Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
File:                     3BHa76_4HH5QEnjYfZvCsgTXEVU.mft (raw, json)
Hash identifier:          Of4XeBMPlTOxUKA7cigKmX2LphlsPWXfSxSNU1iYJjQ=
Subject key identifier:   76:4A:15:11:C5:5D:3D:82:A8:BD:FC:2E:5F:E6:30:50:1E:08:44:C5
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Certificate issuer:       /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial:       018F87ED18B801CF5AE7BA8B5F4BC49D0AF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
Manifest number:          10C4
Signing time:             Fri 17 May 2024 19:00:13 +0000
Manifest this update:     Fri 17 May 2024 19:00:13 +0000
Manifest next update:     Sat 18 May 2024 19:00:13 +0000
Files and hashes:         1: 35BAlP5j95gF3LmZkuO8c5Sp7W8.roa (hash: C9og/MtW71/vOF1dMR/qpAwVCWIrvns1+O3ugelGJL8=)
                          2: 3BHa76_4HH5QEnjYfZvCsgTXEVU.crl (hash: 1JpuO9jOnvXeZDVcDP+U4ft38CeMsz1rhe9XDf6YyK8=)
                          3: E0-fBJmv9JlBa-CMAODOyGwOkKs.roa (hash: J4J3sUBgL6MpVyv3F/leI1uvQdHyqsohiSFJBnZDXjs=)
                          4: FNS0RWcIBc7fy3mFZEwf_J8-kt0.roa (hash: TkxzNuwxp4FRlSdpByiBli1AB/9VhPf7zbqysYXNsJ8=)
                          5: Oj5EkYILL3Oh9Vi_AcudIRxqNnE.roa (hash: Ab877T/qA5btF8b5cWjLEm3qWjX/sFRnKWYsmdzy0Fg=)
                          6: gGGcG4uttYts3x8BvsdJpUzxF-4.roa (hash: UMnx2rXcBW89Pc50XJtvN/p8T4qXKhsgnGKjtkI1aDo=)
                          7: pyoOB9wUhzxlR9pwuvbd_Lyr-Dk.roa (hash: xJWa/4/inhffy39f8iE0IrXCjTGFvmkKY64tNELNuKc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:18:b8:01:cf:5a:e7:ba:8b:5f:4b:c4:9d:0a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
        Validity
            Not Before: May 17 19:00:13 2024 GMT
            Not After : May 18 19:00:13 2024 GMT
        Subject: CN=764a1511c55d3d82a8bdfc2e5fe630501e0844c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5a:90:ad:e5:44:64:74:20:54:d6:f1:46:cf:
                    80:84:0b:f8:0c:66:7e:4c:97:41:b9:53:87:4e:03:
                    f9:d0:57:c7:08:80:2e:b0:ce:9d:fc:c5:6e:7b:96:
                    70:9e:3f:0e:f3:60:a4:ad:d3:e4:38:07:09:23:f4:
                    04:86:e9:2b:aa:4f:f6:2f:2a:64:bb:85:a4:96:aa:
                    cb:34:73:6e:68:08:e2:44:46:12:1f:a1:1d:05:ef:
                    51:4d:25:b7:d9:a1:32:02:e1:a0:42:2d:35:2c:2b:
                    6c:92:6b:1d:2b:7d:3c:b4:42:d1:f3:5e:1a:c8:72:
                    04:84:9b:c5:fb:fb:23:0f:07:b5:02:db:ca:61:e4:
                    9f:f8:8f:9b:16:8e:ee:88:17:e8:89:11:0b:6a:5d:
                    8b:92:bb:43:61:99:ca:b9:5a:d0:5b:2b:64:6b:84:
                    f5:b2:00:19:05:fd:94:0c:77:df:d6:fe:87:75:c1:
                    5a:3a:0f:81:c7:79:3f:9d:42:c8:f4:05:bc:8f:eb:
                    0d:4f:95:f0:c8:93:51:bd:91:bd:28:ca:ab:0f:ea:
                    e7:5f:b2:78:19:d9:dc:6d:2e:dd:b7:1d:33:3a:33:
                    51:17:51:c5:f8:3f:a6:6a:76:c9:21:2f:b6:ee:38:
                    91:5e:32:e1:83:db:e0:71:70:f8:57:d7:aa:37:30:
                    9d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4A:15:11:C5:5D:3D:82:A8:BD:FC:2E:5F:E6:30:50:1E:08:44:C5
            X509v3 Authority Key Identifier:
                keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:20:41:af:68:45:d1:e0:fe:d5:a0:45:55:15:46:e1:0e:28:
         93:06:18:b6:b7:e8:5b:48:36:0c:02:f8:c5:0e:f1:71:ff:3e:
         53:89:95:b7:a8:77:05:61:55:6f:f4:e9:eb:87:5f:70:f7:7f:
         f0:a0:a0:d6:d5:91:54:91:fb:ec:3f:66:d3:bf:f5:46:7c:b8:
         c8:61:68:ce:48:e3:13:6f:b6:18:63:7d:72:01:86:dc:62:6a:
         92:6c:8b:fc:81:e3:1f:1f:84:eb:6a:b1:be:b0:33:87:f3:ff:
         55:59:fb:81:09:42:e2:1c:40:c8:17:83:62:fc:1c:38:69:0e:
         90:11:d8:dc:40:c0:d5:80:12:ce:b2:d0:ef:5a:58:9d:f2:4c:
         18:f4:f5:0b:b5:ce:18:9e:32:c5:cc:4f:7d:49:1c:37:30:56:
         ee:48:aa:0a:1e:d6:8d:1a:03:72:f7:a8:bc:d7:ac:0b:7e:1d:
         e6:51:0f:96:96:02:2a:24:95:27:ec:09:ea:ae:d9:13:6b:78:
         b9:94:59:64:33:d7:ea:80:63:bc:57:1d:7d:0f:8a:f7:64:8a:
         a1:c7:5c:d0:9b:17:d9:de:42:eb:89:a5:15:7e:5f:7d:cd:92:
         ce:fd:7d:a7:01:30:63:ef:8b:fc:f0:64:ab:4b:a1:47:4d:da:
         98:58:64:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----