Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
File:                     L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json)
Hash identifier:          jEL5Hp15rDqchXzFHk25EA8gSdWdE/vzjze6OdjI/zg=
Subject key identifier:   51:59:D2:AD:6C:C4:97:5D:59:EB:E2:50:E7:47:51:BA:E8:D4:E1:25
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Certificate issuer:       /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial:       018F877F2EF0C904E4126642BC14E0EB17C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
Manifest number:          0F15
Signing time:             Fri 17 May 2024 17:00:10 +0000
Manifest this update:     Fri 17 May 2024 17:00:10 +0000
Manifest next update:     Sat 18 May 2024 17:00:10 +0000
Files and hashes:         1: KXNInkgQ09LbcCj1tlS163lx8vs.roa (hash: 30uebCgCHpH6vovpsdDqi9kNAqWfMzxdge0x9fWaSzI=)
                          2: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: 7TvUrW3PIEUAoCYuD1mhi0w5MflIkcXGKuzC9Lpsr2Y=)
                          3: SEHNkjCtMpxFILXxeXAmqw2kj5A.roa (hash: Cb78a1RXl7g2fFlcSfjhFSng0dWAnjz7CkTbZoDVxLc=)
                          4: X4S9KmsL8qhHYKZd9AWGDRke6zM.roa (hash: +25tJ3qHS/2iKasbcgjwcPNK1O9F4VilbjVymgpOXaU=)
                          5: vYSgOCtKsAf5Dd6jyqneYyZYMJc.roa (hash: 4o42a0loFeLdB3Q5nW3ECltrmhHVEujkp4BEkPDNM/8=)
                          6: yjCI0xFYSiJbDdjErlegjL68sMI.roa (hash: VdnDuUdWfL5lcXdXdJ1GSgZtdEaF8X4IuAA/RvD6qmw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:2e:f0:c9:04:e4:12:66:42:bc:14:e0:eb:17:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
        Validity
            Not Before: May 17 17:00:10 2024 GMT
            Not After : May 18 17:00:10 2024 GMT
        Subject: CN=5159d2ad6cc4975d59ebe250e74751bae8d4e125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b3:6b:58:94:1b:ed:7f:95:9c:34:4e:bd:51:
                    31:65:56:5d:44:8f:96:61:bf:fa:11:a3:ba:d7:09:
                    5d:e7:06:b4:04:eb:50:e0:ed:e6:bd:6b:fc:47:ce:
                    c1:1a:95:3f:47:d6:40:99:64:32:1a:1f:db:b9:6e:
                    8a:11:b4:01:bc:3d:e1:f8:a2:77:65:6e:cb:85:bc:
                    d4:71:77:c5:8c:2b:96:ba:ff:b7:d2:e6:59:5d:e9:
                    f5:7c:d3:c4:f9:b9:e6:bc:fd:cf:b8:36:6e:2d:44:
                    ce:21:fd:b9:73:c1:d7:bc:2f:ad:92:f6:f7:c3:f8:
                    55:d3:7e:3e:25:10:1d:62:e2:ca:bb:29:a6:1a:06:
                    53:a6:44:72:9d:12:09:08:94:d8:3d:c9:e9:9b:d9:
                    89:bb:45:39:72:6d:de:bb:f7:91:a6:7d:ff:90:9d:
                    e8:a6:39:1f:af:17:bc:06:f5:eb:f4:a1:d8:0c:d7:
                    77:35:ee:75:0a:05:28:8c:85:d0:9d:6b:5f:ae:cc:
                    9a:5e:59:40:d6:29:25:be:7c:71:6a:da:1e:5d:20:
                    f0:91:3f:25:8a:a4:fb:0e:ec:c7:44:74:52:e2:ac:
                    68:e6:09:7e:00:b4:71:c3:13:4a:04:97:7c:70:a2:
                    e1:4d:be:5e:00:4c:6f:9d:d1:d0:d5:07:b4:62:b6:
                    b4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:59:D2:AD:6C:C4:97:5D:59:EB:E2:50:E7:47:51:BA:E8:D4:E1:25
            X509v3 Authority Key Identifier:
                keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ad:d4:3c:41:b7:c9:79:61:7f:44:75:fb:aa:bf:d9:93:f3:
         01:cc:50:46:ca:9e:d4:fb:e1:74:d1:a6:17:e9:e7:aa:30:ea:
         93:cd:e1:0c:a0:ba:81:32:2d:61:ff:de:28:66:3d:46:4d:ed:
         2e:c3:3d:cc:16:c8:e2:d3:48:66:39:5b:58:2a:f2:00:cf:35:
         d9:42:f0:2f:b4:b9:d2:f2:e4:62:4a:ac:d5:ea:f4:3c:d3:1f:
         8a:7a:78:fb:05:0a:6f:7f:90:77:6a:72:7f:e2:ea:7c:e9:19:
         ab:83:61:80:77:70:81:c9:d6:77:35:b0:92:7e:59:7d:10:d1:
         62:ee:f1:80:f5:b5:20:32:d3:c9:41:17:ad:ae:7f:b2:7f:22:
         4b:3d:3d:53:fd:c8:6b:06:fd:3f:c5:92:d5:f2:eb:1b:11:a4:
         18:b4:2f:c6:83:53:9d:4e:50:21:db:e8:a1:c1:aa:ef:79:14:
         0a:b6:32:5d:e5:7a:e1:d3:47:18:77:d4:b8:82:cd:ed:70:d2:
         da:51:2f:0a:1c:50:3b:ad:c5:e4:f5:e6:f2:40:13:0c:db:f1:
         ab:af:c4:4b:44:a3:bb:b0:19:2d:bc:10:fd:60:b4:e3:c3:04:
         e8:2e:af:9c:70:26:08:11:b9:4e:13:59:c2:b1:72:3a:f6:2a:
         c4:9b:34:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----