Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File:                     1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier:          Qd53mG6dVClBg3caQYRPX+FVNkenBH4uP8rmH/CROz8=
Subject key identifier:   E4:00:70:F2:10:AD:BA:29:32:DA:70:97:81:D6:EB:49:00:34:B7:0B
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer:       /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial:       018F855C875C759420F910D93F47964709C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number:          0274
Signing time:             Fri 17 May 2024 07:03:04 +0000
Manifest this update:     Fri 17 May 2024 07:03:04 +0000
Manifest next update:     Sat 18 May 2024 07:03:04 +0000
Files and hashes:         1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: Oa5a5Enq/scAFgelkaFqEAj2zHAzKroWzoIMOKxVW20=)
                          2: Del0sElACeEmPxbCFxo-qrxcC6g.roa (hash: A/gI63ERSc+w9xVvJnjbE11mjwKkCVbRYSH99lAhUVY=)
                          3: OjoHo3Tazu3i72LRtxL23vbOIK8.roa (hash: bvroMcNS5h7zfQ7n0r10HWvfJC5kA2pxkVdW2W9XrIo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 07:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:5c:87:5c:75:94:20:f9:10:d9:3f:47:96:47:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
        Validity
            Not Before: May 17 07:03:04 2024 GMT
            Not After : May 18 07:03:04 2024 GMT
        Subject: CN=e40070f210adba2932da709781d6eb490034b70b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:28:21:c8:11:a7:0f:d2:a2:7c:a2:5a:5b:dd:
                    2e:0a:3f:02:32:dc:82:53:2a:e2:eb:50:e6:3a:9e:
                    03:9d:c6:f4:b7:61:88:d0:6d:eb:93:3d:b7:2b:2c:
                    a2:10:86:d4:0d:2d:98:05:dc:25:61:42:6a:62:c1:
                    91:13:82:39:c8:97:4f:d0:09:59:0d:20:2b:c6:dd:
                    10:f7:c2:9d:8d:77:5c:b1:3c:e1:ed:76:cc:f4:b5:
                    fd:ee:11:df:33:33:56:27:a0:9c:38:fc:d5:da:9f:
                    33:68:7f:9e:9c:11:3e:2e:30:44:c2:43:02:4c:21:
                    ac:d1:c2:f5:5a:fa:1f:fd:60:70:5a:4f:96:3d:ae:
                    d0:5f:7e:96:98:2f:66:7b:da:33:f7:ee:6b:40:2c:
                    32:f2:1d:f8:f1:29:2b:b9:3e:86:87:29:b1:02:44:
                    de:c4:42:f2:63:01:77:c2:00:63:8e:2f:2a:e8:a6:
                    1b:d5:19:b0:46:1d:30:a2:cb:a9:09:45:0d:d1:db:
                    2f:2a:06:32:2c:ed:cf:35:67:93:e4:59:c4:7a:6b:
                    d2:b4:43:5d:f9:fd:48:fa:a1:4b:51:8d:1e:93:fe:
                    75:41:90:92:08:f3:4a:d3:0a:58:53:37:ea:98:45:
                    35:de:43:f2:44:b9:4d:70:6d:bc:6d:d4:08:f3:6c:
                    e8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:00:70:F2:10:AD:BA:29:32:DA:70:97:81:D6:EB:49:00:34:B7:0B
            X509v3 Authority Key Identifier:
                keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:0d:1f:03:99:4c:99:e0:1f:15:0a:9c:5e:32:10:59:e4:3b:
         19:ba:1a:04:fa:e3:64:ad:5c:d3:83:9a:a2:f6:02:07:82:3a:
         60:8b:97:5a:11:3f:ae:fb:75:cb:73:1b:27:71:b6:10:b7:59:
         98:50:3c:fc:8c:09:fc:a1:a1:44:12:0a:29:46:b0:9d:a7:8e:
         e7:d0:5b:98:e5:b1:88:6e:5f:01:ae:ae:10:bb:d6:4b:6b:07:
         8e:ab:a4:9d:71:8d:21:35:7b:f9:de:39:a1:6a:d5:89:a7:df:
         e8:c4:40:51:bd:22:44:49:6b:9d:c1:b7:41:8e:cb:6e:b7:ea:
         f4:34:9c:8c:22:a8:d9:3f:41:c2:ca:b4:87:69:59:09:68:b4:
         83:9f:6c:b3:f0:cf:e4:50:dd:63:1c:dd:22:24:12:9a:b7:db:
         90:53:f6:2f:89:5e:68:cf:8c:26:0e:b7:cf:1c:b5:30:a4:9a:
         28:3a:ec:7a:7e:3a:a2:bc:32:04:db:32:a4:1a:17:f0:61:05:
         0d:31:73:78:44:0b:8a:4b:7d:ff:e4:50:ea:f7:ef:94:ae:75:
         57:a5:a5:f1:02:bf:0a:5a:c2:c1:25:e6:fe:a0:fd:06:e3:be:
         e6:fe:59:d0:c6:1f:d4:d4:e9:52:c3:fa:a4:8f:5b:90:d8:dc:
         c6:29:02:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----