Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File:                     nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier:          H1EpuZ1O0IRTa2fW1I2q2VdgvaqjwM+kNIwFLFBUyGk=
Subject key identifier:   3B:82:3E:3E:49:37:11:A0:35:08:62:EA:F2:B7:16:C4:0F:9C:1D:F9
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer:       /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial:       018F87B6CDFCD4ACB5FC694DA9F6F868AC38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number:          1182
Signing time:             Fri 17 May 2024 18:00:55 +0000
Manifest this update:     Fri 17 May 2024 18:00:55 +0000
Manifest next update:     Sat 18 May 2024 18:00:55 +0000
Files and hashes:         1: _DPipThGD68CVoCdFKNVgyd2hHY.roa (hash: DFzQUVd04qWuJY4SAnr4S+BYxqIAS2Vfoq8U3RuKXcc=)
                          2: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: 5FzA/inhOQG2XvyplXVariJG5aq0FL35xhJHXWr5oEI=)
                          3: zEx8iQuUh00Az3ebyqIxCAQcZ-Q.roa (hash: aE1eRgeYd34mM3KVcSPmN+NdQTBHWO9qMGwfo34vPoY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:cd:fc:d4:ac:b5:fc:69:4d:a9:f6:f8:68:ac:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
        Validity
            Not Before: May 17 18:00:55 2024 GMT
            Not After : May 18 18:00:55 2024 GMT
        Subject: CN=3b823e3e493711a0350862eaf2b716c40f9c1df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:24:12:aa:6a:75:a1:d7:52:b2:9b:3c:53:8c:
                    ea:e3:86:fc:5c:83:ab:cd:1a:40:13:f9:02:12:da:
                    b0:23:79:5c:ff:ec:3c:5e:09:7e:92:1c:b1:0c:e0:
                    d1:17:37:21:5a:8c:56:27:35:b6:39:37:97:0b:30:
                    e5:c5:df:54:b7:62:bc:bb:3d:bc:d9:43:a2:57:e5:
                    8d:c5:19:81:cc:d1:c6:8f:11:04:93:d0:2b:d4:2c:
                    f9:52:bc:50:c2:da:3a:93:b3:25:51:3f:cb:85:35:
                    c7:11:da:9c:18:53:92:e5:89:01:33:17:27:69:19:
                    3e:71:cb:f5:51:b3:25:dc:e1:6c:a2:32:18:9b:b0:
                    e0:28:1c:3f:72:8b:c2:b4:5b:16:db:e9:8b:2e:44:
                    48:7b:69:ba:d2:11:42:71:bb:a9:8d:bb:e3:b5:83:
                    17:89:b9:b6:29:2d:18:3b:ef:9d:2d:a6:aa:ac:2f:
                    5c:ae:9f:c8:9b:16:49:bb:24:10:33:47:ad:4f:4f:
                    43:d4:60:85:f9:0d:91:09:37:d7:ce:a9:a4:cb:e0:
                    83:1b:f3:1a:3c:c6:2a:de:ba:fe:48:8a:85:70:20:
                    bb:70:90:4d:73:96:2c:2b:7e:5b:7a:2b:65:aa:25:
                    1d:dc:4d:20:37:6b:1e:80:29:58:0c:5a:9e:f8:15:
                    57:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:82:3E:3E:49:37:11:A0:35:08:62:EA:F2:B7:16:C4:0F:9C:1D:F9
            X509v3 Authority Key Identifier:
                keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:70:02:20:d2:1c:67:65:a1:79:95:70:71:2b:31:f9:24:df:
         11:4f:df:d2:9c:ac:b2:b8:44:b6:b6:86:8c:55:c4:6b:73:92:
         cb:dd:5c:91:cd:58:5b:50:ac:d5:98:e8:75:03:ee:8e:64:25:
         fd:b2:ae:95:fa:07:e7:c8:ad:2d:66:96:c6:f1:5f:52:e4:13:
         19:14:8f:b5:0a:5e:61:3a:52:7c:2a:da:d3:a5:38:54:dc:37:
         37:e0:9a:0e:d3:89:fd:b9:6c:fe:e3:67:19:4c:87:cd:c4:8a:
         2b:45:35:9b:f3:b6:a5:80:b5:8f:61:cb:5f:d6:9b:e2:dc:bc:
         71:41:a1:da:1b:3f:c0:c4:2c:7c:6a:75:a9:19:1d:9f:d3:18:
         06:0c:60:0d:e0:b3:32:2d:e6:5c:72:77:d6:d4:e3:9f:f5:45:
         b5:90:12:b8:10:43:a0:ec:ec:8b:93:88:68:17:34:86:9b:40:
         7a:fa:c0:5f:c2:57:86:77:76:de:df:a1:f8:2f:d6:fb:5d:57:
         4f:ab:74:4e:2d:f1:a6:c9:5f:9c:ce:58:9f:50:f6:8b:aa:29:
         61:47:54:25:91:05:2c:8c:31:dd:46:e6:7e:1b:89:fa:03:47:
         77:b2:33:e7:e5:a7:97:0a:66:fb:b4:31:e6:fe:76:4f:fc:46:
         4e:93:88:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----