Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
File:                     h74JMJcJfERX_1qj5Yk8jBVDJhI.mft (raw, json)
Hash identifier:          /9QLzyTypBNKdsmZOlM3/tq/N3fhsiCrKE/V1WOwW4k=
Subject key identifier:   AD:52:BA:DE:93:3A:2B:C0:38:F1:AA:FB:0C:B3:B2:9C:E0:01:7F:22
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Certificate issuer:       /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial:       018F87B6AB268B2536544EA3DE0233921320
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
Manifest number:          0E03
Signing time:             Fri 17 May 2024 18:00:46 +0000
Manifest this update:     Fri 17 May 2024 18:00:46 +0000
Manifest next update:     Sat 18 May 2024 18:00:46 +0000
Files and hashes:         1: 4s7BTSW0AudaH1ml8sYqKziR194.roa (hash: mqmjeA8s+n+v+gEdWzfW8uF2f+ERtw91nI7Dh/2AWBA=)
                          2: 8wBZnw2BLLPt2kpPM0AkpBik8ZQ.roa (hash: LiXcfSTLLuJAxrL1yIExe/DdcF5qNzmnen17v6fyvXM=)
                          3: BZaO1sP7MOhJq2rOiVjmlLYSGUo.roa (hash: vd6WIxbRL19nu34YKQlZanBk2BFKTIdpVBh0aLvBEfI=)
                          4: KUSYuZCBPvJ6xRup0Y00ku_h7n8.roa (hash: QGJHu1GhBmeHnm3SIs8eMKNqHLTK3Xbwrtk9Hd7N/j8=)
                          5: bC8iiFUQqEKwr9wp_qAeWA7cBI4.roa (hash: P2wniniN2KWgolt+mTDRtfdfdWbu9EdU3+5KQU/zOzI=)
                          6: fOZIQv5k5rh2_C-4fLRQO0s4p0I.roa (hash: Rhe7ISQrWmCDYfiE3+rQ966MDWE9NCvtX/NFJWqANXg=)
                          7: h74JMJcJfERX_1qj5Yk8jBVDJhI.crl (hash: GnrQoViEiIw3tyREqC9UWc94Qbe0FiCI/6XHKMlw/V8=)
                          8: xvd1bdgqmIbAZDO90b1jupe-C6Q.roa (hash: vUhMEi6q/HD3hVf78E7dvunimuZ7/iExB5uAgfw7iBA=)
                          9: zjIGaBW1fi4A-WFNYUQtva3xDZ8.roa (hash: 6QOpGwPOUFdMHOUzcLtXszh6C4ke0Uz4nt9mdZUDuVk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:ab:26:8b:25:36:54:4e:a3:de:02:33:92:13:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
        Validity
            Not Before: May 17 18:00:46 2024 GMT
            Not After : May 18 18:00:46 2024 GMT
        Subject: CN=ad52bade933a2bc038f1aafb0cb3b29ce0017f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:5d:b8:c7:18:0a:a8:1a:10:3f:39:b1:df:
                    8c:0a:20:c5:0e:32:dc:fc:a6:22:67:c4:ef:67:00:
                    04:10:0e:4f:0d:85:a6:7b:ca:7e:cc:e8:ac:2e:a2:
                    2c:02:0f:81:eb:e4:76:b4:14:b6:1a:a5:84:af:80:
                    24:45:56:68:d8:67:92:17:d5:37:47:8c:1c:ec:a3:
                    87:cc:fc:2f:5e:9b:f3:1f:62:8f:bd:ca:7d:73:bc:
                    03:93:11:45:05:1b:ab:44:f7:6b:11:04:8e:24:8a:
                    c9:43:ef:36:5c:e3:21:82:bc:48:34:b9:54:db:a7:
                    b7:ca:43:3b:05:42:d9:34:74:47:a7:56:67:cb:8e:
                    2a:04:01:1b:33:24:0d:9a:df:bc:c1:ff:82:bb:53:
                    5f:c2:2e:89:6c:28:66:a4:59:eb:ce:18:5a:35:92:
                    3b:5f:32:0e:3f:91:3a:b3:11:7c:ed:71:5e:43:44:
                    6d:e2:41:2d:26:b3:d7:21:8a:36:ba:d0:97:74:7f:
                    00:73:58:4b:02:f9:51:72:f8:57:e6:aa:ee:bf:4b:
                    8a:44:d7:50:e2:c7:37:9c:43:44:91:d0:60:f7:81:
                    2b:7e:20:5d:e8:4c:51:4b:e2:52:2e:16:3a:e3:83:
                    47:a5:63:1c:c0:24:22:61:c0:d8:a1:eb:09:54:3f:
                    0a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:52:BA:DE:93:3A:2B:C0:38:F1:AA:FB:0C:B3:B2:9C:E0:01:7F:22
            X509v3 Authority Key Identifier:
                keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e2:aa:cd:70:99:de:a1:fa:fc:45:65:2c:1f:0a:66:91:cd:
         80:d8:7f:ec:e1:98:ab:f9:a1:34:0a:c1:f5:a0:4f:ab:77:3f:
         6e:76:ff:4d:64:01:7e:fe:3f:30:a8:7e:d1:c7:a1:0e:02:b8:
         aa:a6:86:1a:47:39:de:cf:a2:3f:6f:d1:d8:9d:b7:0a:1f:9a:
         ea:55:50:0b:03:1d:ae:b3:7f:dd:1e:c1:c4:21:15:84:66:0c:
         04:6d:4b:37:04:30:45:d8:fb:d3:c3:c5:91:10:16:f3:e8:d8:
         0d:c8:82:40:9f:24:15:24:dc:42:49:a5:fc:c8:74:6b:2c:57:
         02:7f:97:f0:f5:87:67:50:97:8f:20:aa:ba:af:f0:8a:66:62:
         db:d8:e1:af:f4:0e:4a:8e:fe:b7:ef:67:31:f2:46:da:e7:35:
         f2:f5:80:a6:ed:05:99:dd:d8:7e:1b:d3:49:df:13:55:b2:b2:
         9d:f7:be:c7:db:c0:6f:91:8d:94:db:36:76:f6:68:01:df:f3:
         24:e6:ce:8a:8e:f6:e8:e6:5e:fa:92:c9:f7:e1:ec:dd:f9:1c:
         2b:56:a8:ce:62:9e:67:c9:f6:98:34:32:59:ea:2d:ce:24:85:
         34:e6:b4:f2:4d:db:0e:f5:64:32:d0:52:11:9f:ca:67:b1:b9:
         45:35:80:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----