Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
File:                     qsIj-xlCEV5IqXVCByktAKCC7N8.mft (raw, json)
Hash identifier:          JzXlb/4HeH5wALdodMBMHFf/E5pgQqgdqI1Ef+bGQRc=
Subject key identifier:   E4:29:70:AD:F7:4C:9E:72:BB:2A:EB:A2:FC:0F:63:BD:91:1E:F7:F7
Authority key identifier: AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF
Certificate issuer:       /CN=aac223fb1942115e48a9754207292d00a082ecdf
Certificate serial:       018F885B36ADC35509F083759EAB30F20007
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
Manifest number:          03C9
Signing time:             Fri 17 May 2024 21:00:30 +0000
Manifest this update:     Fri 17 May 2024 21:00:30 +0000
Manifest next update:     Sat 18 May 2024 21:00:30 +0000
Files and hashes:         1: 1EquoB6rMY8JBmAF1YdprXEN9lk.roa (hash: li4e32XJ76Oe4M+dk9IoieU+wlh0hpqeXl6du0L38GQ=)
                          2: qsIj-xlCEV5IqXVCByktAKCC7N8.crl (hash: jKQ/E76r4clVGCHB6C/LbeuwPpdSVU6PgQbmFdnnXVo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:36:ad:c3:55:09:f0:83:75:9e:ab:30:f2:00:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac223fb1942115e48a9754207292d00a082ecdf
        Validity
            Not Before: May 17 21:00:30 2024 GMT
            Not After : May 18 21:00:30 2024 GMT
        Subject: CN=e42970adf74c9e72bb2aeba2fc0f63bd911ef7f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:00:71:60:bf:a0:18:8d:0d:ef:b6:45:87:7d:
                    6c:e7:a8:40:ca:c3:97:94:5e:7e:e9:cc:51:1b:ca:
                    5e:8c:17:b6:45:4f:ac:28:b3:36:ba:cd:a6:da:5e:
                    5d:dc:8a:60:8d:d2:90:06:a9:ea:3c:79:8c:9e:bf:
                    2b:2a:3d:03:66:1e:fe:e4:6c:a9:5f:6f:4c:1f:12:
                    35:70:01:90:58:a2:94:9d:23:bb:7c:b9:c7:30:c9:
                    9e:9a:f9:4f:f6:42:01:5b:f5:79:94:e5:ee:88:83:
                    3d:a7:a7:a9:85:33:74:45:50:71:a2:53:c9:d2:92:
                    ed:49:76:cb:1f:04:0f:1d:cf:3d:43:ba:af:b1:e8:
                    5e:d1:a9:ea:67:d7:40:94:b5:00:5b:b4:95:82:11:
                    d5:29:92:a0:56:41:f1:12:da:9d:3e:1c:cc:16:fc:
                    34:ee:41:1e:50:b3:a4:60:54:18:09:ca:f3:a0:ff:
                    7d:a1:de:b0:e4:86:24:ec:9e:7c:b0:11:41:12:83:
                    97:76:a8:c8:ed:54:c6:46:19:2c:ae:bc:23:33:ad:
                    6e:d9:f0:58:2e:a0:20:fa:23:08:31:98:46:01:ec:
                    67:19:2a:55:a5:76:e0:62:72:34:be:38:93:25:4f:
                    7b:21:85:88:dd:f7:4e:dc:23:3a:66:3e:a8:34:60:
                    64:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:29:70:AD:F7:4C:9E:72:BB:2A:EB:A2:FC:0F:63:BD:91:1E:F7:F7
            X509v3 Authority Key Identifier:
                keyid:AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:9f:27:83:1b:44:e5:1a:86:f9:b1:a5:a2:13:e1:63:e6:e8:
         0e:62:ab:7d:0c:8d:cd:3d:a3:65:58:59:18:2f:8f:75:2d:19:
         6f:67:17:63:43:86:2a:f8:e3:3f:16:28:f8:b8:a7:9e:08:b1:
         4d:91:00:00:a4:09:0b:83:8b:48:13:1a:0e:02:a3:5e:97:c9:
         2f:94:ee:ae:ac:b4:7b:df:d0:27:76:75:bd:99:00:c0:ea:cc:
         3c:c6:4f:c7:ac:2f:7a:20:c6:21:e5:f2:59:ba:c5:fd:e7:b3:
         80:0f:ed:d2:0e:23:d2:83:43:20:e4:fd:23:28:ce:6a:1f:e2:
         2e:64:b8:8a:b5:de:36:c0:12:6c:d4:84:c8:26:0f:ca:b1:74:
         7f:76:e2:3b:df:1f:f0:8c:fb:00:2a:d0:4d:7a:26:0c:35:59:
         c3:98:9f:34:e9:4d:75:14:b5:9b:9a:bf:de:47:35:64:17:67:
         6a:47:99:74:dc:bd:b6:c6:cf:6d:70:50:69:34:71:f1:1c:42:
         f1:c0:e8:30:da:3d:7c:dd:e4:6b:e4:aa:b3:1f:f6:af:38:89:
         77:b8:4e:57:01:35:31:40:a6:94:6d:7f:fc:39:3d:00:b3:25:
         28:01:bf:a0:c5:7a:5b:7c:b7:1c:01:e8:88:f9:6f:28:68:34:
         d4:e8:1a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----