Manifest

$ rpki-client -vvf rpki.co/repo/AS199762/0/C22623A353617D3480E3B1C17F70197EF91D0344.mft
File:                     C22623A353617D3480E3B1C17F70197EF91D0344.mft (raw, json)
Hash identifier:          8gQXnQJYL00TxxPQk8C/xundk+nrTGy6xnXRVOmQxLY=
Subject key identifier:   73:42:16:0C:93:05:82:29:34:13:21:09:83:B7:9B:C6:B9:DD:E9:F4
Authority key identifier: C2:26:23:A3:53:61:7D:34:80:E3:B1:C1:7F:70:19:7E:F9:1D:03:44
Certificate issuer:       /CN=c22623a353617d3480e3b1c17f70197ef91d0344
Certificate serial:       70BDA9DAD360D95CF85F6625E6C1E4B59DAEC062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wiYjo1NhfTSA47HBf3AZfvkdA0Q.cer
Subject info access:      rsync://rpki.co/repo/AS199762/0/C22623A353617D3480E3B1C17F70197EF91D0344.mft
Manifest number:          E0
Signing time:             Wed 20 Sep 2023 21:46:48 +0000
Manifest this update:     Wed 20 Sep 2023 21:41:48 +0000
Manifest next update:     Thu 21 Sep 2023 22:56:48 +0000
Files and hashes:         1: AS199762.asa (hash: 60AeEy+EQ9YyB/ydTHJjQg4Jgyvmoj7K7N9nngcA7QU=)
                          2: C22623A353617D3480E3B1C17F70197EF91D0344.crl (hash: vePwdCCsvNnwRTl51skRBEp7Td7lCszdi6PctBN5R/I=)
                          3: AS199376.asa (hash: aJPBSe3QgxaIS2tJ25sI2ot0tVPW7IPVs22SUBdctfw=)

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS199762/0/C22623A353617D3480E3B1C17F70197EF91D0344.crl
                          rsync://rpki.co/repo/AS199762/0/C22623A353617D3480E3B1C17F70197EF91D0344.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wiYjo1NhfTSA47HBf3AZfvkdA0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Sep 2023 14:27:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:bd:a9:da:d3:60:d9:5c:f8:5f:66:25:e6:c1:e4:b5:9d:ae:c0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c22623a353617d3480e3b1c17f70197ef91d0344
        Validity
            Not Before: Sep 20 21:41:48 2023 GMT
            Not After : Sep 21 22:56:48 2023 GMT
        Subject: CN=7342160C930582293413210983B79BC6B9DDE9F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:92:be:de:22:9a:c1:04:e9:d3:d8:a8:2e:44:
                    8c:30:f9:2d:60:8f:55:b1:34:90:67:ec:70:23:88:
                    80:4f:ab:61:b2:af:45:5f:88:b6:5c:ac:75:a2:87:
                    06:1f:27:81:c0:11:df:97:26:3f:df:d0:6a:33:76:
                    6d:1a:b8:f2:e8:47:95:29:91:a7:72:4f:de:e5:23:
                    20:63:51:7c:1c:70:a6:76:4c:45:66:c7:5f:4e:36:
                    f4:d4:ab:dd:ac:0d:39:fe:ef:5e:eb:32:60:3e:a1:
                    03:ac:a9:c0:e9:45:55:1b:71:d3:4c:e3:78:4b:76:
                    80:d1:37:6c:ff:b7:69:f0:f5:7d:2a:66:f7:da:4e:
                    53:ee:e9:53:b7:60:fe:a3:34:c7:54:b0:91:61:91:
                    b4:e4:8e:d0:80:4d:d0:fb:4c:c0:cf:cc:7e:d4:ed:
                    03:5c:98:ee:e0:2c:d1:7a:16:26:d8:ba:02:e7:16:
                    af:22:ff:ff:d2:83:c4:07:2f:6c:83:54:88:20:fb:
                    01:fe:c0:c3:9e:df:2d:b1:61:1f:f7:c3:48:36:e0:
                    e9:0e:35:fb:4d:9d:7c:b4:f8:60:bb:d6:85:e9:7c:
                    5d:0a:7a:74:14:e8:5a:7f:94:26:29:a5:51:f8:0e:
                    83:8a:17:f4:8c:58:27:93:61:ed:09:6a:81:14:55:
                    b7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:42:16:0C:93:05:82:29:34:13:21:09:83:B7:9B:C6:B9:DD:E9:F4
            X509v3 Authority Key Identifier:
                keyid:C2:26:23:A3:53:61:7D:34:80:E3:B1:C1:7F:70:19:7E:F9:1D:03:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS199762/0/C22623A353617D3480E3B1C17F70197EF91D0344.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiYjo1NhfTSA47HBf3AZfvkdA0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS199762/0/C22623A353617D3480E3B1C17F70197EF91D0344.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:46:fb:28:fa:a7:a9:68:7d:a5:cd:73:8c:80:3d:08:20:43:
         b8:9b:e1:96:a8:2b:e4:8f:08:b3:aa:78:84:ba:ba:6d:2f:d9:
         1b:47:71:7f:ea:b1:f9:fc:fe:21:ab:0e:0f:33:af:77:a2:c5:
         d6:2f:b8:74:20:8b:53:2b:ed:2c:db:1e:7f:f2:2c:c2:4a:35:
         3f:c4:14:21:8b:ab:7e:24:67:a0:9d:63:af:bf:99:bf:c5:bd:
         89:d7:b7:07:24:57:4c:a1:8e:f4:be:ae:fa:5c:2c:ae:9c:51:
         10:3a:6d:c5:31:94:37:ab:97:74:36:5f:b6:ec:1a:e6:7e:a9:
         4e:cc:40:a1:b2:3e:f5:e2:01:16:23:82:50:a8:d7:c8:fd:a8:
         3b:f1:a9:ec:3f:b8:b0:61:66:f4:0b:fd:a9:bf:2c:0c:25:27:
         63:57:1e:a6:ae:1d:a7:67:2d:74:52:19:b1:ef:cf:51:90:47:
         44:e2:73:d6:00:7b:a9:b2:c8:92:14:c8:b3:42:ed:4a:99:90:
         e4:85:bf:42:0f:d8:21:63:2f:c5:26:5b:70:f1:d5:22:f4:00:
         22:77:45:7c:c1:74:f7:cf:de:61:ca:c3:3b:9e:e4:ef:0f:e9:
         e3:62:33:a2:80:25:ae:b2:db:59:86:f1:0a:74:80:68:32:68:
         86:f2:30:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----