Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
File:                     1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft (raw, json)
Hash identifier:          5eqWSztqYlixUD75isWgyJM09zTQn5OpQ4yQbpg03SI=
Subject key identifier:   CF:33:FA:44:A8:07:3D:4A:24:B3:0E:FC:DE:2B:FF:0F:62:5B:00:F4
Authority key identifier: D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F
Certificate issuer:       /CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
Certificate serial:       018F97972D7C60F9209D8094F011C869DF31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
Manifest number:          1180
Signing time:             Mon 20 May 2024 20:00:18 +0000
Manifest this update:     Mon 20 May 2024 20:00:18 +0000
Manifest next update:     Tue 21 May 2024 20:00:18 +0000
Files and hashes:         1: 1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl (hash: nkzMpIk0GmQ0JKhnmYfB6Y+EeXav+OLH1FjkxBmVDcA=)
                          2: 5v1lVxwo8gHOHWLYV5z-eXdmvzU.roa (hash: iRgZfYjP2AVMYBP5nUG3dOkIEuN8gqdH6Xs0xSmGH78=)
                          3: gnkpdeu0CfnRVbPhLHbJ8bXJz0c.roa (hash: 4f9PJj/zS5aQUem6q+7RQpbeapsgxUWqg+7ay3cllrA=)
                          4: nhv3AxOS2hT56nddRX0Rqq786v4.roa (hash: kx26YIONs0EPo0xRhrd+b0oqKnAPvCd/zKT7412sbas=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:97:97:2d:7c:60:f9:20:9d:80:94:f0:11:c8:69:df:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
        Validity
            Not Before: May 20 20:00:18 2024 GMT
            Not After : May 21 20:00:18 2024 GMT
        Subject: CN=cf33fa44a8073d4a24b30efcde2bff0f625b00f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4f:c5:6c:0d:d6:d2:0f:6f:54:13:3a:ea:51:
                    a8:23:6e:dc:64:5d:95:19:9f:82:de:53:f5:e0:3b:
                    be:9d:af:2e:3a:02:75:2d:bb:91:c6:a9:97:0c:43:
                    05:54:fa:6b:0d:d5:99:e3:58:ea:30:1c:d9:97:be:
                    34:73:b3:80:2b:01:01:19:1e:13:b8:9d:7e:43:b2:
                    04:47:38:9a:96:82:43:19:d0:49:ef:01:12:f5:ce:
                    77:ed:98:cd:61:a7:26:db:b8:47:ab:d4:08:5c:69:
                    8e:0a:e1:58:5f:b5:82:b5:95:a6:1c:55:b4:f8:a1:
                    92:24:a2:88:0d:2b:e5:6b:37:b0:50:ae:c7:47:92:
                    e8:fa:8b:7a:2c:a1:7a:29:12:c0:f6:04:c7:ab:16:
                    8b:38:9f:ce:9d:83:3f:68:ce:fa:19:38:29:b2:a2:
                    50:ac:81:fb:78:4c:4f:a1:3c:2b:5f:ea:2d:7d:fb:
                    5b:37:59:cd:2c:03:f4:d9:47:7b:79:a2:c8:ad:55:
                    c9:bb:99:73:5d:cb:19:e2:bd:8e:8d:86:f0:ef:3c:
                    3f:34:03:4a:24:84:ec:00:7a:3a:3d:29:36:4c:2e:
                    3e:80:c7:9f:ea:c6:3f:5c:65:35:32:e9:0a:61:e4:
                    b4:bc:c5:16:43:ac:f6:91:46:a2:35:d3:b4:07:16:
                    58:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:33:FA:44:A8:07:3D:4A:24:B3:0E:FC:DE:2B:FF:0F:62:5B:00:F4
            X509v3 Authority Key Identifier:
                keyid:D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:7d:21:32:cf:26:2d:65:8b:5c:1b:47:78:47:26:e3:61:42:
         d3:41:07:52:c6:b4:c4:60:ba:ba:2b:6d:56:9a:78:bd:1d:20:
         13:6a:2b:b5:d6:26:bb:86:bd:93:e3:9b:90:93:71:a4:c9:1a:
         5b:c0:a8:b8:79:34:ee:64:09:14:17:22:c9:ca:0e:01:cd:1e:
         11:90:4a:a0:1c:53:54:db:bf:d2:11:af:cf:09:09:3f:93:bc:
         8f:f4:18:81:c0:80:6a:08:94:00:ed:c5:b7:7b:9d:fc:42:e6:
         c4:7f:28:a3:99:ff:58:92:b3:52:08:ee:5b:fc:35:dd:b3:0a:
         26:a4:35:c1:18:f7:2a:b6:47:76:20:e3:70:17:4a:ab:d8:20:
         6e:6f:58:93:09:c4:bc:e1:54:4e:bd:6a:61:86:c5:16:d9:55:
         67:94:86:ad:83:5b:97:35:9d:d9:12:13:72:fd:7f:e6:45:89:
         ba:9a:59:69:45:4c:a0:f2:7a:b1:71:ed:71:02:d6:39:1a:32:
         19:d1:f9:27:bb:61:a9:33:37:71:ef:d8:d1:24:8d:db:fb:8c:
         27:5e:cb:81:11:7e:9f:1a:27:78:42:2c:3c:3b:0d:bc:49:8c:
         4d:3c:6e:12:00:6c:21:23:91:52:3c:38:fb:b6:bf:c4:2e:fd:
         c8:77:39:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----