Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
File:                     _rhNn4-eMxVliaXr9yIgOomeClE.mft (raw, json)
Hash identifier:          ZkEMD7J1W1oObskpo+ttn9/mkWd085qYxFYGHpsdlBQ=
Subject key identifier:   19:A1:14:87:89:6B:13:C7:DE:47:EB:1E:10:21:94:76:A8:19:6D:16
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Certificate issuer:       /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial:       018F106853919FAB22B68844C207BF625379
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
Manifest number:          0AEE
Signing time:             Wed 24 Apr 2024 14:00:23 +0000
Manifest this update:     Wed 24 Apr 2024 14:00:23 +0000
Manifest next update:     Thu 25 Apr 2024 14:00:23 +0000
Files and hashes:         1: 4LpcpGYrt6fVEGkSYSPiVQAEh2o.roa (hash: EQYBAvaLlThqGNht1ETCVYn/q8g5DYrLGGCVB17RAlc=)
                          2: NWE2cPAGC6ekQTNRvvQBDzNbBCI.roa (hash: JYQddBlHcfkT0Fzf5sAV677CRcrL/4SBQbdwWPIfTIA=)
                          3: RzyQokfWZxJfppvqfNbidjApPGg.roa (hash: 113Rxhoul7DXH/5cTBRoEuJgb/sipBR22oH2/P9m7Lw=)
                          4: _rhNn4-eMxVliaXr9yIgOomeClE.crl (hash: 1z8LJAd1mfTU96K4RT2Ks2IpeP5sHdF61nyJlTnynOs=)
                          5: xcHNitLb9aO9KKFeoLbAhjawNbk.roa (hash: x5fFdrDyNY+rQ0+Uhn+sSfPeEHDm8RE7R9gBjffHymo=)
                          6: y0tVikKKa4RT2SEY-CksoBOxpiQ.roa (hash: 2Y7v6e7D4GiWw+0l7F7wtOHschzQOEyJAJcFL408en4=)
                          7: yJdumWwVYiSKS8VI5gvTdgFpbeU.roa (hash: hBIzIO3zEnYPx7vs9kl6JN5yTUWVMJQ4gdpi7rOxflw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Apr 2024 14:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:10:68:53:91:9f:ab:22:b6:88:44:c2:07:bf:62:53:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
        Validity
            Not Before: Apr 24 14:00:23 2024 GMT
            Not After : Apr 25 14:00:23 2024 GMT
        Subject: CN=19a11487896b13c7de47eb1e10219476a8196d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8f:29:bb:e6:2e:a6:e8:b9:47:70:15:d9:44:
                    8c:de:3c:3f:1b:fe:e5:00:0e:fc:0c:f7:3a:2d:a3:
                    0f:cb:84:8a:53:84:20:e2:1b:98:65:69:c4:22:31:
                    91:e2:81:f9:f5:3f:8c:2c:10:39:86:fb:8d:da:25:
                    aa:4f:63:3e:ec:55:b2:14:28:5b:49:d2:5a:74:27:
                    d4:30:cc:69:f2:24:58:92:0e:c6:63:c0:0a:3e:43:
                    bf:c4:63:46:d8:bd:cc:fc:f0:51:fb:1a:11:49:a7:
                    a1:72:f5:79:ec:6d:79:db:48:0b:33:5c:7d:25:08:
                    27:6a:6a:6c:b4:78:14:61:54:da:3a:99:f2:86:32:
                    de:23:87:a1:c8:f8:81:23:01:c0:fc:d0:1b:3a:f3:
                    39:ae:a3:e3:52:52:7d:42:5d:9e:7e:dd:76:de:56:
                    2d:aa:7d:14:98:71:a0:51:da:36:78:d0:e8:fc:34:
                    3a:bb:c4:b8:b6:c9:09:00:4e:e5:43:62:0c:ad:2e:
                    91:d1:43:a7:00:84:fe:83:d8:21:26:4c:ab:2c:df:
                    b3:65:bc:74:d3:3c:4f:d3:95:06:ba:ca:f8:23:48:
                    f9:e6:0f:2c:ec:bd:ea:b3:2b:a0:37:e3:fb:fd:26:
                    f3:b3:19:11:6f:cc:92:2a:b7:3a:10:11:c5:0b:c2:
                    c8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A1:14:87:89:6B:13:C7:DE:47:EB:1E:10:21:94:76:A8:19:6D:16
            X509v3 Authority Key Identifier:
                keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:05:ec:52:a8:7b:4f:ea:48:27:8a:8d:4b:9f:58:77:ed:0d:
         64:7a:ce:b5:38:c8:42:66:10:f7:ab:e3:0a:a2:9b:5a:e9:c1:
         77:3e:78:50:ed:b6:51:ee:bd:79:ed:2b:cd:8a:3b:7d:ea:63:
         e9:60:ac:a5:cc:d0:13:58:3c:59:99:a1:c8:db:21:9e:f0:b1:
         85:7c:06:67:66:e0:7f:8c:41:fd:3b:f4:e5:09:77:ee:ff:40:
         d7:4a:ec:a6:3b:55:ce:41:c0:4e:dd:2a:b0:f9:75:5e:a8:c1:
         3e:42:f3:15:f3:6c:56:db:c0:1e:6a:82:a7:ba:54:1c:4b:c0:
         06:d0:bf:17:7d:be:41:b9:2b:66:85:53:3b:36:d3:c6:d0:2f:
         a6:d6:41:81:58:28:0b:cb:dd:d8:d5:6b:c6:72:f1:b3:01:f9:
         8e:b2:bd:3d:f3:55:ff:4c:c0:63:38:0b:5b:c4:a9:e1:8f:85:
         1e:c2:77:a7:7b:10:fa:ca:d0:26:a8:50:1e:ac:d3:ec:88:94:
         21:43:51:2e:09:17:a4:70:a7:6e:d1:27:3b:30:0e:60:c4:49:
         68:2c:54:f3:ef:f5:db:71:12:a9:df:df:a4:b8:3b:e8:2a:12:
         cf:ba:1a:16:91:45:48:9c:f5:9f:44:86:f3:c4:21:2a:50:23:
         56:6c:8d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----