Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft
File:                     n7SouTr56pzxiqyk5z8RbsJus1c.mft (raw, json)
Hash identifier:          UAf5LvZG8xiboiooEI7ANymVbS615fcKAYR67qB1kfQ=
Subject key identifier:   B6:EF:42:B7:B4:90:75:11:69:4D:69:08:9B:93:E7:CC:0C:F9:B0:C3
Authority key identifier: 9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57
Certificate issuer:       /CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357
Certificate serial:       01901CA16EBCD16DAFF4F1AF1E5C575A0FDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft
Manifest number:          11CA
Signing time:             Sat 15 Jun 2024 16:00:59 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:59 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:59 +0000
Files and hashes:         1: RlLhypRUSjsj3dksPWZmZVQIiO0.roa (hash: oPJw+xRnRfadhcEqqZjxBP6EyZbCEpYzh4oVbxUQFVU=)
                          2: k-o6HY76KkWUPQVkYuILk1XIAZ8.roa (hash: uY+dCx6fXStabtM3zO1/3eEjXZ8CDjG7a2rNDBqiOIY=)
                          3: n7SouTr56pzxiqyk5z8RbsJus1c.crl (hash: H08buSD+oXqV5k9szmRMb6g2ZDU+3e+NS+9tti+26vw=)
                          4: pP6YXx7XHpYCgb13HStJccZrGGo.roa (hash: KZRozCqhNOjsBDR2sdVDLDc4V0wEdZQpb3UTIJgs9Cs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:6e:bc:d1:6d:af:f4:f1:af:1e:5c:57:5a:0f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357
        Validity
            Not Before: Jun 15 16:00:59 2024 GMT
            Not After : Jun 16 16:00:59 2024 GMT
        Subject: CN=b6ef42b7b4907511694d69089b93e7cc0cf9b0c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0c:f9:55:82:1b:65:46:25:37:b3:5f:71:8d:
                    22:02:bf:62:fa:94:d6:e8:e2:6a:69:75:8d:03:20:
                    9f:4a:b9:52:a2:a8:8e:3f:e7:3a:57:bc:46:66:9f:
                    7e:a2:dd:c2:de:08:1f:da:11:60:9f:a4:c8:18:dc:
                    6d:40:7c:5f:ee:c4:3e:12:02:8f:40:a2:87:70:a0:
                    c0:42:2c:34:23:67:6b:a7:44:2c:ab:9b:7a:4d:ff:
                    9f:4d:ed:5f:73:9e:6f:0c:91:b9:6b:da:3d:13:4b:
                    2d:42:6f:32:73:0d:95:e3:5d:69:fe:21:06:14:66:
                    33:5b:28:31:b0:ae:be:1a:37:f5:bd:db:c2:8d:b6:
                    eb:62:b7:0c:7d:1c:41:f2:dc:3a:6c:67:e9:19:15:
                    e9:23:05:8f:eb:69:57:7a:13:2a:b1:40:0e:33:9c:
                    46:f6:29:ae:20:5f:ec:cf:6f:c7:4b:bc:4e:fd:40:
                    6a:30:fe:d5:ef:3f:82:be:39:90:2b:b7:f3:42:24:
                    12:77:c5:41:6b:80:99:2d:a1:9e:bd:4e:a6:d7:10:
                    22:a6:ee:31:34:a2:1b:95:c9:51:b3:c3:b1:21:01:
                    b0:68:4e:70:1d:1a:8e:15:25:b8:d9:72:ce:fd:59:
                    13:d8:cb:64:1c:13:f9:b2:e2:73:b8:f4:58:c7:a4:
                    eb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EF:42:B7:B4:90:75:11:69:4D:69:08:9B:93:E7:CC:0C:F9:B0:C3
            X509v3 Authority Key Identifier:
                keyid:9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:ac:7c:63:38:34:19:f1:23:c7:f2:97:92:75:96:e2:1b:75:
         ba:25:5d:95:06:dc:82:da:1d:4e:59:3d:85:48:46:0f:16:4f:
         c8:1d:da:03:47:3b:37:a7:cc:d7:39:81:97:49:60:78:18:0c:
         24:cf:56:d2:fb:9c:8b:e0:dd:1e:a1:39:38:77:0b:a3:c3:6b:
         cb:60:62:48:b0:f3:d9:6a:69:a5:d7:5b:b6:00:e1:3e:05:1b:
         09:73:aa:e9:62:13:a6:63:17:23:f7:8c:10:c9:0a:06:3e:93:
         84:5f:0e:90:c1:20:6f:f5:09:c6:d0:74:cf:8e:f2:1b:36:75:
         c3:cf:b6:57:02:1a:e0:85:c6:77:b9:a4:7c:d7:7b:cf:2f:bf:
         a7:b5:3f:1c:be:59:6b:cb:45:d7:e3:91:ad:0d:9f:23:dd:ce:
         42:e4:8a:87:e0:53:1f:ea:6f:b7:9c:20:d1:28:3b:f4:d8:92:
         75:98:6d:50:af:1d:94:1b:b4:4e:33:19:ab:14:d0:99:78:aa:
         9a:1b:d2:33:67:36:4a:1c:10:9a:f9:45:83:0f:78:3d:f3:fa:
         cd:45:a1:78:82:75:4b:cc:46:6a:39:4c:20:f3:cf:54:5f:ef:
         82:e2:3f:7f:8d:6f:fb:4e:dd:9b:a7:43:bb:4a:0c:bf:2c:d7:
         b3:3f:f5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----