Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
File:                     eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft (raw, json)
Hash identifier:          9eUV2tiN+CgG/zXA+VNh89O7o2ER4j+c6T245jb8p78=
Subject key identifier:   D7:E5:6F:92:7F:E5:D9:67:9A:BD:36:E5:C1:57:2E:80:89:91:84:6C
Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Certificate issuer:       /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Certificate serial:       01903329B18F56A08A4753CD2A260C8B6716
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
Manifest number:          07AC
Signing time:             Thu 20 Jun 2024 01:01:28 +0000
Manifest this update:     Thu 20 Jun 2024 01:01:28 +0000
Manifest next update:     Fri 21 Jun 2024 01:01:28 +0000
Files and hashes:         1: TgiC2ylJxMdU3j10-zOONTUm03Y.roa (hash: 6Sro1HgNUj4i0ofCHX+KNGR444cPZTykYPiE4cp4wV4=)
                          2: eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl (hash: +PvrDJ9XcAbslqhx64Eq9DLgzkd7zjlaDMoOuBNHzo0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 01:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:33:29:b1:8f:56:a0:8a:47:53:cd:2a:26:0c:8b:67:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
        Validity
            Not Before: Jun 20 01:01:28 2024 GMT
            Not After : Jun 21 01:01:28 2024 GMT
        Subject: CN=d7e56f927fe5d9679abd36e5c1572e808991846c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:1d:28:d7:6a:00:c2:67:95:6b:d1:46:e9:
                    bf:21:74:46:67:d7:63:51:d9:31:00:76:db:1f:16:
                    c0:f1:dc:46:5c:fc:a8:f8:67:1a:79:30:15:d8:e4:
                    80:d3:73:b0:75:f7:0c:f8:fa:58:ad:cc:42:ef:94:
                    54:56:c8:75:5d:67:99:44:d7:dd:12:23:1c:c0:06:
                    e2:4c:78:22:15:0e:77:5e:e5:cd:bf:e0:14:8e:a0:
                    4e:09:d3:a8:02:72:c3:18:1a:8f:30:a9:30:3b:fb:
                    c2:bf:34:35:e9:8f:05:f2:b5:b1:14:2d:89:97:47:
                    86:aa:09:36:c4:cc:77:79:1d:21:2d:79:ee:91:80:
                    84:ea:60:6c:62:f6:99:31:8d:19:d4:29:a2:46:0d:
                    4e:f4:06:bb:48:26:d3:db:e6:3e:7a:4d:83:68:e3:
                    74:8e:85:81:5a:66:92:a7:f2:f0:1a:ce:62:3b:1c:
                    9b:02:ed:86:92:86:46:28:87:8c:11:19:b3:04:c0:
                    03:51:94:2a:73:63:5f:b1:5e:fb:ed:6b:c2:6c:df:
                    93:1b:86:e4:b2:26:d9:45:9f:8e:51:ba:01:61:c6:
                    34:5f:84:cd:b8:70:a8:e7:ea:74:d0:68:d2:30:e0:
                    30:d4:01:01:4f:36:6e:01:96:bd:e1:42:95:68:1b:
                    d0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E5:6F:92:7F:E5:D9:67:9A:BD:36:E5:C1:57:2E:80:89:91:84:6C
            X509v3 Authority Key Identifier:
                keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:37:17:b7:f9:3a:39:7c:83:6e:a6:db:be:40:ec:6a:49:c9:
         9f:20:bb:19:b8:c6:74:1c:cf:a2:b5:ce:5a:a5:5f:d5:b5:4c:
         4c:ae:d7:68:0d:f4:22:b9:37:4a:84:8e:26:25:88:f1:91:b5:
         70:22:cd:0e:41:6c:4e:d9:ed:f2:5f:27:b8:9e:01:01:86:65:
         d5:90:73:44:e0:6c:ad:9d:20:ea:ac:96:83:00:d4:82:e3:d9:
         c1:b8:5b:e1:18:cd:c4:d3:92:d8:cb:9d:af:32:2e:c4:9e:9a:
         3e:40:1f:fd:40:ed:f6:01:a7:9e:dc:b9:69:7f:54:f4:7d:62:
         84:80:25:40:6f:8e:f1:18:1d:79:78:e9:69:a3:08:bb:6f:84:
         9c:b3:d7:91:ee:8c:3b:bd:da:85:fe:60:bc:58:b5:7e:81:7f:
         31:16:bb:29:ba:ba:49:70:3a:32:0f:4b:bf:e8:74:7f:59:ac:
         2b:71:78:9e:08:6b:88:39:f8:b5:a8:aa:cb:db:0d:e2:bf:b5:
         9e:0c:23:90:49:fe:ed:7d:a1:a2:cc:a8:6a:69:dd:c6:cd:c2:
         e4:73:c0:6c:31:5f:7b:5f:36:83:5c:b9:69:76:e9:0c:32:e9:
         4a:30:f7:b8:43:31:fd:1f:4e:c3:ac:97:17:73:1d:7b:ba:65:
         2a:99:5e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----