Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
File:                     20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft (raw, json)
Hash identifier:          gH6xw2LwwjpA5kTZhoAJFfAYpozK8QvDtPNLOKwxxC4=
Subject key identifier:   73:8D:B8:22:AC:5A:41:A7:A5:41:22:DB:86:8F:8B:0F:26:67:2B:4E
Authority key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
Certificate issuer:       /CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Certificate serial:       01901CA19A86A22460625D874FA95C417269
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
Manifest number:          0D7A
Signing time:             Sat 15 Jun 2024 16:01:11 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:11 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:11 +0000
Files and hashes:         1: 14atqcjUczNDfqiMMNb5K6e4JfU.roa (hash: Nhp7SsLN1rHANajenOE75lfl0VCi9yRJVdmeRXyo420=)
                          2: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl (hash: FmizM5mh0pSu0flwBfYH8wY17KfT4ykv4Vq00myTC7Q=)
                          3: YAV1PaTamXh1PE_2bXOK63aVD-Q.roa (hash: 6uy84JuA6cq0A9tbw3vW5dnkj2REtLPqFVI4WTMtPz0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:9a:86:a2:24:60:62:5d:87:4f:a9:5c:41:72:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
        Validity
            Not Before: Jun 15 16:01:11 2024 GMT
            Not After : Jun 16 16:01:11 2024 GMT
        Subject: CN=738db822ac5a41a7a54122db868f8b0f26672b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:23:cd:8b:cb:9a:c0:ab:94:f6:17:57:70:40:
                    eb:0a:ac:a2:38:5f:90:53:13:45:c6:1a:2e:a0:e4:
                    35:7d:f0:33:30:2f:8d:1b:1d:ca:f4:f3:ac:11:7e:
                    6a:6e:33:76:81:05:aa:59:7b:32:26:a6:67:79:01:
                    eb:3c:be:cf:e6:aa:d7:2a:d9:3a:99:a0:8a:86:30:
                    83:09:2e:f0:c2:33:44:3b:30:57:58:c4:1a:db:3a:
                    c0:b8:01:47:db:9e:c6:88:d6:ee:a3:98:18:cf:d9:
                    e0:7a:d9:c4:bd:ae:c9:12:81:ce:13:3b:df:e7:70:
                    9a:18:e7:d8:e5:75:7b:61:2d:7d:78:d1:55:4d:12:
                    69:f1:1a:5a:fc:75:7c:cf:f6:d3:09:4c:1c:ef:2f:
                    60:d1:21:8b:a6:f6:29:e7:b5:40:30:ab:9e:fb:a8:
                    b9:f6:58:fc:37:be:fb:45:66:70:9d:ac:ab:1c:1f:
                    56:05:78:40:e8:8b:05:90:28:c9:01:3b:08:e8:a1:
                    f3:93:6f:8f:d6:eb:00:d4:a2:9e:45:42:70:dc:45:
                    68:87:79:1e:84:a3:8a:1a:1a:35:0c:f3:ed:2d:06:
                    c5:3f:72:f1:07:d9:bf:52:49:97:92:ec:59:95:0c:
                    af:b5:22:d1:5a:68:9c:04:44:4a:90:7d:f0:07:f6:
                    b4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8D:B8:22:AC:5A:41:A7:A5:41:22:DB:86:8F:8B:0F:26:67:2B:4E
            X509v3 Authority Key Identifier:
                keyid:DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:6e:69:85:4e:e0:72:e7:30:37:49:25:4f:b9:1f:a5:bb:4e:
         98:17:56:8f:20:ea:9a:d5:b7:0f:b6:12:b5:39:07:e8:ab:b0:
         88:3e:73:b2:9a:e8:06:62:d4:23:c8:c5:97:97:6c:3a:6d:86:
         c7:02:f8:99:1b:bc:40:c4:9d:a6:90:b4:8c:4f:99:59:a7:12:
         3f:4e:8d:af:6c:d4:76:e3:6a:74:cb:d0:c8:5a:bb:9b:6b:05:
         c5:6a:a3:b2:dd:fe:33:1e:28:fc:80:b0:00:b0:4c:1f:f8:a6:
         21:54:33:25:93:44:03:e2:d9:54:b7:4d:bd:7e:74:e0:a0:51:
         f7:81:31:af:2f:7f:01:2a:14:7f:ae:d8:49:23:b4:14:c7:f2:
         e6:74:31:c4:e1:bc:74:7c:c0:8f:00:0b:12:a8:c0:e1:0c:b4:
         5f:f8:f4:68:3d:46:06:e4:94:35:7a:1c:b1:88:61:53:8a:24:
         d1:68:09:19:0a:de:ff:ec:f1:75:e8:3e:92:de:d6:3a:25:44:
         d2:1e:b2:2d:b9:9b:b8:56:6c:c9:d3:5e:00:c6:98:ab:cd:bd:
         4c:4b:f4:21:83:4f:41:bd:92:80:05:4a:45:56:38:c5:4c:48:
         74:25:d7:ed:52:4e:c9:6d:b0:d6:67:d1:9c:88:b4:38:12:3d:
         ea:fb:39:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----