Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
File:                     po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json)
Hash identifier:          xUokMlvUYrNmjZx9ENCtfYz1/oU5WwJOZ9acgpn1IjQ=
Subject key identifier:   FB:09:20:CE:B3:02:6D:06:3B:BA:68:AD:42:B3:67:15:9A:75:C5:65
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Certificate issuer:       /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial:       018F8D145E6FF3EB0B84431E10965714BA6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
Manifest number:          117E
Signing time:             Sat 18 May 2024 19:01:13 +0000
Manifest this update:     Sat 18 May 2024 19:01:13 +0000
Manifest next update:     Sun 19 May 2024 19:01:13 +0000
Files and hashes:         1: QLfJn-FiXZ5EKMAJOaZHJ2yNKD0.roa (hash: 75m8mYC5yUkgrNQhLaAJwF1W4PmotcogNRZG/kShYBM=)
                          2: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: ylDaNFrTLdlQVrnf7z5lz0U7tTblxMJ/A+1P1S0ucxs=)
                          3: r535_ZiVdnxwSrq9NwZ3PHSB0h8.roa (hash: Mu16izYWjSkv8WI9Wewop/41XvuqyE75M49pOIo0qlU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 19:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:14:5e:6f:f3:eb:0b:84:43:1e:10:96:57:14:ba:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
        Validity
            Not Before: May 18 19:01:13 2024 GMT
            Not After : May 19 19:01:13 2024 GMT
        Subject: CN=fb0920ceb3026d063bba68ad42b367159a75c565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fa:ae:69:0f:3c:72:36:da:17:93:d7:75:59:
                    00:be:71:06:3f:33:0f:6f:e6:89:91:4f:b4:26:fe:
                    1b:de:67:09:8d:c8:c9:b1:da:ce:32:83:35:3e:12:
                    6f:ef:57:db:d2:3d:94:f7:c8:7c:5b:13:02:23:80:
                    ab:83:e3:26:3a:67:42:76:ed:97:46:c2:a5:cc:70:
                    45:6b:06:3d:4e:7c:3b:bf:a0:74:db:d7:fd:a5:cf:
                    5a:ac:ad:d6:12:51:2e:8f:67:3b:ff:92:e2:98:c5:
                    ac:36:b7:3a:63:7d:c8:0e:88:4e:71:31:aa:84:f0:
                    9d:7c:bd:af:9d:93:71:4b:1c:2b:cd:2e:1c:e0:ed:
                    01:df:a2:b0:48:b8:ea:22:43:50:7d:cc:c6:7b:a5:
                    c3:d4:2f:d4:fa:e8:e7:a7:47:38:ae:c8:2f:45:53:
                    7e:cd:12:30:9d:76:61:4f:a2:0e:d9:4a:fb:0d:10:
                    71:38:35:50:a5:df:2c:e6:d2:5a:39:c9:d8:d1:a7:
                    d6:63:90:02:c1:97:87:3b:7b:84:37:9c:f0:e4:0d:
                    64:27:2f:dd:31:3e:dd:78:f7:b5:ce:3e:36:d4:55:
                    12:6f:1b:8f:a5:30:bd:d6:04:54:03:d2:19:f6:29:
                    1b:84:e5:cb:b9:fc:b6:eb:64:5f:51:67:0b:47:8a:
                    fa:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:09:20:CE:B3:02:6D:06:3B:BA:68:AD:42:B3:67:15:9A:75:C5:65
            X509v3 Authority Key Identifier:
                keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:72:37:b3:9e:19:2f:65:af:5b:74:ef:45:84:e9:13:1e:c1:
         05:3e:2e:13:b7:78:ad:13:5a:58:37:4c:da:63:9b:90:cc:f7:
         ef:0f:69:a7:d2:58:95:1d:97:c2:f0:e4:79:fa:b4:d0:df:12:
         72:0e:38:ea:22:fc:67:1e:3e:7d:2d:f5:2b:f0:0c:56:d0:1f:
         00:39:07:b0:69:5b:0b:3a:fb:28:71:73:49:6a:72:b4:e5:8d:
         bf:ad:cb:5b:0c:96:83:d5:32:db:aa:c8:1a:81:d2:6c:17:44:
         56:09:ce:8a:26:a3:b6:96:c1:67:6c:10:66:4e:a8:9a:b9:f7:
         54:84:11:f4:2e:85:fc:41:42:4f:0e:1d:66:67:de:b2:0e:0d:
         09:97:40:ab:08:42:59:b7:70:72:5a:21:e0:08:09:9b:d6:f0:
         d0:ff:49:c8:56:00:f3:e7:6f:b1:7f:49:5c:77:c7:c8:1a:1f:
         68:ff:a3:16:c4:ee:1e:11:cf:14:9f:61:d0:63:71:8b:7c:c6:
         69:5b:d8:39:c8:f4:82:a3:0d:e8:a4:cc:07:e9:47:ad:93:ab:
         51:44:a4:c5:c0:2f:e5:24:72:32:bb:fe:6a:50:e1:10:d7:41:
         1d:2a:e5:4f:08:ad:f1:b0:af:fb:ee:3b:1a:b3:6e:55:81:1e:
         8a:17:bd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----