Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
File:                     lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft (raw, json)
Hash identifier:          VmswqIxm1m/lZctAZw8ZrOYJIsYWqLjrsu+0wdL0I4M=
Subject key identifier:   31:A0:8B:DD:03:EE:4D:18:08:B0:13:D7:EA:07:9E:59:F1:7E:A5:5D
Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
Certificate issuer:       /CN=949ff40831ca66f996c76ea466af49476fecd1ff
Certificate serial:       018F87B639FDAAE29EBA7D6E97D4DD859F5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
Manifest number:          0F56
Signing time:             Fri 17 May 2024 18:00:17 +0000
Manifest this update:     Fri 17 May 2024 18:00:17 +0000
Manifest next update:     Sat 18 May 2024 18:00:17 +0000
Files and hashes:         1: LUWZzkXfA6tH7kZO7jIhXlx6fCk.roa (hash: t9q+GRa4a8GiGJBsYu/wzUJIIfzAwe8cjUXBQIq2rl8=)
                          2: lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl (hash: 8EDKemD0XK66ZD4ODvSsVPPgl2yIfGP95o8OhWMAews=)
                          3: lK7U09NkZX5B7onqkU9gVrGg4rk.roa (hash: 4vNIlyMHfYrUla4+oVBBzbIa2g79VlnL+cbuq13mVNY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:39:fd:aa:e2:9e:ba:7d:6e:97:d4:dd:85:9f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff
        Validity
            Not Before: May 17 18:00:17 2024 GMT
            Not After : May 18 18:00:17 2024 GMT
        Subject: CN=31a08bdd03ee4d1808b013d7ea079e59f17ea55d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b3:3a:63:d7:70:18:15:90:c9:7a:42:f5:df:
                    2f:76:18:6f:c2:bb:d7:07:5a:94:47:bd:c6:bd:4e:
                    2b:41:2b:55:5c:be:c1:31:0b:cd:d7:92:d6:8e:70:
                    4f:74:cd:16:70:c3:f0:d8:71:45:83:e6:19:d0:a3:
                    8d:de:5f:a2:00:2e:be:ba:33:35:90:46:62:3b:b6:
                    76:32:c9:ae:a3:eb:b5:c7:1c:f7:eb:ce:78:f9:81:
                    0b:05:bd:7a:d0:b5:b7:f5:f9:0e:0c:4c:9e:4f:3d:
                    97:0b:78:0b:3c:a9:66:89:fb:d3:b8:86:bb:30:ae:
                    2d:6c:71:78:21:69:bf:db:ab:ed:2d:ab:2d:e0:0e:
                    27:4d:be:33:51:e4:a6:da:87:d2:fe:46:57:08:5b:
                    74:22:55:8f:ef:d2:b0:81:83:56:87:fb:28:e5:ec:
                    b3:b4:f3:ec:89:bf:6b:53:f1:7c:da:32:a0:af:f3:
                    e4:d2:92:25:52:20:06:b6:19:33:e0:9c:6a:73:66:
                    29:a8:bb:1e:1f:66:d7:b5:b6:cb:49:76:85:dd:3e:
                    09:60:0a:af:82:e8:c0:61:8e:f8:ed:88:f5:fc:22:
                    07:ba:0b:33:e7:c1:a4:d1:db:7c:48:64:0f:23:8f:
                    ae:e9:67:b3:99:51:4f:ff:4d:c5:da:de:56:32:6f:
                    ed:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A0:8B:DD:03:EE:4D:18:08:B0:13:D7:EA:07:9E:59:F1:7E:A5:5D
            X509v3 Authority Key Identifier:
                keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:4a:52:8e:c7:3f:60:30:47:92:e7:ca:1b:72:69:d1:aa:9b:
         d8:e3:b4:e8:4b:fe:dd:7c:26:89:ab:33:51:ac:e3:0f:52:b4:
         3f:37:8c:e2:88:a1:7d:53:d1:53:48:3b:b2:a3:80:4e:41:1a:
         48:d0:d7:85:f4:bf:f4:00:07:d3:ba:d4:b3:d9:b0:26:aa:bf:
         17:89:18:7b:6f:68:f5:ef:58:43:ab:4e:81:91:30:73:9c:9f:
         b9:a4:ee:1d:36:50:61:f6:ab:9a:f6:3b:c6:fd:e8:2b:85:60:
         88:89:8d:fc:1d:17:25:ae:73:cf:ca:ef:38:0f:cd:2b:77:18:
         39:c3:7b:52:86:db:79:85:91:0b:35:d5:56:94:b9:03:45:f7:
         dc:2b:c1:00:83:34:c7:d2:6b:ea:67:a2:9f:1e:99:dc:5e:1e:
         4a:11:36:db:e1:cb:09:eb:fe:8c:30:e0:97:8c:a1:5a:29:69:
         9a:8c:a4:d3:4f:f4:28:b2:61:53:4f:79:43:18:46:c2:54:bb:
         90:6a:69:69:10:04:09:65:70:10:43:66:32:62:7a:18:16:6c:
         d6:31:4d:fa:10:d8:a0:5d:50:92:e8:b9:8c:00:45:3d:c6:ea:
         6a:81:5f:e5:1b:a0:0b:79:f7:32:e1:37:4d:dc:47:6e:27:57:
         19:a4:44:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----