Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
File:                     McsA0vhEAYEMMgC1L6OI6TZR3fM.mft (raw, json)
Hash identifier:          mtPvtx671w9DxX4ZgLX++Oxdq5PptsOvScUB8MQvm70=
Subject key identifier:   93:17:8B:C8:86:3F:2F:BE:E2:81:FF:99:3A:B6:8C:59:7B:C3:53:F7
Authority key identifier: 31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
Certificate issuer:       /CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Certificate serial:       018F885B22B263494321460C557D0C024BFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
Manifest number:          FB
Signing time:             Fri 17 May 2024 21:00:25 +0000
Manifest this update:     Fri 17 May 2024 21:00:25 +0000
Manifest next update:     Sat 18 May 2024 21:00:25 +0000
Files and hashes:         1: JqeMVcj88VGKQX7j05Zavd9Ln14.roa (hash: lwjo+Kna4AFhbOaBhLgIoXL1nOylvrVla6RReH6EI9c=)
                          2: McsA0vhEAYEMMgC1L6OI6TZR3fM.crl (hash: LkNypwmt3nCPsHa0+Yg5a+ONs12XtFnch/tvm65FIm8=)
                          3: Wu4ZjQNwCguoOSFe6U6xElaLUcI.roa (hash: zycLtPSuexOm8dfk3Cl/LEOroWRG6+HyAW/EmTJ/2nc=)
                          4: eVJEK86h0Ctz4Xqh6oTspJ9K_dk.roa (hash: vdnF5T2H7GhhYD+PrtRMCutXZ24r+nVOaFLiaS16mak=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:22:b2:63:49:43:21:46:0c:55:7d:0c:02:4b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31cb00d2f84401810c3200b52fa388e93651ddf3
        Validity
            Not Before: May 17 21:00:25 2024 GMT
            Not After : May 18 21:00:25 2024 GMT
        Subject: CN=93178bc8863f2fbee281ff993ab68c597bc353f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:73:ad:f8:1e:9d:7d:73:aa:bf:fb:d0:f5:5d:
                    79:37:56:35:d8:6e:a5:d5:45:f4:68:a0:e2:a3:a7:
                    08:23:c3:78:08:6d:76:69:40:90:0f:f6:c4:84:1b:
                    6c:25:a1:53:d9:db:81:ef:9f:f8:c6:52:48:ac:e5:
                    91:c8:c2:97:a4:54:b4:01:61:86:6d:22:f8:fe:8b:
                    18:f2:08:d2:b1:d2:4f:bb:01:23:ee:b5:da:cb:05:
                    aa:cf:cb:32:3d:23:a1:88:4d:18:3a:4a:38:58:fa:
                    9e:1b:6a:2c:12:3e:29:24:80:55:e5:5c:cd:c2:bd:
                    e4:66:69:a9:d0:c6:bb:0e:60:bd:7b:32:4f:5e:86:
                    0e:8a:c7:97:89:e3:0c:c2:f6:88:60:10:69:21:2a:
                    91:11:81:f6:3d:e0:54:72:5a:9e:40:86:ee:17:4d:
                    ab:88:93:1d:d3:5f:b7:8b:5c:9c:73:21:ed:b6:81:
                    1e:7b:a0:e8:c6:6f:71:d4:7e:1c:c8:9c:68:d8:0a:
                    c5:d3:1e:8a:9e:8c:79:bb:69:c8:15:c0:0d:f8:81:
                    d3:99:7c:18:31:47:17:59:e6:9c:3c:59:79:0c:74:
                    0a:a7:db:e3:39:f6:0b:fd:78:21:7c:4c:c2:51:f0:
                    00:8c:2d:d6:c2:c1:42:0f:6b:7b:b9:a8:4e:c5:a6:
                    d0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:17:8B:C8:86:3F:2F:BE:E2:81:FF:99:3A:B6:8C:59:7B:C3:53:F7
            X509v3 Authority Key Identifier:
                keyid:31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a9:bb:16:4b:b9:80:75:a9:81:07:62:94:1e:92:d2:3d:ac:
         31:d4:2b:ca:05:33:8c:8e:64:46:0e:7f:d5:b8:3b:0c:5e:2e:
         d3:e8:4e:a7:57:ca:e5:62:a8:e2:9a:39:41:6d:8e:68:f0:82:
         cd:01:a2:de:da:8e:92:66:43:fb:83:88:c7:34:8f:a2:9a:00:
         16:d0:47:b5:41:1b:67:81:51:4f:77:f5:6d:1e:3e:25:30:07:
         63:94:e1:fa:ec:24:f0:7c:ef:09:b1:71:bc:15:07:8a:17:5c:
         68:12:84:c5:7c:cb:6b:a7:44:0e:03:6f:3c:ba:a5:6d:94:b0:
         38:1d:06:7a:91:88:a4:92:28:29:cc:74:b2:df:32:93:e2:7e:
         13:e8:1b:4d:65:e5:df:4e:72:47:61:d0:05:08:96:05:12:f1:
         4e:66:65:86:cf:7c:10:c6:37:f4:79:a8:e0:ad:5f:98:b5:b6:
         72:6c:36:15:c8:e0:c2:1b:51:af:75:f1:ab:bc:1f:aa:93:18:
         d3:6b:c1:fb:34:da:1a:c0:b7:bc:4f:98:a4:4f:d9:7c:fd:20:
         ce:c7:3d:b6:ae:06:07:bf:c6:ba:e7:1b:b7:e6:96:8f:dc:4d:
         eb:c1:d2:63:da:dd:07:64:2f:19:80:d3:01:49:0b:2e:da:fc:
         fd:eb:34:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----