Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
File:                     piqMeh9qTJSeAntTadl9dXbhR_g.mft (raw, json)
Hash identifier:          3MCg8Y4nOi2yy+CIvT4BfZyrFQ95YpwzLLJJtdrZnyA=
Subject key identifier:   4E:71:03:EB:62:9B:C9:82:92:35:95:52:7B:8E:E4:01:FD:38:D3:90
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Certificate issuer:       /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial:       018F87ED2CB31017A79786519979700BC929
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
Manifest number:          05BB
Signing time:             Fri 17 May 2024 19:00:18 +0000
Manifest this update:     Fri 17 May 2024 19:00:18 +0000
Manifest next update:     Sat 18 May 2024 19:00:18 +0000
Files and hashes:         1: 5eh4fkMHgdxhcnMnQOLx6lmMnAM.roa (hash: LTAoXXPlwFZeJfEIyR3ZrPaHOKMVaiMzThxf+JIzWk8=)
                          2: JJbdUwMjC_divfP-VO9xGbEVYxs.roa (hash: Dmkw/HCOky3z6DKi1BSv0SNGZV+vjmXZdhxs1ryu5/k=)
                          3: Otcd3VGeiVgymMuhPcnL3yIacRU.roa (hash: uzRmC3Mh3vLn9KUAFqQvV5OM+VvTbbWyKIi3vRmtHp8=)
                          4: piqMeh9qTJSeAntTadl9dXbhR_g.crl (hash: /4nc3wv0s5G+RbRJ6pZxcV+xKMOCZCYfpwZbjWpG3ls=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:2c:b3:10:17:a7:97:86:51:99:79:70:0b:c9:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
        Validity
            Not Before: May 17 19:00:18 2024 GMT
            Not After : May 18 19:00:18 2024 GMT
        Subject: CN=4e7103eb629bc982923595527b8ee401fd38d390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:77:da:0c:8b:f8:74:6a:3f:44:83:46:2e:f9:
                    55:76:70:73:45:71:a6:6f:16:d3:4f:56:8c:94:d9:
                    c0:25:68:2c:8a:2b:22:b8:1a:26:65:0c:08:05:4d:
                    51:de:35:f2:46:4a:b6:3f:69:70:72:74:65:34:33:
                    9d:fe:d1:bf:ea:ae:4f:5e:26:4c:d1:51:cb:9f:44:
                    d6:f3:4a:c0:e7:de:0d:b8:29:de:58:0f:84:c6:7c:
                    cc:74:dc:1f:6c:35:0e:7c:4c:aa:83:e8:a3:ab:b2:
                    c0:90:d5:53:a5:6e:c8:f5:32:03:aa:52:c8:cf:f9:
                    75:c1:48:00:56:0a:fd:66:96:c8:90:d9:fb:58:9d:
                    3b:19:3e:8a:83:12:dc:91:8c:ca:9b:83:89:d7:47:
                    48:c0:eb:0b:ea:9a:3e:7f:c9:fc:a6:75:d0:af:b2:
                    e9:1b:fa:45:99:c5:67:8d:43:db:ca:35:7a:e7:20:
                    d2:1f:73:da:0c:7e:ce:c5:39:db:db:31:1c:ac:29:
                    b9:06:16:dd:de:6d:41:a7:a4:25:fc:35:1f:47:95:
                    57:5a:c3:d5:b5:5f:55:38:41:8c:57:30:76:0c:48:
                    1c:5a:8f:86:c5:9b:c2:f4:59:d9:45:45:23:a5:bb:
                    31:16:66:b8:b1:45:c0:33:6f:51:8c:83:39:5b:29:
                    14:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:71:03:EB:62:9B:C9:82:92:35:95:52:7B:8E:E4:01:FD:38:D3:90
            X509v3 Authority Key Identifier:
                keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:32:80:d8:3b:9a:4d:8f:eb:12:8d:2d:8a:7f:d0:b4:2e:b0:
         b0:19:78:24:7c:43:62:27:2f:bf:58:8e:50:97:18:53:e8:29:
         3d:90:77:99:2a:77:93:48:51:2c:df:c1:6d:a4:f2:34:05:ab:
         ec:06:ea:25:d3:c2:8a:31:8e:ae:36:6c:ca:d7:e8:94:df:2e:
         37:05:62:ce:95:9f:7f:30:b0:04:d4:06:5d:fb:69:a0:b1:a9:
         44:4b:56:c8:53:3d:36:33:1b:b6:33:79:93:69:6e:d8:60:95:
         64:fe:d1:04:c0:87:e5:d3:84:ef:6d:7d:6d:82:0b:27:3e:e7:
         08:32:d2:30:1c:d1:9c:3f:2b:4b:a8:d4:80:f7:e9:12:22:fd:
         bb:19:7b:62:39:32:bd:bb:c8:69:ca:fd:c0:d1:ce:41:14:12:
         14:2b:b7:c4:9f:63:3c:21:47:d8:97:05:3f:a7:84:27:a3:0b:
         ce:43:b8:4e:14:df:5d:ab:16:1f:f5:2f:fc:bd:2c:c2:56:4f:
         73:6b:0f:b6:50:1f:9c:21:c3:6a:2c:d3:fb:b5:27:84:00:96:
         b1:a6:09:8b:2a:09:ec:e2:40:38:91:12:63:7d:c1:7e:5f:a0:
         cb:47:70:44:7e:4f:36:2c:56:d3:9d:2c:2e:32:6f:58:4b:0d:
         14:88:85:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----