Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
File:                     TIEnPcsDw0V7eSUL4Qnhml508P0.mft (raw, json)
Hash identifier:          6y6wpbyaxsQVh4gWKKg9OVGuxzJguAfkiGu6pAIwTTw=
Subject key identifier:   B5:D7:E8:AD:CD:28:50:39:6B:1B:CF:0D:43:FD:0C:F6:E7:AF:15:10
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Certificate issuer:       /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial:       018F7CFC62D947C94C35DE246C1868C94F93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
Manifest number:          036C
Signing time:             Wed 15 May 2024 16:01:06 +0000
Manifest this update:     Wed 15 May 2024 16:01:06 +0000
Manifest next update:     Thu 16 May 2024 16:01:06 +0000
Files and hashes:         1: TIEnPcsDw0V7eSUL4Qnhml508P0.crl (hash: 5aZlb91UHe33/nQTR7yq5g6Q5ejpwtBRrZ6xAit7GtI=)
                          2: lSwJb7yyeRQEyKRSK-_LjQgCv08.roa (hash: XrbfcUxabeRE8z896Xmn8twdov4o110qzGA3ZP7f83Q=)
                          3: vDdp9XSxfMQ0BsvsSIL3FQ4kHUY.roa (hash: m1LkBl2H15c0ZE9Hh+kPW+MTjqVe7SFkB0JjchegkFs=)
                          4: y7TbNNrLFw7yk9LTJCD0owfPaIg.roa (hash: LvCbbScCPu5lwh4TDkvzB0FbO/mDNbOANBHmqiljARg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 14:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7c:fc:62:d9:47:c9:4c:35:de:24:6c:18:68:c9:4f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
        Validity
            Not Before: May 15 16:01:06 2024 GMT
            Not After : May 16 16:01:06 2024 GMT
        Subject: CN=b5d7e8adcd2850396b1bcf0d43fd0cf6e7af1510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b5:29:97:34:36:5d:d9:6e:03:94:9a:71:de:
                    a6:b6:e4:6f:5a:04:40:08:1c:b6:61:3c:ed:0f:5e:
                    e1:c1:2c:aa:52:2e:a3:77:ae:62:67:c3:3f:25:99:
                    fc:c1:16:ce:5b:4f:94:42:54:a3:00:73:b3:c7:32:
                    b7:02:1f:8e:b6:c7:7c:08:39:6f:42:a5:f6:98:d1:
                    91:1e:f8:7b:48:66:46:2f:77:86:9e:04:20:d5:33:
                    7b:e6:fc:4e:cf:4b:fa:15:ed:ce:92:97:78:f2:8d:
                    21:8d:66:2f:31:30:35:12:b8:7a:97:ed:38:7a:68:
                    ce:2b:58:05:15:0b:d1:94:5f:22:58:ca:6a:98:fc:
                    05:06:ee:ea:78:f3:00:84:ea:82:92:62:5e:2e:8d:
                    6e:8c:22:78:f0:d2:4f:48:15:b1:14:93:5b:b1:5c:
                    3c:37:61:63:45:d4:16:63:ab:13:1d:c4:1b:b7:c0:
                    1d:2a:50:ac:c8:de:f6:de:86:91:bb:af:8e:df:96:
                    0e:fd:65:a4:dd:a1:2c:40:6c:1c:e6:8d:bf:d4:68:
                    76:92:bc:f4:83:72:d7:f3:2f:45:7c:07:53:81:0f:
                    45:12:92:50:31:31:c9:f5:54:81:dc:d5:c2:78:e5:
                    65:e9:8c:6f:f4:d2:6a:cb:28:67:8b:71:3a:ca:06:
                    74:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D7:E8:AD:CD:28:50:39:6B:1B:CF:0D:43:FD:0C:F6:E7:AF:15:10
            X509v3 Authority Key Identifier:
                keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:00:8e:94:c9:6d:1c:04:e5:33:b0:3e:93:01:b0:64:98:8c:
         56:f0:c8:4d:40:9b:cb:cd:13:eb:f1:37:d5:d1:4d:49:6e:8b:
         7f:cf:51:e3:0a:ce:bb:91:03:03:cc:60:87:b6:94:78:e7:45:
         f7:43:32:fe:6b:6b:7e:b8:df:fe:8e:50:d8:3c:ca:77:a8:0c:
         e6:05:ef:51:7c:83:af:f2:c9:94:80:cb:f9:57:28:df:d0:84:
         50:e4:f6:23:d4:62:66:b2:56:86:fa:72:23:5b:f4:03:0f:6b:
         9e:73:af:38:5a:b5:a1:d4:6c:ff:a3:24:11:ce:41:c9:14:4e:
         0a:6e:fe:09:d7:9b:e0:dd:03:54:c8:07:12:92:4b:fc:13:ec:
         6d:f1:c2:97:e6:90:46:c2:be:bb:b0:ad:37:a4:3d:bd:87:e6:
         16:9b:e8:18:5a:e7:24:9e:62:cf:a3:61:3c:2b:2d:ec:3f:36:
         7d:6a:83:3f:13:9a:03:ef:d6:0a:ba:c8:79:93:07:07:4f:71:
         44:59:6c:12:27:92:c4:f3:85:1f:bd:45:15:78:65:eb:4f:af:
         15:88:3d:4f:4b:62:4a:da:51:eb:b6:e8:ce:31:b2:a0:ba:1b:
         6f:3c:ba:29:57:70:d3:32:27:77:96:ab:35:e0:de:6c:53:c3:
         49:52:58:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----