Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
File:                     _x9hW5GDn1HtOltTdTsnsCx22pU.mft (raw, json)
Hash identifier:          gOV5Ab30cneci31t35trJwqESSg1KaV3hjCRIF2UWKA=
Subject key identifier:   39:4A:6C:36:62:43:C4:FF:30:37:66:5D:C6:10:E7:64:F2:94:2D:D8
Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
Certificate issuer:       /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Certificate serial:       018F874905AD9A5AF076277BA4EDA4A3822F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:01:00 +0000
Manifest this update:     Fri 17 May 2024 16:01:00 +0000
Manifest next update:     Sat 18 May 2024 16:01:00 +0000
Files and hashes:         1: 5N3mMfZ7p9Hlz-2Wf4_fC62WzO8.roa (hash: wulJ4WyhP9C0sVmFJlUPDLYFVgxV3AJ/dkKG9LWwfUA=)
                          2: _x9hW5GDn1HtOltTdTsnsCx22pU.crl (hash: Y49hOI+3S2bYXJqGPYp9nmHL6Odxc1UG0LECTOcgK88=)
                          3: eUmfuZZ-oXCYp48DDsj212zIaK4.roa (hash: 3CNtL1O87jF12eD2l3FTPjmD46JY1glDdX5+tHCZ74M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:05:ad:9a:5a:f0:76:27:7b:a4:ed:a4:a3:82:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
        Validity
            Not Before: May 17 16:01:00 2024 GMT
            Not After : May 18 16:01:00 2024 GMT
        Subject: CN=394a6c366243c4ff3037665dc610e764f2942dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e2:f2:20:5b:99:68:1d:68:d2:fb:4d:71:93:
                    d9:9a:1b:d4:75:98:1a:87:a3:49:d1:a3:08:ca:95:
                    04:83:e8:48:51:b5:d3:0d:ec:3a:77:0e:36:5c:9c:
                    71:1b:03:49:ec:9c:ae:f5:13:6c:9b:c5:e9:60:d4:
                    a1:44:e0:63:01:16:03:cb:f5:5f:9c:93:d7:a6:9a:
                    7b:b5:9a:da:85:ff:19:1f:53:c0:db:b4:b4:7f:95:
                    a6:ed:f5:5a:0b:2b:3e:81:87:a1:0b:17:2f:9b:8a:
                    44:2c:bb:34:6e:4b:6f:6d:cc:6b:a8:04:65:1a:28:
                    2f:df:09:51:91:71:c9:e0:50:a6:4a:19:1c:6e:a2:
                    f5:3b:06:a3:8c:ac:c5:e9:d7:05:f4:9a:c6:f7:4e:
                    ab:ab:0f:06:c0:e4:d4:28:16:c0:5b:e3:c4:74:48:
                    cb:a4:6c:70:06:69:c6:03:d6:cf:9b:fe:92:ab:cb:
                    1e:22:1d:0e:0f:77:e3:56:5e:f2:fc:1d:2d:aa:26:
                    7e:13:59:19:bf:c5:e2:59:ef:a7:00:12:f3:55:01:
                    8b:2e:1e:84:44:6d:60:2d:da:41:12:bf:48:94:f5:
                    43:12:6f:74:02:06:cb:38:17:20:80:b6:9d:9f:aa:
                    f7:42:00:f5:af:e3:a6:de:df:1c:2f:df:17:6c:b6:
                    ca:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4A:6C:36:62:43:C4:FF:30:37:66:5D:C6:10:E7:64:F2:94:2D:D8
            X509v3 Authority Key Identifier:
                keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:16:65:20:d9:d6:3c:c6:40:b1:37:eb:0f:92:aa:66:5e:95:
         f1:bf:f8:1c:82:ac:b9:6d:ec:47:e0:a1:dc:d1:25:24:03:4f:
         51:f1:e7:e9:af:47:92:e7:65:c4:4d:df:65:1d:f1:20:3a:28:
         a5:bb:08:62:c9:d5:6e:c9:68:8f:f7:56:9b:11:7b:f1:04:0a:
         f7:60:b2:53:5b:b5:f7:73:10:71:de:47:03:f6:58:17:7a:3a:
         68:2d:9b:46:4b:62:4f:89:ff:80:0c:04:b0:ea:34:e4:61:a1:
         64:e9:d0:b1:2d:94:6d:b5:09:72:8d:db:be:46:6b:cb:c9:82:
         76:be:98:d9:b2:7f:e9:53:7e:e0:a3:71:46:8a:40:e0:d0:7c:
         70:c9:a6:b2:aa:54:c2:05:e1:59:80:e6:28:a4:72:5a:34:a6:
         a8:c8:91:77:e9:49:67:79:b9:b5:b3:3e:4e:d3:ae:60:8c:79:
         6f:24:fc:ce:6a:5f:f7:d8:da:b3:81:27:f6:08:ca:6e:3a:dd:
         71:e1:4f:4b:ee:79:ba:ce:80:e9:bf:74:40:96:6b:30:0f:46:
         0a:50:d7:3c:bb:86:8f:8b:3e:6c:38:98:7d:69:97:9d:87:e3:
         9b:ce:bd:91:62:13:28:fd:88:e4:62:5c:b0:62:73:e1:9a:8c:
         83:60:a5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----