Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.mft
File:                     eqYGEXu19-QWDvJo-fSqBFc4BEE.mft (raw, json)
Hash identifier:          28uayy/ltNh/pIRuyyEs0BoKJajVEOQISctuLTNQg30=
Subject key identifier:   27:D9:0E:2D:18:62:A3:AF:44:DC:4D:D3:5D:3C:79:23:84:F8:A7:71
Authority key identifier: 7A:A6:06:11:7B:B5:F7:E4:16:0E:F2:68:F9:F4:AA:04:57:38:04:41
Certificate issuer:       /CN=7aa606117bb5f7e4160ef268f9f4aa0457380441
Certificate serial:       018F87ED63F63F05794F2A2D91C8027E1D5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eqYGEXu19-QWDvJo-fSqBFc4BEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.mft
Manifest number:          0EBF
Signing time:             Fri 17 May 2024 19:00:32 +0000
Manifest this update:     Fri 17 May 2024 19:00:32 +0000
Manifest next update:     Sat 18 May 2024 19:00:32 +0000
Files and hashes:         1: LatCEoKJ_jKkf-s6Rw-xtiCOj6I.roa (hash: D8xH6rOVVnzLyMBoK5Y+e3T76Yupwsg9fpWyCiwa22c=)
                          2: eqYGEXu19-QWDvJo-fSqBFc4BEE.crl (hash: x4nUS7jpmFtOLIOazTlxtiAvs7C2GiAqmx7RBdLlews=)
                          3: gw9REL2xabQACsS7ff0PD750vtk.roa (hash: iOqU0ZgtSVI7aLnOhjrsLmpBHe0EhdpZKv0lFROGnO0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eqYGEXu19-QWDvJo-fSqBFc4BEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:63:f6:3f:05:79:4f:2a:2d:91:c8:02:7e:1d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa606117bb5f7e4160ef268f9f4aa0457380441
        Validity
            Not Before: May 17 19:00:32 2024 GMT
            Not After : May 18 19:00:32 2024 GMT
        Subject: CN=27d90e2d1862a3af44dc4dd35d3c792384f8a771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f5:69:e3:32:53:10:ac:99:5d:21:52:d6:f8:
                    4f:ca:67:00:a6:90:ea:5f:dc:92:3d:14:bc:fc:87:
                    86:36:49:20:38:c7:b5:b6:0a:c8:d9:46:04:0f:74:
                    84:e1:33:31:06:80:4b:96:f7:a3:0c:05:50:1c:31:
                    72:ca:7e:95:a4:41:35:d8:09:ad:56:42:00:70:b1:
                    f7:60:7e:b6:9f:84:d0:2f:79:4c:ab:e5:32:6d:84:
                    16:8d:90:81:0f:70:24:ad:9f:e5:c6:e1:b6:4b:2d:
                    fb:3d:1d:eb:e0:9d:1a:eb:9b:03:cd:56:49:5d:b7:
                    c2:9b:86:91:59:00:33:4e:f8:3c:c3:0f:de:d6:f4:
                    73:20:5c:5d:f6:60:66:dd:68:90:30:dc:29:c2:60:
                    ee:27:4d:54:f1:6f:50:7a:ae:a5:5d:69:a2:3f:51:
                    c3:cd:2e:9d:82:26:e6:df:e1:44:16:05:68:69:ad:
                    f2:76:e7:f1:3b:bb:17:56:25:91:26:69:30:bc:fc:
                    54:1c:77:61:5e:bd:4c:7c:f7:05:fc:55:7d:02:5b:
                    96:20:d2:0d:11:50:d0:7c:02:68:64:a2:11:be:b8:
                    57:6a:25:98:cf:a2:db:52:d6:41:77:82:25:40:cb:
                    ab:06:8a:42:5d:4d:b2:33:d2:2c:22:97:ce:0d:dc:
                    26:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D9:0E:2D:18:62:A3:AF:44:DC:4D:D3:5D:3C:79:23:84:F8:A7:71
            X509v3 Authority Key Identifier:
                keyid:7A:A6:06:11:7B:B5:F7:E4:16:0E:F2:68:F9:F4:AA:04:57:38:04:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqYGEXu19-QWDvJo-fSqBFc4BEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:c7:df:b7:d8:4f:cf:e7:eb:ae:bb:5b:a6:a6:19:11:15:2d:
         77:00:b5:56:25:ea:52:d0:c8:b8:8f:13:93:22:d9:53:49:4e:
         e0:bd:0d:25:45:fb:38:79:8a:10:86:a5:c8:6d:cf:d8:41:b6:
         ab:01:7f:89:4a:ac:43:6a:f6:2a:e3:8b:27:1e:95:4e:94:fa:
         7f:89:f0:7c:34:09:fc:83:cc:4f:89:6d:52:2e:59:08:97:45:
         e0:95:bf:87:51:8c:86:8f:e2:43:9a:4b:ca:bf:0a:bf:94:bc:
         62:68:77:55:2a:de:9e:6a:8d:c4:37:60:95:50:b7:a8:4b:02:
         2f:4c:d0:61:0e:f4:b7:2e:03:63:1b:97:96:1f:17:75:5b:52:
         40:d5:58:08:61:4b:57:55:41:ee:33:ab:5f:b0:32:0c:1d:e4:
         53:18:cc:bf:68:23:e4:28:56:91:89:37:83:96:45:9a:a4:c8:
         58:a3:4e:f5:aa:05:37:1c:93:65:cf:8b:f2:9f:63:9e:d4:c2:
         c7:29:2d:39:63:a0:f3:1c:81:4f:bd:6b:1b:f2:fe:c9:1d:2f:
         04:09:80:8f:e3:6a:d0:2c:36:85:b6:d5:fa:e7:6f:35:73:50:
         57:9b:72:9e:34:a5:ef:52:7e:4d:4e:03:7b:7b:53:56:50:4c:
         ba:c6:84:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----