Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
File:                     zGUyZJpq70cUhBucj1RmDYibBik.mft (raw, json)
Hash identifier:          bkHtrUC9KlZS8MD2Bv31vI57UrfmO2bqrZiwFVPTe5E=
Subject key identifier:   FC:9E:21:07:B8:19:C8:F4:1F:0B:8C:DE:43:C6:F5:B4:54:F0:BA:B5
Authority key identifier: CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
Certificate issuer:       /CN=cc6532649a6aef4714841b9c8f54660d889b0629
Certificate serial:       018F8C6F355D8782582731389CAF59ADD281
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
Manifest number:          0728
Signing time:             Sat 18 May 2024 16:00:49 +0000
Manifest this update:     Sat 18 May 2024 16:00:49 +0000
Manifest next update:     Sun 19 May 2024 16:00:49 +0000
Files and hashes:         1: 8DYb5ImMvNLSbyaBmd6CELL0iao.roa (hash: P3lJT6NAio9susCOwEr+V7hxwLZObBrwDWkYT5EGi44=)
                          2: uCr3wsSV16niwIIIeWHNsUKb9nk.roa (hash: gNT5KD7dUwXhuvbp+i1N7ysjJiIfUMghIEA3N1JG3Mg=)
                          3: zGUyZJpq70cUhBucj1RmDYibBik.crl (hash: wS/gNbdmUGRSAnvPFZPd8+J45EeRD2tdJk2319Wovi8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8c:6f:35:5d:87:82:58:27:31:38:9c:af:59:ad:d2:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc6532649a6aef4714841b9c8f54660d889b0629
        Validity
            Not Before: May 18 16:00:49 2024 GMT
            Not After : May 19 16:00:49 2024 GMT
        Subject: CN=fc9e2107b819c8f41f0b8cde43c6f5b454f0bab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:11:7d:6b:59:f7:2e:cd:22:d0:64:a8:6b:
                    24:5e:43:a1:42:ce:68:09:8d:65:9a:3e:8a:8a:e4:
                    a1:32:1d:f9:89:ed:89:2b:cf:a6:2a:c9:3d:95:64:
                    ae:2a:23:fd:8f:09:98:60:39:26:d3:93:c4:d2:20:
                    86:ac:3d:de:bb:4f:22:a1:42:67:f4:8c:69:c4:7f:
                    0c:c9:4d:ea:07:df:5b:55:c5:dd:05:c1:98:49:b8:
                    32:be:13:92:2c:48:0e:26:20:69:d8:40:f4:c5:11:
                    fd:ce:4d:04:00:40:9b:9c:9f:5a:a5:92:35:fa:bc:
                    15:70:4e:51:3a:40:92:69:f5:04:bd:c1:4a:5b:6d:
                    ed:15:17:72:21:52:5d:4c:c9:e4:bb:46:ab:a0:7a:
                    d9:2a:f2:02:84:02:e3:58:15:a9:5d:2b:48:12:03:
                    71:c1:17:d4:72:68:e4:4a:6f:76:f2:7e:33:57:1e:
                    bd:16:9c:a4:ae:5a:db:0b:77:6a:b1:1b:83:8f:fd:
                    c1:ad:ef:af:bf:b9:16:49:ee:18:42:78:71:cd:ad:
                    dc:c6:c8:fc:50:1a:38:dc:d0:ea:26:31:ec:63:b2:
                    b3:06:91:f7:3d:dc:fd:61:68:dc:e8:8b:c6:b0:6d:
                    d7:a6:fd:b8:39:04:7f:2e:c3:e2:bb:1a:1f:d4:45:
                    1a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9E:21:07:B8:19:C8:F4:1F:0B:8C:DE:43:C6:F5:B4:54:F0:BA:B5
            X509v3 Authority Key Identifier:
                keyid:CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:bd:0f:23:4b:55:2a:14:a1:df:58:87:a4:af:e3:6d:ac:e0:
         09:a5:63:c0:41:c9:b6:21:7f:aa:12:54:0b:1b:b7:20:40:7c:
         2a:b2:6b:f7:ef:e9:a7:0d:df:bc:10:de:d0:7f:85:d4:57:e6:
         4a:3d:84:02:b5:15:37:09:1e:f8:68:47:b3:61:be:27:0f:49:
         c7:64:90:cc:83:c6:4a:98:78:07:a7:c0:c1:79:33:f6:b6:8d:
         44:f3:aa:e2:9b:21:12:84:76:c3:92:d8:18:f5:df:f5:65:a8:
         37:a3:24:40:3d:d6:9f:f0:5d:3c:d5:82:31:2f:bc:80:b1:12:
         8e:43:dc:d4:1a:48:bd:46:18:3d:5b:cb:9f:fc:c6:b1:8b:69:
         b3:96:32:4e:b2:40:f4:17:96:25:f7:11:f5:ec:04:eb:86:9c:
         c1:4f:c0:48:ff:72:c4:13:9d:ab:a8:b0:ed:6a:91:f4:4a:34:
         08:96:0b:45:6a:8a:83:8b:85:6f:a4:d2:b5:f9:af:39:76:c9:
         9c:ff:89:d5:94:44:1d:45:64:82:b7:4e:83:9f:e9:4c:02:1b:
         63:8c:e3:e6:a3:29:22:21:de:89:c4:19:cd:38:da:48:b7:8d:
         1c:59:62:58:43:78:a5:4d:4e:f7:ed:d9:40:59:cb:0a:25:02:
         58:a8:18:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----