Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
File:                     TXfM16lEFd_GjMyodOlMLowiIC0.mft (raw, json)
Hash identifier:          p+Vz+WSdtIppVEVRqzgg3A+rSczoEqSYXKqGbcwawvs=
Subject key identifier:   C1:E5:D4:FF:19:E6:94:1C:CE:A3:C2:D9:2B:94:D5:4C:26:10:14:07
Authority key identifier: 4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D
Certificate issuer:       /CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d
Certificate serial:       01904867F671E8C5E111ED5B8316E0D4D791
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
Manifest number:          11DA
Signing time:             Mon 24 Jun 2024 04:01:30 +0000
Manifest this update:     Mon 24 Jun 2024 04:01:30 +0000
Manifest next update:     Tue 25 Jun 2024 04:01:30 +0000
Files and hashes:         1: TXfM16lEFd_GjMyodOlMLowiIC0.crl (hash: mSis5iUdcfNNDpgcz4Xo2b9/Q1y4X1wWfAkAEpFuPgI=)
                          2: UcXjH2pUlPyHOSwIRazh3S_JORw.roa (hash: 85W0QUHb0pEugRLBo1Cs6yM0Zs042tXvKvWdTCN5ouI=)
                          3: fiSR26SnWhHRj9J5wnOnqHr2quM.roa (hash: K+FoLJF2DwxQbxdWxVr1Jm/8lLHl+uMnsQCOfPR4usg=)
                          4: rc3TUoCt02PnVEmsA6tHkoHFxas.roa (hash: Caq99/mfUjIoB9wOCE2EbURru+P9a7IL5pjeyoTgBzY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 04:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:67:f6:71:e8:c5:e1:11:ed:5b:83:16:e0:d4:d7:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d
        Validity
            Not Before: Jun 24 04:01:30 2024 GMT
            Not After : Jun 25 04:01:30 2024 GMT
        Subject: CN=c1e5d4ff19e6941ccea3c2d92b94d54c26101407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c7:5f:f8:e8:4a:77:a2:ed:7b:43:14:b6:bd:
                    c6:a2:31:c6:f1:de:07:d7:2d:db:15:d8:a7:3b:09:
                    d1:64:34:ca:19:b7:5f:14:bb:4e:96:ab:08:82:4f:
                    e4:1e:f8:bf:8c:f5:55:b3:09:26:e0:b1:48:bd:97:
                    1b:43:cf:91:12:46:ef:b6:cf:02:5d:0f:c3:03:5d:
                    5c:9e:82:bd:95:a6:37:59:24:21:2d:b9:a2:5c:4a:
                    cc:9b:a2:42:70:2f:f9:e4:94:ec:c3:3e:a2:14:b6:
                    9e:05:69:73:04:b0:86:c9:28:a4:3c:be:e1:27:e8:
                    28:4b:dd:4b:0f:76:84:c0:a2:c2:87:51:f9:83:14:
                    28:17:28:64:90:d3:3f:5d:9b:4f:1c:ee:33:f5:64:
                    83:64:50:03:0e:b3:96:e9:ba:40:45:93:82:2f:43:
                    9e:d1:6a:ff:75:4c:3c:92:e3:da:27:b9:f0:18:2d:
                    50:81:ad:11:b8:91:1c:f6:a3:fe:d5:05:53:8d:f0:
                    2f:f7:3c:3a:19:a9:c4:26:47:d3:20:00:74:89:34:
                    2e:dc:a9:9c:44:18:53:ed:2a:cf:6d:72:ab:87:3d:
                    15:dc:5e:02:13:67:9f:ca:35:3c:a6:24:2b:f0:63:
                    8b:8c:34:06:5e:05:7f:38:75:e9:75:4d:89:b4:46:
                    f7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E5:D4:FF:19:E6:94:1C:CE:A3:C2:D9:2B:94:D5:4C:26:10:14:07
            X509v3 Authority Key Identifier:
                keyid:4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:a5:6e:50:93:c9:a5:0b:70:9d:16:be:d6:03:5e:d8:3a:28:
         5d:b1:1b:00:e0:6d:bf:1d:41:d9:bc:9d:22:84:1c:67:f9:c9:
         c3:db:42:5d:14:aa:77:99:61:89:03:67:3c:41:c4:ff:53:af:
         68:a5:89:00:2e:a4:9d:59:3a:61:07:1b:26:fb:25:b8:18:40:
         8a:2b:72:b3:92:53:65:f7:08:2c:5f:88:0e:82:c9:e4:15:71:
         34:00:21:20:42:89:ba:00:71:65:0a:2a:4d:ce:2f:b3:97:95:
         a9:e6:97:50:07:e4:fa:89:3a:bd:7c:6c:18:a7:07:ae:94:8d:
         be:e3:50:fb:49:b3:63:4f:72:70:87:80:66:9e:c4:29:1f:38:
         b5:63:00:9a:e9:0c:83:53:b3:0f:fe:c5:4f:2b:fa:ec:3a:bd:
         08:8b:2b:62:f6:c6:8e:b6:03:6d:df:45:e3:d5:0f:55:af:a5:
         c1:8c:fd:62:b8:ba:6d:67:b4:5c:3c:da:67:27:0e:27:88:78:
         53:01:36:c5:4d:c2:db:12:7a:47:10:0f:42:60:94:0a:e0:bc:
         a0:cb:44:03:9d:3d:0b:2c:5a:ec:f5:1d:0b:8e:97:6c:ec:bc:
         d6:95:19:a4:37:ba:f4:a2:0f:54:d6:99:61:07:36:e5:a2:eb:
         55:68:51:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----