Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
File:                     1-hskeN_g8zonixP0LdMZYB1jeKg.mft (raw, json)
Hash identifier:          wWbc4BfEt0HFrZ0BnO7jxcNLHZYEPePkwqz0kgWdJWI=
Subject key identifier:   7A:27:2A:AE:DA:31:88:36:27:79:0C:E4:06:2E:B9:96:45:46:7E:17
Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
Certificate issuer:       /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Certificate serial:       01901DEDA01EA2C49A53FCC64EE217B81D3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
Manifest number:          02ED
Signing time:             Sat 15 Jun 2024 22:03:50 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:50 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:50 +0000
Files and hashes:         1: 1-hskeN_g8zonixP0LdMZYB1jeKg.crl (hash: I0mbw/MfK/q2fGt0KxUUk79G4hTwrgy+43ELy7RHKYA=)
                          2: oqABzLnfbsDsIn5kWplXBMzY43Q.roa (hash: 9f8YlT5OwrLMMipcAAqwOnsbNvAc7ctfNIT3GMCo+9I=)
                          3: uy18rfNLyuQiQTCNDG2p5HtgVvM.roa (hash: /PktlFARYSrfZjA3NuU81XhcPjb/Y7Pow5NVwBdwcdY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:a0:1e:a2:c4:9a:53:fc:c6:4e:e2:17:b8:1d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
        Validity
            Not Before: Jun 15 22:03:50 2024 GMT
            Not After : Jun 16 22:03:50 2024 GMT
        Subject: CN=7a272aaeda31883627790ce4062eb99645467e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:f5:b9:63:a3:45:3c:b8:31:36:b5:c1:f5:
                    96:98:74:c2:c8:3d:90:ac:1f:3f:14:c2:a3:c0:a9:
                    95:89:65:43:e0:2c:6e:53:09:f5:c9:8f:c2:08:c6:
                    d6:07:c4:1c:0b:77:27:ef:6e:22:50:2a:5d:0e:d0:
                    0d:40:ad:41:ea:60:fc:b1:85:09:16:c6:6f:97:29:
                    58:2b:35:5a:06:89:c3:04:2f:35:01:46:54:62:8f:
                    c4:57:a5:7f:c5:d2:d9:ec:3b:2e:aa:c1:f2:4e:16:
                    54:95:5c:17:b8:b7:59:16:a0:7c:0d:e8:ce:71:2f:
                    66:c1:9c:ac:28:3a:72:9b:29:7b:2a:a5:56:46:1c:
                    d6:7e:e9:8f:13:ff:90:7d:5a:43:ea:dd:8d:3a:d8:
                    d6:ff:a6:cb:ac:c9:21:0b:99:4f:df:d0:61:ee:e6:
                    49:b2:58:37:10:b4:99:45:f9:84:b8:fa:3e:4c:89:
                    81:4e:fe:73:1d:33:e8:10:fb:20:7d:78:2a:7c:6a:
                    b7:bb:76:8a:18:62:b0:84:68:cf:da:ee:3c:df:b6:
                    90:c1:29:da:72:e6:4a:5b:c3:08:08:eb:67:e8:de:
                    b7:f1:70:ae:95:57:33:a9:99:57:bf:64:56:3d:f8:
                    ed:a6:3b:26:4c:72:59:4d:b3:6b:92:06:c6:85:80:
                    2f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:27:2A:AE:DA:31:88:36:27:79:0C:E4:06:2E:B9:96:45:46:7E:17
            X509v3 Authority Key Identifier:
                keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a1:26:49:b3:54:07:37:e1:14:da:7f:1b:65:0f:18:2f:ba:
         1d:1a:3b:a0:fb:a9:29:b7:9c:14:68:6f:b4:e9:54:79:51:2d:
         1f:e6:c0:e4:8a:e6:48:e5:10:eb:9f:1d:81:b7:52:29:b8:1e:
         86:40:ee:57:59:ea:06:d7:ab:b5:00:87:a1:a7:4e:0d:99:cf:
         25:2f:57:94:82:19:0c:71:f6:14:eb:c5:2f:f0:a0:70:85:60:
         cb:4f:63:73:71:69:46:08:0a:fc:eb:81:5c:7c:03:71:05:3d:
         8f:35:03:28:e1:6b:84:d2:cc:f6:ee:d9:c7:21:ad:5e:b3:08:
         57:cc:ef:62:6c:71:86:0f:f6:a9:eb:fc:70:07:65:a7:c8:93:
         8c:4e:fa:f2:25:80:c2:c6:9f:30:ae:20:62:80:0a:99:91:59:
         a8:2d:7d:4f:87:f9:d1:6b:3a:46:0e:34:fd:15:54:3c:07:a4:
         2f:a8:2e:6b:af:ad:8a:61:c0:2b:8c:34:a9:ad:e8:70:8b:ec:
         33:e9:4b:8c:1f:eb:76:74:97:cb:ba:2b:6b:06:b7:2c:46:aa:
         59:ff:d2:47:4d:21:54:37:c2:93:62:b0:3d:44:a4:22:56:0f:
         87:e1:8f:54:da:18:90:7e:f3:04:83:4a:5d:d2:bf:ad:b1:5d:
         75:0d:58:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----