Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
File:                     CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft (raw, json)
Hash identifier:          MmXkHwf/LHDlMFBhCx3FuYiTMmEp7MwNKR2PX7X3s5A=
Subject key identifier:   78:E9:C4:44:94:4F:89:08:08:13:DE:09:D8:4E:AC:67:78:F3:C6:7D
Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
Certificate issuer:       /CN=08fe040242651353d556b8c4240082190f271d13
Certificate serial:       018FB67E51BBD31F84F6545E759F722A6E8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
Manifest number:          1191
Signing time:             Sun 26 May 2024 20:01:22 +0000
Manifest this update:     Sun 26 May 2024 20:01:22 +0000
Manifest next update:     Mon 27 May 2024 20:01:22 +0000
Files and hashes:         1: CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl (hash: r4dk0SwAupIINqaPBnXSCLJzquKAw/IDAAb4qYW5QOg=)
                          2: XbY5aIhqPXCEfiPDVfx4GkW5_yk.roa (hash: VJ+ZNhBN3o/JjiyIYdXc8HyhFtOHa9TdYJpQZIkbgVs=)
                          3: mgItgQku8hskq5wUbpmmrhX01MM.roa (hash: NuU9nC91WtX0LIGMjXuCUhwLg6z2116c6v5hdBljXI0=)
                          4: sxRWCk6Ydt3VF2_kaWu9Uhrp5uY.roa (hash: l7FSfof51PpWUqh1tLfAuGfnQKxq9tQk0G90IeOh+78=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 20:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b6:7e:51:bb:d3:1f:84:f6:54:5e:75:9f:72:2a:6e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fe040242651353d556b8c4240082190f271d13
        Validity
            Not Before: May 26 20:01:22 2024 GMT
            Not After : May 27 20:01:22 2024 GMT
        Subject: CN=78e9c444944f89080813de09d84eac6778f3c67d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:07:eb:55:85:b4:63:bc:c2:9d:7f:a7:d2:fa:
                    26:d6:ad:65:14:52:e1:ba:9f:60:92:df:e6:5a:d0:
                    78:f7:67:a7:cc:7d:2d:f3:21:93:4d:b2:c8:6b:84:
                    76:52:c7:ff:d8:cc:2f:0e:7a:d4:65:e2:01:69:94:
                    bd:b4:c9:3d:d7:20:f1:c8:2b:f5:85:ca:36:23:7a:
                    2f:f9:00:09:bc:6d:8f:a3:17:6d:f0:7c:7f:5a:0d:
                    c7:76:6c:99:24:9e:20:cf:e6:dc:7f:6b:33:98:4c:
                    81:5a:1e:cf:1e:55:05:f3:7f:a3:37:be:56:01:89:
                    6d:70:8e:a1:f3:b2:c1:5a:ab:fb:e9:3c:b9:d4:26:
                    ef:91:79:07:15:af:3d:2c:63:a4:3a:34:fc:8e:0f:
                    5b:e6:d8:bc:b0:46:6f:8c:85:29:15:9e:66:a7:11:
                    86:6e:0f:0e:68:4e:30:6d:bb:f1:7d:f1:e9:76:3f:
                    00:54:b3:d3:92:98:ad:ce:f9:b0:ff:9b:86:a0:32:
                    42:7f:cd:91:ac:17:49:61:51:1a:eb:42:10:48:64:
                    44:2d:ac:87:44:ad:31:5d:d1:46:b8:9f:6c:3e:b1:
                    a7:b8:da:79:dc:b9:e1:24:97:86:a9:cc:01:6b:4b:
                    16:4d:27:07:e9:95:72:43:43:36:33:c9:0f:02:71:
                    94:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E9:C4:44:94:4F:89:08:08:13:DE:09:D8:4E:AC:67:78:F3:C6:7D
            X509v3 Authority Key Identifier:
                keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:48:91:6c:92:02:8e:5b:56:0d:f4:ef:d0:94:d2:5e:e3:e8:
         05:96:ab:34:ee:b1:ca:fa:16:ee:18:88:e7:57:c0:5e:83:88:
         0c:b1:fd:a5:d0:20:fa:a8:e6:0a:f9:4b:c4:84:01:e0:83:5d:
         94:fd:01:b7:8f:d3:2b:09:8e:2b:c1:c9:4a:84:9d:22:ee:c3:
         fa:68:a3:10:c0:aa:08:9f:ff:68:0d:5e:f9:f4:fb:c4:28:97:
         61:b9:af:5e:6f:66:63:80:68:88:a9:98:db:46:7d:9f:b8:3e:
         78:bf:5a:56:60:8c:73:55:d9:e8:5a:98:ef:c0:d4:82:76:2f:
         a9:ae:83:52:3d:a5:81:4c:2c:1f:1e:52:27:1a:37:19:fb:b8:
         7c:49:25:22:96:79:58:dd:fc:5d:d5:04:23:14:a0:27:0b:3c:
         d5:82:20:c3:d4:b6:82:d2:e0:34:12:b9:5f:5e:63:5c:a5:0e:
         6c:87:c1:ce:1e:93:ff:d0:74:ab:72:d7:71:b2:c7:ad:e9:f1:
         ff:d3:93:64:5c:b4:8a:1b:f4:6b:35:e2:97:92:cd:03:ed:6b:
         19:b2:25:ec:9b:6b:96:3a:89:2f:e9:8e:d6:3f:2a:61:e5:3e:
         0c:37:71:a2:0e:1d:a4:12:19:fb:2c:99:e8:0f:63:6d:71:f1:
         75:fb:7d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----