Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
File:                     E2a5YKbx8EQ58JGG-ez1ManOJkg.mft (raw, json)
Hash identifier:          PCULjj4Ht7lhClvvgUPdlI05ZTnaepmaxZE/HS2FH94=
Subject key identifier:   14:35:29:B7:10:65:52:72:ED:59:45:0B:7F:80:EA:FF:3D:EB:0B:D3
Authority key identifier: 13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
Certificate issuer:       /CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Certificate serial:       018F855AAFD418EA18C53C14E62F148351AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
Manifest number:          118F
Signing time:             Fri 17 May 2024 07:01:03 +0000
Manifest this update:     Fri 17 May 2024 07:01:03 +0000
Manifest next update:     Sat 18 May 2024 07:01:03 +0000
Files and hashes:         1: E2a5YKbx8EQ58JGG-ez1ManOJkg.crl (hash: saJA5GlNowtbzSuyrnYkCtUASfEau076rwRtaBAs8+M=)
                          2: XX2lPV5k0UF5kfU_UhvywdKjHYs.roa (hash: b+p3gj6qXp3PpqYrYa2OqDJkOLaWTuB/AX9DkXwD1Xs=)
                          3: vCcFbyxAVLfi9sJsRIn7_1kkNW8.roa (hash: 7NRO6K/ikj4Ho4trqZj205RqfJ7yBvxwfdrBocOBVws=)
                          4: vNJ-nZ3Xcjj1zn90-VrNADTETds.roa (hash: eZFa2IkCPin8e9194siXzRDQ2Ss7s6tzZ9T+H1j/f2s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 07:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:5a:af:d4:18:ea:18:c5:3c:14:e6:2f:14:83:51:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
        Validity
            Not Before: May 17 07:01:03 2024 GMT
            Not After : May 18 07:01:03 2024 GMT
        Subject: CN=143529b710655272ed59450b7f80eaff3deb0bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3f:64:a0:e4:37:35:c1:24:69:37:29:13:e9:
                    14:b0:2f:23:c2:4d:03:42:c5:63:9b:6d:d2:20:62:
                    ef:25:ce:ee:d9:b5:43:9b:20:df:1f:a0:1f:23:ef:
                    e8:75:f7:0c:6f:9e:e3:5c:5a:bf:04:74:2a:3d:7c:
                    7c:51:95:8e:a0:bb:49:90:2d:e4:cb:4c:47:89:6b:
                    6d:3e:82:b1:d8:6b:e2:b7:5c:5f:f2:88:5b:18:1d:
                    34:a3:32:0b:4a:38:40:bb:25:b4:91:0d:71:1c:fc:
                    d0:c1:e8:d4:84:16:1f:9f:2f:f8:58:50:33:9f:38:
                    ea:73:a4:5b:90:e1:c0:77:63:7c:61:e8:e5:42:29:
                    fd:9c:f0:dc:95:21:89:52:76:87:f1:d8:35:eb:1f:
                    dc:eb:e6:f1:39:6a:ea:ed:e9:0c:74:01:91:dc:d6:
                    27:32:39:b3:a0:ee:50:56:5e:59:a3:87:80:28:b9:
                    fd:b5:13:f6:b3:90:73:b1:8f:28:a4:4e:56:b6:54:
                    73:5f:ec:99:ce:21:8b:4d:d6:29:c9:64:d0:d1:2d:
                    fb:e8:55:e1:2b:14:7b:71:59:ba:fe:33:5e:d1:0e:
                    4c:e2:e4:fe:6f:6c:2c:94:74:aa:cb:58:3d:78:28:
                    f9:9d:7e:94:19:7c:93:42:3f:4d:ef:d7:55:e9:99:
                    34:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:35:29:B7:10:65:52:72:ED:59:45:0B:7F:80:EA:FF:3D:EB:0B:D3
            X509v3 Authority Key Identifier:
                keyid:13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:05:24:82:9a:14:b2:55:e6:dd:11:7b:b4:fa:28:22:94:8f:
         fe:cb:2c:18:fa:95:9b:ab:88:e6:da:cd:30:f7:2a:26:11:b2:
         8d:59:38:78:7f:74:44:c4:0e:cb:e6:25:c9:6e:e5:c5:3b:16:
         bf:c9:c2:29:0b:c3:58:40:b0:8a:4e:67:4c:6c:53:73:b9:ec:
         61:bc:0c:f8:9c:e9:0e:0b:e6:fc:e9:51:54:49:ff:48:75:a0:
         ba:e7:d5:0f:83:4f:59:fa:a6:ba:1f:2a:cc:28:d6:f7:cd:d6:
         34:41:73:59:34:e7:35:5c:af:3c:ea:47:2e:f1:5d:e9:94:69:
         74:c2:45:10:b2:4f:77:d2:18:b9:a7:1d:d2:f7:c4:37:11:7d:
         90:c6:69:7c:80:06:ef:2f:f6:3b:ca:80:ec:26:ee:53:f7:e4:
         39:ec:56:3a:65:53:88:a7:06:88:9f:02:d0:56:de:c6:ff:b8:
         0f:7f:7a:20:66:31:89:99:9e:ad:6f:47:95:98:98:e6:c2:33:
         2c:88:a6:41:f3:a3:61:6a:ed:5d:12:e0:01:6b:15:ca:c2:d4:
         9d:88:87:50:34:5c:14:b4:ba:a5:56:57:5f:7a:11:d7:80:79:
         9f:c2:5f:fc:e9:ce:74:2d:9f:e4:99:0b:fd:1c:eb:55:10:e7:
         07:e5:bf:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----