:64:63:c6:a5:e8:ee:e9:b7:2a:a7:ac:
         39:24:ee:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----