Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
File:                     D-v7_W-TfFrjnj446KuDhBB0IaY.mft (raw, json)
Hash identifier:          ReQ69eA6EkFJt1jXWy6rhDGTnPkYMXBTvk7zZsgk9qE=
Subject key identifier:   FD:43:62:71:9E:2A:08:94:46:A9:D0:EB:58:7B:AC:56:DB:30:83:10
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Certificate issuer:       /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial:       01901C6AA21E0DE154CF95ECC999B44A6451
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
Manifest number:          08E2
Signing time:             Sat 15 Jun 2024 15:01:08 +0000
Manifest this update:     Sat 15 Jun 2024 15:01:08 +0000
Manifest next update:     Sun 16 Jun 2024 15:01:08 +0000
Files and hashes:         1: 9FFG-z_chFllZJv8W8d0PlG3jX8.roa (hash: 93szWSEGfRYcu3voC+gA9HObGs2BeQhDMMETcRWcU/8=)
                          2: CvuWhByZzel6kqP5_WOffWAtOnU.roa (hash: LF2loxs1V5XaIP9iMCUjbEKKnsI70HCk95S/k9Ab8l8=)
                          3: D-v7_W-TfFrjnj446KuDhBB0IaY.crl (hash: IvSx7jFXbpLTfZfRxb+pIaezlgh6TRG5Y51BrjQg1zc=)
                          4: N_SZcKDnEW5-qgh6u5KcNUEsOfY.roa (hash: EEsQQQL6ZHR8MBng2IYwxzqyVffnMUgFZsMoz9Qm/eU=)
                          5: bQ4yuI7vtU_cGKfCBbHm04HjUtE.roa (hash: dx1yuo8puE3X8jciCd8HS1CIwakxb0t8G4XviWDqCOQ=)
                          6: goNNlWpp0GAHEhFcaNcAq01c6uQ.roa (hash: 44jDG/bTSF0PVFBRtyba3lvRLLtNrQ0m67TbRxyt39A=)
                          7: ljpY5ujByJ0zT5XfwKoKWJl-UrU.roa (hash: TTtTv4KiuU9QNZ1icGbYNnxZrUMvfNsO4dY2FpYJxlg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:a2:1e:0d:e1:54:cf:95:ec:c9:99:b4:4a:64:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
        Validity
            Not Before: Jun 15 15:01:08 2024 GMT
            Not After : Jun 16 15:01:08 2024 GMT
        Subject: CN=fd4362719e2a089446a9d0eb587bac56db308310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3b:a8:d1:a3:74:c4:0e:5f:c2:76:33:2d:20:
                    44:cd:7a:cc:b8:6c:bb:24:94:41:35:ea:04:b6:78:
                    e6:e7:46:11:1e:01:8e:6b:a2:9a:3b:d2:af:14:a4:
                    c0:52:5c:84:fe:7c:40:6e:00:4d:40:e7:90:ee:c6:
                    f2:60:83:0d:e6:68:1e:e8:bc:e7:6d:8d:dd:73:80:
                    ba:b0:29:ef:cf:67:8b:7f:21:ea:0c:78:60:b2:08:
                    60:8d:eb:e3:c7:81:fc:16:c4:11:c7:c6:99:3c:1e:
                    22:2b:94:e7:53:f6:d1:f2:29:64:91:e9:48:ea:49:
                    b1:7a:f3:6f:9b:5e:e5:d0:bb:ad:c6:24:e3:6c:9a:
                    8c:f1:67:20:2d:4b:42:9b:98:6b:b3:f6:b4:7b:8e:
                    51:08:7e:99:39:19:0b:a9:b7:cd:b7:71:e9:d7:5b:
                    51:e5:54:06:93:5b:1e:3e:29:14:60:81:8c:ec:78:
                    c0:54:22:d6:84:65:2e:19:29:6a:2e:95:64:53:ab:
                    b2:0c:b3:33:49:39:a7:63:cc:a5:b2:b9:52:de:7f:
                    77:07:2b:b4:ae:c6:e5:c0:3c:e8:2e:49:67:c0:9f:
                    15:71:f7:c1:73:44:44:ad:b3:c5:59:8e:06:8c:4d:
                    6d:16:d3:17:7e:01:77:8a:37:5d:3a:ee:09:6a:25:
                    c8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:43:62:71:9E:2A:08:94:46:A9:D0:EB:58:7B:AC:56:DB:30:83:10
            X509v3 Authority Key Identifier:
                keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:15:33:5a:bc:ae:75:4b:b2:30:53:7f:84:0e:80:dd:c3:e2:
         9e:06:48:aa:75:b6:bd:bd:ae:5c:9a:15:d4:a4:95:fd:7c:38:
         8a:23:12:cd:ca:52:a1:20:c9:59:06:6d:c0:5f:e0:bc:9c:05:
         02:3d:e6:2f:af:b5:2a:13:b0:99:65:de:75:10:54:5d:67:4a:
         09:f9:5a:fb:f9:72:39:ef:60:52:7a:44:55:82:5d:bb:7c:a8:
         df:a2:fc:22:b3:52:49:e7:a4:a8:57:40:31:fa:c8:3b:19:e5:
         35:6b:0b:44:b3:2e:40:5d:d3:2e:da:2a:a1:20:4b:f8:f7:ae:
         84:30:d8:c8:6c:a0:57:65:a2:bc:b0:b0:1b:fd:8d:a2:1a:1f:
         76:98:ba:f8:5f:b9:61:a5:8c:43:fd:73:66:b4:4b:09:b2:d1:
         c1:83:5a:66:28:17:91:58:01:ac:c3:47:ea:05:f6:3e:33:a2:
         0d:c8:81:76:a9:10:c6:af:cb:c1:bc:4b:39:ea:2a:45:e5:f0:
         a7:5f:76:3b:a6:e5:a2:87:5f:8e:72:17:37:f1:aa:dd:56:63:
         64:bd:46:13:03:86:e4:db:ac:85:43:7e:97:9a:98:b5:41:11:
         3d:32:c4:98:28:b5:18:77:f7:08:43:0b:e3:53:ae:29:89:97:
         83:cd:08:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----