Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
File:                     XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft (raw, json)
Hash identifier:          n+GCfBeMHCGcWdB3vMVSDe/tXlIr9MNQBZpoFdXVYpM=
Subject key identifier:   87:FC:A8:CE:2F:B9:74:F9:0E:20:97:F3:8B:B3:11:19:78:95:FF:E3
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Certificate issuer:       /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial:       018F871141219EF79414E5449ED8E9A6B53C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
Manifest number:          0933
Signing time:             Fri 17 May 2024 15:00:05 +0000
Manifest this update:     Fri 17 May 2024 15:00:05 +0000
Manifest next update:     Sat 18 May 2024 15:00:05 +0000
Files and hashes:         1: 3jSdSZDBF7fycHOuYCRhPHYAt18.roa (hash: TLFPYlTd93y08Sm4SA8Nuc7F0qEX0vBF3RoDvXqk3nk=)
                          2: 8sjTg7TaEKMdcb2U36OvtEsO_VA.roa (hash: ovDdGtU4cDf9rrRrAZcxVOl7BQc/K1jgjKS7/RILYpI=)
                          3: CdQraF7f9RV1wKcU-1mzG45Rwoo.roa (hash: EFVWXiY6Q52Tf+Lb85LDYXThn83d3W+2WpbMXL47puw=)
                          4: XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl (hash: lQpKK19TNDP9qJfVPp+l9Qvbz4WYBgUgloktkd3O4dA=)
                          5: e0oVEo-E3_HMh0Fdm61CFt8CKAY.roa (hash: JJolzt+zTlsPeRIj0OtiTeMRZroElQCnP25XjQp9khc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:11:41:21:9e:f7:94:14:e5:44:9e:d8:e9:a6:b5:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
        Validity
            Not Before: May 17 15:00:05 2024 GMT
            Not After : May 18 15:00:05 2024 GMT
        Subject: CN=87fca8ce2fb974f90e2097f38bb311197895ffe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:6b:b7:7d:bd:8c:43:75:60:16:b4:1e:e4:ab:
                    f5:89:54:ae:bb:f0:11:8f:6c:6c:27:94:b0:d5:21:
                    a0:26:91:2a:95:d7:03:e8:bd:c9:5b:01:04:3f:5e:
                    f2:eb:77:9b:69:da:a5:ed:9a:9b:a5:0b:36:e7:5c:
                    7d:e7:75:84:33:2a:de:c3:2d:20:9d:37:f0:9e:1e:
                    59:fd:de:71:cb:9f:45:42:e5:2f:e9:85:90:13:07:
                    32:8a:af:97:03:0e:98:3f:79:a8:c7:35:15:fa:9e:
                    9f:18:ce:b3:fa:0f:df:c1:8d:de:f6:af:36:36:ca:
                    9f:c7:e5:f4:22:29:f9:b6:7a:45:b6:42:0d:5e:2b:
                    06:f6:73:83:af:2c:82:44:8e:56:7e:0a:5c:4a:ad:
                    90:1f:02:e8:6f:b9:6d:db:3a:da:2b:c7:b4:d0:63:
                    dc:0d:dd:38:2c:14:73:ae:c3:7e:10:89:6a:f3:9e:
                    b7:69:2b:12:f6:35:b2:05:38:69:6d:26:4d:27:fe:
                    53:c0:3a:1e:0e:c1:11:31:a1:ae:f2:4e:27:e8:46:
                    42:92:a8:7b:05:f6:44:8e:22:bf:b9:60:f0:a3:4e:
                    c6:d8:36:55:04:c1:bd:29:99:ee:fe:1c:18:0d:fe:
                    33:8b:37:b9:b1:39:98:06:41:fa:92:08:2d:22:ce:
                    fd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FC:A8:CE:2F:B9:74:F9:0E:20:97:F3:8B:B3:11:19:78:95:FF:E3
            X509v3 Authority Key Identifier:
                keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e7:c3:5c:05:1b:de:26:18:46:c9:03:78:6f:e0:07:6c:4f:
         2f:83:df:11:41:28:03:a2:3d:05:29:76:51:75:17:1d:dd:73:
         bd:bd:9d:85:dc:a2:8e:d0:2e:92:13:1b:9d:41:1b:b6:f1:f7:
         7a:49:6f:cf:1e:08:9e:23:a1:cd:7b:3d:7a:10:92:59:c6:e7:
         68:0e:16:88:3f:62:96:d3:b3:39:93:53:27:f4:b7:a1:d1:4c:
         a5:f7:b0:96:fd:79:b5:56:24:b5:68:8c:81:8b:b9:35:4d:ca:
         db:73:b6:56:7b:c4:f7:c4:88:f1:01:52:80:e6:a5:aa:b9:d4:
         b2:42:c8:a8:94:d3:45:7b:a7:82:88:d7:cb:32:58:b3:3c:c7:
         6f:b5:fb:99:d2:8c:86:6e:80:e6:fc:f9:b4:d2:2d:90:9a:c6:
         2a:71:4a:e4:df:36:c1:f5:57:00:4d:49:d7:a1:f2:93:8a:36:
         24:29:1a:6c:4d:6e:4c:30:80:38:f3:f9:92:73:14:2d:8b:62:
         2d:42:55:ab:86:97:92:47:00:4d:e3:1a:16:d7:40:27:53:b9:
         62:9e:7d:4d:0c:66:a0:af:1a:ab:e9:e1:0a:a7:f3:22:cf:76:
         53:a3:03:9c:ac:04:0f:38:d7:2b:ba:9b:99:99:a8:19:aa:94:
         9c:bf:c4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----