Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
File:                     p2q9qQNG0MrSXcpvdFC8z40I53E.mft (raw, json)
Hash identifier:          /Byjo3I9N4+RkXn+O32Yp7W12nmi9zMPwjSPTZm8ZlU=
Subject key identifier:   26:06:EB:F0:F6:7D:EF:C3:4C:B5:B8:43:B9:6E:16:40:58:26:D5:B8
Authority key identifier: A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
Certificate issuer:       /CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Certificate serial:       018FB8DA296F19135F45A56177242B2E6406
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
Manifest number:          0873
Signing time:             Mon 27 May 2024 07:00:56 +0000
Manifest this update:     Mon 27 May 2024 07:00:56 +0000
Manifest next update:     Tue 28 May 2024 07:00:56 +0000
Files and hashes:         1: 3cQZPfHrEF0ghIG24gBDtcjaezw.roa (hash: yBLIW3nF7xejMtDR40pyJu77Hq4IB55mP7q4vrswIQ8=)
                          2: p2q9qQNG0MrSXcpvdFC8z40I53E.crl (hash: zjil07GUFnhzvXGvf2t8EQQc75obezWn52ysllxSiK8=)
                          3: rYdRq5RTzZifkGgAtto1CocgyRE.roa (hash: KnfDnVyY4opx9ZRFCOe1u8iEEM+apklBuv2YWbj4GZY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 May 2024 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b8:da:29:6f:19:13:5f:45:a5:61:77:24:2b:2e:64:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a76abda90346d0cad25dca6f7450bccf8d08e771
        Validity
            Not Before: May 27 07:00:56 2024 GMT
            Not After : May 28 07:00:56 2024 GMT
        Subject: CN=2606ebf0f67defc34cb5b843b96e16405826d5b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:bb:63:70:32:69:a7:f8:4a:b9:c9:ad:c4:d8:
                    a4:12:8a:5f:fa:dd:cb:0a:30:35:11:6a:61:d2:32:
                    b6:ef:6f:65:53:1f:e1:31:8a:c3:60:9e:8c:34:9e:
                    d8:7b:15:28:1d:34:c4:f6:3e:6d:03:df:e1:a7:ec:
                    d0:c5:95:20:da:20:8e:af:70:ce:56:19:9d:4d:b4:
                    2d:94:8e:fa:0c:cd:0a:2b:05:0a:b9:b9:b2:b3:74:
                    df:94:4d:8a:73:19:bf:88:0e:3f:00:6e:4f:89:97:
                    26:e4:ab:df:bd:0c:5e:3e:e5:de:96:39:d4:c2:33:
                    d9:25:75:3d:10:9c:22:ac:60:7f:ed:5f:ac:7f:f3:
                    4d:06:bb:82:2c:d4:ce:6d:49:2e:02:54:cc:27:ad:
                    28:f6:38:5e:3d:28:05:7d:3f:3e:43:31:68:72:2a:
                    88:42:34:2e:2b:cc:57:25:1d:20:84:cc:fc:6e:c0:
                    72:ea:62:4d:d6:53:c5:a8:30:49:29:32:b9:21:a7:
                    16:b2:ec:d0:8e:a7:c9:0e:c2:49:83:ff:d0:96:fe:
                    5b:4e:c5:92:69:65:cc:31:08:c7:45:32:20:d8:fe:
                    2d:7f:de:f7:9b:e6:f5:d9:ab:c9:4a:44:0f:56:cd:
                    30:9c:fd:1b:cd:66:40:a8:14:cb:99:e2:95:c2:78:
                    d8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:06:EB:F0:F6:7D:EF:C3:4C:B5:B8:43:B9:6E:16:40:58:26:D5:B8
            X509v3 Authority Key Identifier:
                keyid:A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:31:8f:62:c2:66:92:73:73:ce:d6:9c:62:10:3a:55:29:3d:
         d6:de:0d:ff:28:bc:65:2b:0a:23:4b:0d:9a:ed:34:ed:b0:81:
         9e:d3:82:4c:96:75:66:82:63:77:04:33:64:e4:34:85:27:e2:
         c1:6b:b4:42:d9:e0:3f:22:45:6c:8d:1a:17:b6:cc:15:ff:41:
         ca:ff:a9:c6:93:23:b4:9c:59:60:63:89:0c:46:52:38:ce:a1:
         47:5e:86:a8:74:3b:27:6a:ff:31:7d:0a:cb:73:e7:e7:9d:78:
         17:03:5b:e3:04:83:1f:fe:0f:f8:a7:e4:71:3d:0c:53:ce:59:
         e7:6a:16:fd:ea:2a:9f:24:7c:ed:2a:de:0c:44:31:dd:c8:d4:
         ed:0d:42:b3:ce:54:26:cd:2c:62:d3:4a:4b:6f:bf:0d:5d:c0:
         e7:21:1d:ef:9f:61:1e:89:75:13:82:0c:20:b3:3c:7b:bf:d8:
         0a:50:64:9e:22:94:c3:4f:c8:8f:3b:40:ad:32:cf:8f:eb:c9:
         5e:62:cd:91:5b:8c:47:14:78:96:98:f6:29:41:31:e7:8e:97:
         a5:6b:03:4b:da:ac:67:56:ec:e5:97:4c:ef:9d:50:1a:c3:34:
         3a:48:76:e0:27:28:d9:71:a5:95:4b:64:eb:0f:0e:97:c5:5d:
         dc:d7:39:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----