Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
File:                     jmNwTVUB7XWm4glm6_B6NlVbGrY.mft (raw, json)
Hash identifier:          Hk534QdW4y1PvN5a6FfwQItCU2zWwyvEeqL5yRDaBIQ=
Subject key identifier:   FD:C2:14:12:51:21:85:9B:6B:91:DF:57:DC:AF:1D:B9:3D:8C:BF:B3
Authority key identifier: 8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6
Certificate issuer:       /CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6
Certificate serial:       018F972940DD2D3C0B9812C67C7A314FB2EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
Manifest number:          0861
Signing time:             Mon 20 May 2024 18:00:14 +0000
Manifest this update:     Mon 20 May 2024 18:00:14 +0000
Manifest next update:     Tue 21 May 2024 18:00:14 +0000
Files and hashes:         1: N0Y2UmVgh5axNxZ2uBHz8ZzPncM.roa (hash: 1jG0mZsL0y7MFYXD/4PhpEQGXVkreaNMhbs2T4mVgbs=)
                          2: jmNwTVUB7XWm4glm6_B6NlVbGrY.crl (hash: dDF4GIvzSbtQPQWlV3++9HaYOZSkvlYbIF74ggqtuok=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:97:29:40:dd:2d:3c:0b:98:12:c6:7c:7a:31:4f:b2:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6
        Validity
            Not Before: May 20 18:00:14 2024 GMT
            Not After : May 21 18:00:14 2024 GMT
        Subject: CN=fdc214125121859b6b91df57dcaf1db93d8cbfb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4d:2a:df:0a:f9:2a:ac:d4:53:ef:19:78:5c:
                    75:2e:b5:66:42:af:ee:58:c0:93:50:69:6a:b0:b4:
                    df:75:32:b1:02:7a:c8:d5:13:69:57:c4:03:40:71:
                    35:0b:93:74:d5:d3:14:64:57:e7:d2:e7:dc:13:f7:
                    2e:9d:51:63:fd:00:75:ba:28:7d:3e:7c:4b:29:92:
                    76:1b:22:e2:b9:4d:7e:ab:81:de:58:14:ef:7e:91:
                    69:36:30:ce:26:a8:5d:c0:15:81:94:08:18:0b:bf:
                    68:39:23:de:d3:e6:9c:f9:a0:de:fc:60:4b:df:75:
                    1a:15:ff:45:0c:e3:c0:61:98:79:a8:7b:73:2c:4d:
                    a4:61:29:47:3b:10:35:a7:0b:4a:6c:2c:53:4b:47:
                    0d:dc:b6:59:34:7b:1c:5a:71:52:4d:ca:98:f9:09:
                    9c:b0:80:81:14:44:ed:f2:36:30:8e:e4:bb:55:1c:
                    3d:c9:52:9c:9f:55:82:f9:5b:5a:1b:ff:e1:50:da:
                    10:0a:1e:95:a5:75:4d:17:1b:5c:93:85:c8:bd:18:
                    64:35:d9:38:5c:a0:85:97:a0:66:b4:f9:31:ac:d2:
                    96:e2:35:43:5a:6a:17:70:12:6a:6d:01:9f:01:ca:
                    7c:05:28:4a:73:f0:60:8b:e4:25:be:c7:94:c4:53:
                    a5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C2:14:12:51:21:85:9B:6B:91:DF:57:DC:AF:1D:B9:3D:8C:BF:B3
            X509v3 Authority Key Identifier:
                keyid:8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:22:e2:50:17:4f:1e:80:e3:c7:9d:f0:4b:a4:a1:e1:04:c3:
         4a:1f:d6:b0:31:78:9b:89:8e:43:bd:dc:06:ec:70:29:f6:7a:
         c2:cc:52:55:c2:51:b6:a8:5a:aa:56:c9:2e:d8:44:aa:b2:6a:
         f3:fe:cd:cc:78:cb:76:27:be:45:4e:a2:35:e9:41:fb:4d:16:
         fa:f3:31:55:2b:89:c8:02:e8:34:33:48:b6:ae:b2:df:4d:ac:
         0e:06:62:46:ff:d2:7a:8e:be:60:e2:81:c5:af:7c:3c:c9:7b:
         7f:d3:bb:99:1d:d1:d3:64:6b:84:12:bf:15:85:64:e2:cc:01:
         b3:1e:cb:71:df:4f:29:f7:a6:4d:c6:d3:e8:5a:f5:34:42:84:
         35:32:94:d3:36:16:07:47:dc:b2:e0:bd:1f:42:1b:38:83:4a:
         21:35:c5:00:66:62:a4:7e:83:f8:91:d4:d3:a7:3b:ca:72:cc:
         e7:e8:8a:86:1d:21:91:28:e6:53:28:2c:2a:c0:11:31:c5:06:
         dc:b8:12:85:24:56:fc:d5:f6:49:5d:20:05:08:2b:25:e7:8c:
         4e:f1:1c:82:c9:41:56:77:e5:e6:c4:f9:02:04:97:e7:62:12:
         d7:c8:86:da:b8:c3:70:c9:0b:a8:bb:62:e9:c6:88:56:0c:f1:
         a4:4f:0b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----