Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
File:                     hEWCynBHF-sMlL5NiUE_S8LYuOU.mft (raw, json)
Hash identifier:          sxKTutDERt8nr+zv2EU5/6hB0Lh3LnuF9BiQ5I0t+pc=
Subject key identifier:   EC:8D:71:E1:EB:E4:11:79:92:45:8E:DD:69:D6:A0:0E:7D:2D:97:34
Authority key identifier: 84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
Certificate issuer:       /CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Certificate serial:       018F8748D14F70D3751CB5654A697EBBAA25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
Manifest number:          04BA
Signing time:             Fri 17 May 2024 16:00:47 +0000
Manifest this update:     Fri 17 May 2024 16:00:47 +0000
Manifest next update:     Sat 18 May 2024 16:00:47 +0000
Files and hashes:         1: 7-Yg20M_Ye3yBcih56zR45G_65E.roa (hash: OQ2noUmL21ZQ32gRmGYGz3A4iwpa3rKMLk56zsRdssU=)
                          2: SjwnSK46vCNi7OUZXpQIR2HzOhE.roa (hash: SLuA6D+AER4vxLTWKIHbpVGz+G7I6E/14CaA7Clp0k8=)
                          3: cOf26ChQ9Tr--QXjH4BjX7K4fqk.roa (hash: KclI6iglDq3nm4WzsUE31SVW9GYNuWCAI3bVqCBV8bA=)
                          4: hEWCynBHF-sMlL5NiUE_S8LYuOU.crl (hash: lkZUypyXIu0Pxg6uhhjazYjEBRTGvda/CSxuqwiGwbc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:d1:4f:70:d3:75:1c:b5:65:4a:69:7e:bb:aa:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
        Validity
            Not Before: May 17 16:00:47 2024 GMT
            Not After : May 18 16:00:47 2024 GMT
        Subject: CN=ec8d71e1ebe4117992458edd69d6a00e7d2d9734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e0:ff:ad:0f:7d:b6:96:ef:92:4a:20:29:74:
                    05:90:4d:12:3c:eb:93:d7:9c:ef:1f:f0:46:f0:a8:
                    8e:87:18:51:6d:ee:d5:80:89:92:81:dc:bf:d0:bb:
                    0d:b3:a4:a0:bc:a3:11:b7:4e:56:5d:25:ef:30:db:
                    57:1a:b5:2d:34:32:b2:c4:44:3f:fc:d2:fb:a8:79:
                    98:82:48:16:7d:2b:d8:ef:65:49:46:97:41:b2:4c:
                    1a:a2:83:7a:f8:5d:8f:cd:10:80:fe:73:0d:cb:67:
                    c3:3e:d2:49:8c:83:57:22:0b:0a:79:71:b1:f0:63:
                    6d:3f:da:c9:1a:11:90:38:9c:7c:ec:15:1c:17:db:
                    2e:fe:ba:bc:a7:18:bf:bd:e6:d6:a8:7d:c6:87:1d:
                    0c:d1:5e:30:0d:dc:1f:4c:69:4f:51:88:21:77:03:
                    e2:bd:d3:d1:e1:22:a8:cd:38:a7:1c:6e:71:5c:23:
                    4c:60:c7:db:58:49:77:55:bc:8b:96:77:5e:5a:10:
                    b8:71:0a:80:1f:8a:86:47:25:2c:d4:c5:93:d8:e0:
                    57:45:d4:d3:3c:ab:3d:2d:cf:89:fd:d1:3d:60:d0:
                    d0:5a:f8:15:bf:34:16:78:1b:ce:5c:39:ba:86:fd:
                    2b:6d:c0:79:fd:a8:c7:c4:f7:1e:b5:b6:e8:90:6c:
                    01:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8D:71:E1:EB:E4:11:79:92:45:8E:DD:69:D6:A0:0E:7D:2D:97:34
            X509v3 Authority Key Identifier:
                keyid:84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f6:01:9e:98:bb:5f:6b:6e:6a:c4:e0:60:67:73:fd:2b:bd:
         4b:5c:60:f4:34:89:16:e5:bc:74:67:c6:dc:4e:19:63:16:21:
         c3:93:55:fd:f3:5f:df:fb:6d:68:6f:b9:4e:fa:06:76:e7:99:
         e8:cf:77:a0:ba:b2:c4:0b:78:62:21:6f:71:44:95:94:0c:9b:
         86:54:1e:f9:d8:dd:1e:b9:e7:47:44:37:31:9d:e4:47:a9:83:
         83:2a:9e:26:03:d5:e5:6b:0e:5b:dd:83:36:5e:e3:ef:e8:33:
         6f:3c:11:97:a4:63:ad:5a:cb:80:12:1f:a0:d1:88:7b:bd:32:
         da:86:66:45:a8:ff:b6:3a:3b:6d:3b:5f:67:e4:4f:bf:3c:6a:
         0f:e4:f4:db:80:ca:4c:f6:49:c8:4c:41:4c:1b:6c:82:e6:55:
         80:31:38:3d:22:65:a4:94:8f:8f:02:a0:84:52:04:e9:28:e6:
         fc:9b:db:1f:6d:ca:0f:60:10:a8:8b:2b:76:db:bd:d5:33:73:
         fc:f3:7d:ce:12:1c:65:91:7b:6b:ff:3d:4a:0b:72:17:ce:0b:
         f1:a3:97:a7:23:96:93:68:25:1a:66:e6:d3:f0:55:9a:ff:a8:
         d7:61:af:a8:f3:43:01:25:cc:08:52:3f:bc:2b:55:4b:08:f6:
         7c:ce:b0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----