Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
File:                     VqSYe_jGtM3WV7vC0KXhPptibLk.mft (raw, json)
Hash identifier:          EVGeW+QPHalvkDD50I4qQn3Kmu1T8IHstrzGFQIrdGM=
Subject key identifier:   BF:A0:03:70:1E:C5:C2:2B:17:D5:B4:48:FB:AC:38:79:2F:E7:0A:AE
Authority key identifier: 56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
Certificate issuer:       /CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Certificate serial:       018F86DA6C39EFD2913A15E1B7E7865DD9DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
Manifest number:          0E8B
Signing time:             Fri 17 May 2024 14:00:12 +0000
Manifest this update:     Fri 17 May 2024 14:00:12 +0000
Manifest next update:     Sat 18 May 2024 14:00:12 +0000
Files and hashes:         1: SzaXiN-DaZdIYvbS51CQocBKjtU.roa (hash: 3VoApGbEcYKj0u+jEsikUrGcTANnY8klyHVpWHsykyY=)
                          2: VqSYe_jGtM3WV7vC0KXhPptibLk.crl (hash: 5nVxcGxVldmIv7hnhHxIG0cYpcgsbbLVzzJ0FXMZUys=)
                          3: _eqE5BlPvi8HTTaeZ-agQR2eMcg.roa (hash: /f/qJyuL2LSmfqvqgQsvMfS7Te2Kf8wK+hUanDAuGfs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 14:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:da:6c:39:ef:d2:91:3a:15:e1:b7:e7:86:5d:d9:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
        Validity
            Not Before: May 17 14:00:12 2024 GMT
            Not After : May 18 14:00:12 2024 GMT
        Subject: CN=bfa003701ec5c22b17d5b448fbac38792fe70aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f0:33:0f:1e:f6:0c:6e:2d:52:8f:5b:2a:6e:
                    37:2d:64:dd:16:d3:53:db:84:97:1a:68:9e:5e:4f:
                    0c:e4:97:71:35:3b:40:b0:ab:6f:51:b1:d0:77:9d:
                    fa:7a:c7:33:e6:c9:ec:c2:74:b1:e7:f0:3e:55:be:
                    97:8d:a1:d8:7f:39:9f:91:81:19:c6:4f:99:df:09:
                    36:23:45:24:aa:6e:3a:ed:91:67:7c:d6:85:7b:0f:
                    2c:04:6c:8f:5d:8c:c2:cf:26:8e:35:01:c1:2a:c6:
                    5e:36:44:64:ea:18:2a:4c:e4:a4:9c:c6:2c:82:d0:
                    f6:e6:e5:d1:06:10:94:b3:6f:7e:50:30:89:73:86:
                    36:7c:55:4c:a4:38:fa:56:f1:15:1a:6d:c3:4b:59:
                    29:ae:7f:d0:27:12:e0:a4:e3:c1:c6:f8:b9:95:fc:
                    ae:73:d1:0d:4c:d9:ce:db:e8:0d:73:2d:f4:3f:fb:
                    c8:96:04:10:5b:33:6a:29:d2:c5:09:cb:08:c3:3a:
                    18:c6:6c:7b:de:ef:c4:2a:3a:9a:bc:c4:d3:86:1a:
                    7e:65:52:5f:32:95:24:67:62:36:21:35:b6:ea:87:
                    79:c2:66:99:20:70:46:cf:0e:90:93:ba:98:5c:59:
                    d5:26:f4:b1:d9:f9:cd:3e:23:2c:c1:31:76:8a:4e:
                    6f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A0:03:70:1E:C5:C2:2B:17:D5:B4:48:FB:AC:38:79:2F:E7:0A:AE
            X509v3 Authority Key Identifier:
                keyid:56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ad:32:a3:47:34:c9:ea:b4:9d:da:9a:49:5b:03:6f:89:e4:
         9a:12:df:15:45:9a:fb:1c:a2:57:0e:df:b4:42:b9:48:ba:79:
         d3:a4:0b:55:fe:87:ba:2f:c2:59:d0:e2:d4:27:e4:a4:7b:85:
         65:72:3f:ae:0c:a9:6d:46:29:72:ad:15:ba:68:f9:09:f3:a7:
         e0:0e:ce:42:ab:5d:6d:5f:b5:1e:93:7c:57:d8:8a:01:f5:2f:
         98:cb:1a:ec:0c:bb:82:67:89:94:d0:1c:6e:9e:a2:45:71:79:
         61:2c:14:e4:7c:b9:1e:a1:02:26:91:e7:35:9a:b9:b6:f6:5e:
         b9:03:24:fc:db:f7:0e:6d:2e:da:9e:8f:ac:df:80:d3:5c:bb:
         b0:fd:f2:0d:bf:eb:34:63:53:0c:85:a2:7a:fc:21:14:a8:90:
         c5:4e:e9:c8:fc:e6:6e:90:7c:9e:51:fb:d7:ae:a6:b7:6e:7c:
         c4:c8:9a:77:e9:bd:8a:14:e9:50:4f:62:eb:bf:c1:51:6f:76:
         02:30:b5:d0:e9:26:61:60:40:4e:a1:22:6e:51:f6:a4:c4:a9:
         81:39:ea:fa:ce:a8:72:1d:f9:15:e0:29:30:95:00:97:3a:d3:
         a0:1b:36:e2:3b:dc:a6:f0:51:3f:13:78:76:4d:3d:55:6f:b2:
         7b:73:17:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----