Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
File:                     4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft (raw, json)
Hash identifier:          gcxMCWOaHyCavq2XMW1bSKUIEE11iUiwlORzAS7wBws=
Subject key identifier:   31:96:41:0F:F0:90:63:9A:68:13:AC:AA:78:7A:E5:E6:85:26:19:82
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Certificate issuer:       /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial:       018F89393F1B33B380CCEAA76D8903161B86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
Manifest number:          0CD3
Signing time:             Sat 18 May 2024 01:03:01 +0000
Manifest this update:     Sat 18 May 2024 01:03:01 +0000
Manifest next update:     Sun 19 May 2024 01:03:01 +0000
Files and hashes:         1: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl (hash: qP4XkHCIDiietd4Dtl7Ab5QvpRBgfmz5kmAdK9PEBGE=)
                          2: Qjat3qMRFyVwfROAwxdYU8ulVCU.roa (hash: dEICHLzVcs/aY39snVqHpMeYRlFokk6nCh/MKl7UYSU=)
                          3: qABfhholBWipFsC2UrNWNQ4pljQ.roa (hash: y7zkCPs9WVMWDbCOtR+MWu9hmzcXzjUQxyntMZPj0oA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 01:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:39:3f:1b:33:b3:80:cc:ea:a7:6d:89:03:16:1b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
        Validity
            Not Before: May 18 01:03:01 2024 GMT
            Not After : May 19 01:03:01 2024 GMT
        Subject: CN=3196410ff090639a6813acaa787ae5e685261982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f8:b2:08:98:0a:ae:35:bd:5d:ce:43:fc:fb:
                    7d:19:95:29:85:44:39:8a:0f:d5:4a:62:e4:60:17:
                    84:77:49:77:85:9f:27:92:2f:c5:13:d3:6f:1e:ce:
                    7a:fd:6a:6f:1a:7a:49:a0:a5:23:67:42:6a:68:b0:
                    6f:fd:cf:95:6f:4d:a8:ad:2d:a5:43:8f:65:b8:4f:
                    8d:2b:cc:0a:c4:f1:9d:5a:1b:76:b6:7f:d0:2d:20:
                    90:a1:58:a0:0c:9b:f2:21:ed:3a:81:f2:cf:a8:5e:
                    82:83:f9:33:6a:84:ad:05:68:53:d3:48:fe:be:eb:
                    c2:8e:1c:4d:fe:ec:59:78:b2:67:4d:6e:cb:2e:ad:
                    3c:80:8e:69:42:4c:de:06:db:9e:8f:58:e5:c4:bd:
                    d2:48:3c:03:9e:ca:0e:cf:fe:41:2f:13:b9:b8:fc:
                    1f:2a:f7:f2:e4:72:9d:3f:cc:f1:94:f4:3d:c2:ae:
                    a3:7e:ea:75:f1:11:3d:fc:2b:30:b7:39:28:66:7c:
                    f0:b2:77:02:7c:e0:8e:34:67:b9:cb:57:d3:a1:15:
                    27:7a:92:c3:ff:d3:d0:66:65:78:97:df:39:90:f2:
                    e1:d8:8d:4d:16:5f:58:f5:68:c5:5f:ac:dd:a1:90:
                    7d:44:2a:6d:37:de:6d:7d:cb:2c:03:2c:0e:b0:e1:
                    5d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:96:41:0F:F0:90:63:9A:68:13:AC:AA:78:7A:E5:E6:85:26:19:82
            X509v3 Authority Key Identifier:
                keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:6e:c5:03:9f:a7:eb:93:51:6b:a7:34:e4:37:67:c5:4c:f3:
         f0:36:36:16:93:28:29:53:ec:4e:df:3e:e9:14:ac:b8:9d:97:
         e7:eb:4b:f6:e3:01:83:87:2d:7f:5c:bf:a1:de:66:a9:75:b2:
         8f:68:a9:52:60:c9:8a:31:a9:78:2c:7b:7f:15:9c:a2:6f:b2:
         3b:ef:35:27:99:07:90:09:3f:ff:22:06:3c:84:31:35:8a:29:
         e4:8a:f9:74:7e:b5:3d:8a:41:3b:33:b1:f9:19:68:7f:eb:68:
         54:6e:ea:50:58:e3:08:c8:7d:4f:09:ba:0a:a8:71:f3:72:b4:
         ac:8b:8f:17:b9:7d:c1:2d:ca:ec:85:45:5c:fc:8b:ab:89:56:
         c2:c3:30:7d:d3:16:50:d2:d7:6a:97:fd:0e:17:62:21:bd:0d:
         56:e5:98:29:d5:59:41:44:53:4a:ff:7f:1a:64:13:1a:35:b1:
         17:51:eb:a9:5a:a7:fc:8d:d8:5c:87:c6:93:c4:cf:68:3e:6c:
         3b:d2:bf:bc:7b:fc:14:4f:52:67:7e:5a:e3:07:5f:1f:50:c0:
         b7:00:76:94:58:86:e2:9a:e4:92:09:fd:ea:80:53:a2:f9:1c:
         32:44:f1:41:03:49:74:e3:4f:89:ad:8b:76:ff:30:cc:05:eb:
         59:2b:97:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----