Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
File:                     fiax73QQByzpboLXWBvkNuY5p8Q.mft (raw, json)
Hash identifier:          8PGK+kmZHY1c2SEvyFdQstgP3AHr9BmT9xvhcMXKUQ8=
Subject key identifier:   BA:24:04:E5:BF:99:4B:EB:F7:26:3D:44:82:C6:F0:F3:F2:1C:F5:34
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Certificate issuer:       /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial:       01901DED81E96871B5E47FEF4AF388322C17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
Manifest number:          1194
Signing time:             Sat 15 Jun 2024 22:03:42 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:42 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:42 +0000
Files and hashes:         1: 6kNlBi9h1ZHmPoii53_kXa1mrAw.roa (hash: rHTV0hL2/EzU/sVJfxN+lj8K5FQtZElJVGqS8Kv0uds=)
                          2: Gt7TjYSx-jE_jLGTaWpaheRm-1A.roa (hash: YEHwIwBQWTQA4G/Edte52ncLlFJ3fvpgOsnrL9w+qu8=)
                          3: fiax73QQByzpboLXWBvkNuY5p8Q.crl (hash: z0to6bc8edmUH1TXSSCmjKJAKmi7FiaobAnmMiVGW/c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:81:e9:68:71:b5:e4:7f:ef:4a:f3:88:32:2c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
        Validity
            Not Before: Jun 15 22:03:42 2024 GMT
            Not After : Jun 16 22:03:42 2024 GMT
        Subject: CN=ba2404e5bf994bebf7263d4482c6f0f3f21cf534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:54:3a:0a:cb:56:64:a7:98:eb:04:9b:34:94:
                    b9:83:11:0d:45:88:94:14:39:b5:4d:aa:7e:b8:ac:
                    37:fd:3c:a7:9f:89:39:45:c9:9b:5c:d1:49:52:2d:
                    7f:ca:70:be:d9:f9:99:12:ff:8e:5c:14:43:c5:04:
                    16:7d:f5:9a:ef:e4:5a:94:31:56:b9:c6:2e:e8:98:
                    6f:43:37:b6:a1:28:36:6b:07:68:9d:4a:20:33:a2:
                    45:f1:81:6c:1e:1e:6a:73:3f:21:93:69:ed:b5:a0:
                    36:f9:5b:7c:8d:06:54:24:a0:76:17:3c:3e:15:c8:
                    31:98:ac:88:d0:4c:97:96:61:50:71:58:8a:e2:35:
                    1b:3b:f3:1f:c1:e1:2f:ec:9f:10:35:fb:a5:82:8c:
                    4b:05:f6:dc:60:04:2e:21:48:2f:e6:8d:b9:39:c9:
                    62:b3:79:1b:e0:19:a0:09:25:76:19:8b:cd:a8:4e:
                    00:10:56:4a:34:94:3e:f8:e8:b8:69:0a:e9:44:5f:
                    1d:e1:77:9b:d7:8a:36:b8:3b:39:28:08:b9:f5:c5:
                    e0:a2:59:18:e0:c2:70:49:f4:e0:d6:f4:fc:b2:e8:
                    83:86:37:3d:c8:43:88:13:59:3b:c6:b1:f4:a5:3c:
                    7e:92:dd:bd:a1:67:81:44:41:18:d3:72:2a:ec:7b:
                    98:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:24:04:E5:BF:99:4B:EB:F7:26:3D:44:82:C6:F0:F3:F2:1C:F5:34
            X509v3 Authority Key Identifier:
                keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:04:2d:8b:77:5c:46:e7:3f:68:d9:eb:e4:81:42:0b:26:aa:
         3f:70:ff:24:ea:6d:32:36:35:8b:b5:c2:85:cd:46:b3:e0:32:
         29:3d:2e:c1:ee:43:1a:a2:6e:b3:b4:16:ee:00:14:cd:cf:36:
         3b:19:46:3e:6e:2a:f4:92:19:d9:58:86:89:e8:46:de:fa:c4:
         14:0b:f5:4e:84:1d:aa:ff:ef:c3:db:44:e6:25:99:c8:ef:bf:
         24:ac:0b:c5:32:8a:78:fa:2f:71:03:01:0c:8f:3c:3b:bf:07:
         50:4c:59:c7:c0:28:e7:b3:af:ab:0c:c6:a1:c0:f6:25:be:00:
         fd:c6:a9:3c:6a:16:0c:88:d2:1d:20:31:f5:ab:91:38:32:6a:
         ab:2a:24:a2:ba:63:0d:83:87:1f:d0:0c:ee:e7:38:82:b0:4c:
         55:e8:ca:35:a4:1f:62:5a:20:7f:96:5d:92:fe:09:c7:0d:1d:
         aa:2e:ed:2d:b6:df:b8:9a:8d:78:a8:80:65:4e:78:21:fc:0e:
         9f:d0:b1:97:23:fc:ad:63:51:4b:11:c5:fa:86:8b:b4:61:4a:
         a5:06:d0:aa:28:6d:52:b2:08:7d:64:64:9d:48:5c:b2:30:7a:
         61:42:4d:56:3b:66:28:29:aa:73:15:72:c2:6b:37:56:c3:53:
         a7:fc:65:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----