Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
File:                     DjMedHrdOCkl1soNsipNquqi1h8.mft (raw, json)
Hash identifier:          dTg1QdMfLYggmF0tf16Xl6ocshDdliVuzj3aGis91aE=
Subject key identifier:   66:12:8B:D0:EB:6E:C7:96:E1:7F:6E:46:C3:CE:0B:F9:52:A1:16:59
Authority key identifier: 0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F
Certificate issuer:       /CN=0e331e747add382925d6ca0db22a4daaeaa2d61f
Certificate serial:       018F87ED25DC4BAC9C5B2CC8DAAC34BD9188
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
Manifest number:          FA
Signing time:             Fri 17 May 2024 19:00:16 +0000
Manifest this update:     Fri 17 May 2024 19:00:16 +0000
Manifest next update:     Sat 18 May 2024 19:00:16 +0000
Files and hashes:         1: DjMedHrdOCkl1soNsipNquqi1h8.crl (hash: KdtSkRmI0za9dXVZehWJWXY6sPGbnE6gwkFB2wJxfE8=)
                          2: XioP7kA7aWxBuvpqTW82pU0_Zds.roa (hash: n5YrjIDePEWtmIWF5i8zL5CqMWy1O8nJd6uwlZQ2zCI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:25:dc:4b:ac:9c:5b:2c:c8:da:ac:34:bd:91:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e331e747add382925d6ca0db22a4daaeaa2d61f
        Validity
            Not Before: May 17 19:00:16 2024 GMT
            Not After : May 18 19:00:16 2024 GMT
        Subject: CN=66128bd0eb6ec796e17f6e46c3ce0bf952a11659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:39:64:c2:cd:12:d9:87:8a:bd:0a:4e:30:0b:
                    ab:5c:aa:19:35:2a:54:ed:ba:22:df:92:55:13:b2:
                    e5:61:6a:dc:0f:ad:97:fc:c9:bc:80:d9:7f:79:e2:
                    02:74:d3:f1:28:73:72:e4:90:8d:87:92:09:58:0c:
                    20:c4:bb:5d:e1:05:bb:ce:67:6e:d8:e8:ef:09:8b:
                    1d:0f:2c:be:47:53:04:e3:4a:be:e9:57:f9:a3:5c:
                    39:b4:9d:f5:8a:9e:09:21:90:b7:6c:07:44:28:a1:
                    81:ae:5d:c8:b5:82:20:73:eb:28:b1:48:db:24:3b:
                    19:b1:40:46:7f:ed:8e:b0:ec:84:68:b5:53:24:4c:
                    9a:d6:67:44:1b:9d:b5:6a:92:d1:e9:40:13:32:69:
                    5d:2d:45:d7:0e:00:d5:5c:f2:64:d6:84:51:03:92:
                    e8:69:ff:5b:84:35:ca:b5:98:89:47:47:9d:a1:f0:
                    18:66:91:62:ba:87:84:e9:fb:e0:26:ff:df:06:b3:
                    9b:ab:a3:37:dd:10:f8:e6:22:20:60:65:5f:ca:54:
                    0a:f5:ae:69:72:a8:b4:66:c2:32:4c:87:f2:71:2e:
                    d5:4f:bd:57:75:ce:8e:29:79:f2:44:01:bb:d0:9e:
                    22:13:80:a9:e3:af:de:64:b7:89:c2:3a:a6:96:d4:
                    fb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:12:8B:D0:EB:6E:C7:96:E1:7F:6E:46:C3:CE:0B:F9:52:A1:16:59
            X509v3 Authority Key Identifier:
                keyid:0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:13:17:d2:ee:d0:87:d5:39:d1:62:95:f9:bc:cd:1b:02:2d:
         05:75:45:e5:65:b2:b7:33:a8:18:16:4a:09:01:b3:58:97:d7:
         e1:15:92:35:33:c4:86:60:09:93:72:bd:52:69:af:d2:2b:9d:
         2c:29:44:f3:90:06:91:65:cf:9c:60:8f:84:46:e5:4e:93:4e:
         68:77:83:55:24:44:d7:c7:5e:64:88:39:73:91:9c:75:49:e1:
         5f:b3:1c:cf:b9:b0:e0:9e:cf:f7:fd:22:26:ce:b0:75:ac:21:
         e6:8a:3b:74:66:0e:d6:4d:ba:3f:0f:16:54:e8:c3:16:8e:1a:
         f9:f0:85:8e:54:6d:7b:59:b0:1e:fd:ab:27:72:fb:1b:47:fb:
         2a:ea:d6:c3:ec:bc:0e:cb:29:0b:89:ec:f3:7b:46:44:44:96:
         d9:2f:74:5e:04:1b:9b:61:d7:11:1a:79:29:7f:3f:ff:67:f4:
         a6:09:82:ab:20:b0:9d:f6:8d:d9:53:35:b4:7e:b2:27:c6:21:
         4a:b8:b9:d8:b0:6b:31:2d:08:db:c3:26:ba:29:16:06:ca:05:
         a3:f8:cf:65:c1:77:08:54:8a:22:cb:47:1c:a9:96:94:eb:71:
         fe:ac:6d:45:68:4f:b8:1e:17:f7:fd:b2:cf:94:58:d7:60:ea:
         80:c7:1c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----