Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
File:                     UaDZglED2dpHYe-pGmDqLKdY0AM.mft (raw, json)
Hash identifier:          K9+OfVxaamKZp7no01o81mTZHc/DKOmlJDAU1xI4Grk=
Subject key identifier:   BC:B9:42:07:4D:06:80:04:C5:C4:6A:E6:99:15:6A:D5:3C:10:C7:E0
Authority key identifier: 51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03
Certificate issuer:       /CN=51a0d9825103d9da4761efa91a60ea2ca758d003
Certificate serial:       018FB5A2A3C610FCF5FB493752458F2CBD7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
Manifest number:          1193
Signing time:             Sun 26 May 2024 16:01:25 +0000
Manifest this update:     Sun 26 May 2024 16:01:25 +0000
Manifest next update:     Mon 27 May 2024 16:01:25 +0000
Files and hashes:         1: I9Wektv6-XL14b2IxIG_oS5d2W4.roa (hash: ox8FYP1UnyfDSJdmN++bhOjko1FfluzmuijGzS6oZmM=)
                          2: UaDZglED2dpHYe-pGmDqLKdY0AM.crl (hash: br6CwyKgI/MeUT/XM2IoN44EiNswX0pThWuzxPrJT5E=)
                          3: n42EvcIBiuSq__FmQqfSSIiH3SY.roa (hash: cMmVAV0LHAr5hFbR2JsPhslXGv8V8wqVRIwicle7vuA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 16:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b5:a2:a3:c6:10:fc:f5:fb:49:37:52:45:8f:2c:bd:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51a0d9825103d9da4761efa91a60ea2ca758d003
        Validity
            Not Before: May 26 16:01:25 2024 GMT
            Not After : May 27 16:01:25 2024 GMT
        Subject: CN=bcb942074d068004c5c46ae699156ad53c10c7e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a8:d2:97:ea:c3:66:5c:12:e4:ec:0c:ac:4c:
                    8e:de:dd:73:17:69:b3:ce:85:87:a2:75:53:4c:a5:
                    80:d9:02:63:0a:e6:b8:f4:2b:a4:5b:5f:22:ee:de:
                    62:0d:95:dc:52:c3:85:7b:33:6c:b2:b9:a7:e2:d6:
                    3e:08:5d:8e:ab:2e:cc:33:48:0d:9f:e3:c2:d1:4e:
                    b0:e7:c2:1a:55:b7:4f:1d:6b:7a:09:03:1f:1d:4c:
                    77:db:81:b3:9f:f8:5b:90:c2:b0:81:d6:79:1e:a2:
                    3a:c8:90:04:61:70:ec:a3:8e:31:f7:f2:a5:d9:ab:
                    f7:3e:87:f2:37:3c:a4:de:83:57:ac:5e:8a:c6:7d:
                    68:c0:f9:ae:77:7d:2c:00:21:c6:59:46:a8:9f:87:
                    e0:83:9f:60:65:7d:b8:19:aa:19:b0:d9:b0:78:ef:
                    bf:1e:71:ff:f7:bc:6f:3e:6c:30:bd:4d:8d:ae:55:
                    19:a2:ba:02:5a:26:dd:31:76:b5:60:6a:7d:1d:75:
                    51:89:08:ba:d9:12:f4:98:a9:e7:c2:ed:fd:ec:84:
                    c7:8c:76:bc:9e:93:1e:0a:e3:3a:2b:4f:e1:b9:8b:
                    21:8c:a0:b7:91:12:6c:45:1a:4c:18:a4:79:8a:f4:
                    aa:62:46:26:ca:28:4b:1d:56:88:48:b2:48:8d:7c:
                    58:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B9:42:07:4D:06:80:04:C5:C4:6A:E6:99:15:6A:D5:3C:10:C7:E0
            X509v3 Authority Key Identifier:
                keyid:51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:9f:36:16:95:76:30:15:7e:0c:c3:0a:30:a9:1a:e5:e0:95:
         56:ab:35:30:da:18:a2:c3:b1:76:97:ac:b8:60:39:ad:ac:91:
         92:a4:e2:28:67:71:ee:eb:9e:e3:58:9f:1f:e6:2a:22:9f:b3:
         85:64:bd:66:c1:97:16:3c:f9:dc:f3:51:6a:e1:23:91:e7:ca:
         c9:a7:ad:68:58:0c:f3:70:df:75:ed:48:c1:ad:e1:61:26:59:
         d6:82:fe:e5:52:70:89:f5:7f:bb:9c:fa:03:d7:da:3a:9f:b2:
         5f:12:2e:1d:ef:cd:3d:6a:b9:1a:67:5e:94:8d:85:92:ac:68:
         b6:6c:1b:24:b3:75:c3:87:07:72:d7:2d:4d:9d:50:7e:9b:01:
         30:2d:b0:f1:a1:d5:45:93:7b:a7:c3:e3:81:d5:2d:4f:01:14:
         c5:97:d7:a9:c6:d7:29:98:f6:a0:2f:eb:d4:a5:39:5e:ee:4c:
         a2:94:94:8c:7b:d7:7c:be:d1:a9:09:b1:20:02:c2:94:5b:40:
         08:d6:dc:ec:28:4d:11:1c:03:77:34:2d:6f:cb:44:c9:17:74:
         e2:ad:a2:b9:81:85:b6:ef:e5:2e:f9:ea:56:22:13:41:37:f9:
         be:b3:3b:d1:4e:4a:29:7b:ed:f4:72:80:bb:72:c5:7c:aa:1d:
         2a:0c:55:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----