Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
File:                     fWReWE8e-aiB8fu8TSejQj3j3_E.mft (raw, json)
Hash identifier:          l/lpxoOhdYZ6nePB1KPq/p5EBhmi4ZzgcDwafv7C7fw=
Subject key identifier:   D3:83:44:3E:4D:84:B0:76:B3:61:3B:E8:B7:7B:F8:77:17:E7:FB:3C
Authority key identifier: 7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
Certificate issuer:       /CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Certificate serial:       01901D0F8DE76E28DEEA351C7C9856CB9621
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 18:01:16 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:16 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:16 +0000
Files and hashes:         1: PdV0WmAorqvekQKnSq4mwPT8hhU.roa (hash: RSYaCSDMBA8srYXCcYip00Znic1kFTiiVy5MWENuroE=)
                          2: fWReWE8e-aiB8fu8TSejQj3j3_E.crl (hash: dxbNpukZ7xeQ+4N+SFbpnAwGpmqr7Ds5Hkjz6R7JF/4=)
                          3: kIyVzC_M6waKyAPTdc5b_LA0LgM.roa (hash: fSsIVr0nWgYyRG1KgFnG77n+MdhkPiAeTDfl7SfrE1Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:8d:e7:6e:28:de:ea:35:1c:7c:98:56:cb:96:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
        Validity
            Not Before: Jun 15 18:01:16 2024 GMT
            Not After : Jun 16 18:01:16 2024 GMT
        Subject: CN=d383443e4d84b076b3613be8b77bf87717e7fb3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ec:f7:b1:24:e4:de:2a:b6:57:44:46:e9:5d:
                    e0:12:23:27:28:61:58:3e:31:19:87:07:a0:61:9d:
                    14:09:52:cf:20:08:fd:18:c0:25:c3:65:fc:1b:94:
                    5f:91:97:8c:c0:65:7f:9f:83:db:a8:c0:1d:ec:df:
                    fc:47:f6:e8:d9:a7:77:36:be:3a:99:96:18:56:4c:
                    47:f1:ce:78:52:f9:8e:d0:40:2d:84:33:0e:af:c0:
                    a1:e5:e0:1f:de:8d:06:89:9b:c9:79:88:f0:5c:44:
                    da:a4:4a:b0:e2:a1:b1:56:ca:f2:a2:17:0f:c0:22:
                    d1:dc:21:bc:e1:a8:85:7a:bb:5a:84:72:51:28:86:
                    81:2f:9b:7a:25:e3:8a:39:b9:71:c6:22:72:ae:a4:
                    ac:2f:4f:55:59:e3:fa:69:33:70:06:1b:59:d3:95:
                    62:dc:41:5d:81:a3:70:8d:09:f3:2d:7b:15:a9:3b:
                    82:37:45:7a:03:6e:14:80:ed:2b:11:95:a3:92:9d:
                    51:1d:33:f6:45:9b:55:d7:6c:c1:c3:bb:6f:30:7e:
                    7c:d0:76:63:10:73:d8:04:86:4c:e3:f2:98:d5:cd:
                    49:e6:f6:e8:06:99:d4:d4:23:d3:74:6d:56:27:37:
                    d0:ec:6e:cc:8f:66:0c:dc:fa:a1:3d:c4:6b:53:67:
                    05:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:83:44:3E:4D:84:B0:76:B3:61:3B:E8:B7:7B:F8:77:17:E7:FB:3C
            X509v3 Authority Key Identifier:
                keyid:7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:9b:93:bf:99:13:6f:76:24:cd:82:ae:35:2f:b6:5f:86:05:
         66:b4:ab:72:81:68:2d:16:c3:1c:65:8c:38:44:39:7b:cc:48:
         5c:ca:2e:d5:fd:ea:f5:ae:cf:02:34:2f:09:39:08:0b:06:1f:
         2c:e8:33:2a:24:fb:db:30:29:59:ba:85:d7:8a:7c:13:07:2a:
         17:eb:48:11:a6:b0:cb:05:2f:c7:22:e5:b3:1c:28:9f:c3:a9:
         48:f1:09:e6:95:4d:9d:04:9c:bb:7d:bf:78:9a:fb:01:9e:e0:
         b8:26:60:ff:5e:6f:73:7e:1a:8a:96:0b:af:7f:bb:c0:83:e7:
         6c:bb:f1:a4:53:0f:f6:bd:71:21:21:5b:96:5e:59:c3:31:cb:
         a2:e3:36:5b:93:a7:43:89:e6:3e:76:47:2c:97:69:9b:5d:07:
         93:5a:cb:c6:8c:08:33:c3:5a:bc:ab:0b:08:a7:57:8b:c0:ab:
         2f:0e:ea:c6:ae:97:99:c5:37:42:1e:4d:a8:77:e5:70:e4:f8:
         3e:83:50:ae:52:e3:00:28:97:de:b6:0a:65:c4:9d:cd:2c:57:
         45:18:d9:03:dc:d1:38:db:1f:12:b1:62:fd:9d:04:0f:1d:a2:
         8b:04:cd:0c:9e:60:68:1c:cd:18:5f:70:4e:94:ea:c5:1f:6f:
         29:65:a5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----