Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.mft
File:                     JoYpJqhXSRVUvulJUbtfpnAgfZ4.mft (raw, json)
Hash identifier:          kcuySnn2rmaijFQ8/2ZxgZUAzCfRY4G2xfg/aYbXenk=
Subject key identifier:   65:EF:89:C5:7F:1C:9B:3E:AB:CC:B4:6F:00:05:29:AA:F6:B3:FF:76
Authority key identifier: 26:86:29:26:A8:57:49:15:54:BE:E9:49:51:BB:5F:A6:70:20:7D:9E
Certificate issuer:       /CN=26862926a857491554bee94951bb5fa670207d9e
Certificate serial:       018F98ABBBA6ECDF6804565DD353A3928ED4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JoYpJqhXSRVUvulJUbtfpnAgfZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.mft
Manifest number:          0538
Signing time:             Tue 21 May 2024 01:02:22 +0000
Manifest this update:     Tue 21 May 2024 01:02:22 +0000
Manifest next update:     Wed 22 May 2024 01:02:22 +0000
Files and hashes:         1: BPVxnI9fVRjAuKbfWcRlyIeQBQk.roa (hash: b50vAXTw1L4a4D4rtS+PKmuHGA7y26SLpbgVNDbMamo=)
                          2: JoYpJqhXSRVUvulJUbtfpnAgfZ4.crl (hash: 3gazuCmVWiOkb8ssl/qANpaCiXToveE/U5f1tGYuOrg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JoYpJqhXSRVUvulJUbtfpnAgfZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:ab:bb:a6:ec:df:68:04:56:5d:d3:53:a3:92:8e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26862926a857491554bee94951bb5fa670207d9e
        Validity
            Not Before: May 21 01:02:22 2024 GMT
            Not After : May 22 01:02:22 2024 GMT
        Subject: CN=65ef89c57f1c9b3eabccb46f000529aaf6b3ff76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4d:39:ba:a4:68:e6:5d:4a:75:0c:de:59:fe:
                    d7:82:37:4f:45:c4:07:ba:f0:06:b6:7a:14:63:ca:
                    1c:e6:01:9e:f0:79:f4:11:89:e8:ce:2d:00:8e:72:
                    ec:68:2a:e7:79:3c:e4:b9:91:c4:74:5d:2a:79:7b:
                    fc:51:2a:39:12:d9:2e:cf:3c:de:bf:9d:a9:34:33:
                    d3:35:1b:cc:6d:1f:5a:c8:2f:7d:13:79:2e:c7:f4:
                    e5:d1:e4:29:ba:b4:bc:0c:a1:3c:da:7d:db:9c:0b:
                    27:e9:cc:bf:b3:45:84:67:25:93:cd:43:f6:3f:d0:
                    dc:9b:4d:25:c1:02:8b:4b:60:20:96:f3:24:69:fb:
                    bf:af:2d:e5:52:9a:15:3d:eb:4c:56:0c:33:9a:c9:
                    73:67:3a:70:2f:89:4d:df:be:90:2e:07:b3:a8:b1:
                    a5:22:86:a0:41:86:21:19:9e:4a:46:e9:20:ba:5d:
                    9c:a3:69:66:8f:8e:8c:89:34:bb:ef:50:f4:51:12:
                    41:ad:c6:78:dc:e7:0b:5a:8b:6f:20:7c:dc:ed:5a:
                    65:52:dd:97:bd:77:3e:22:a9:25:64:ae:a9:f7:f9:
                    f3:2b:0e:7c:94:a9:04:23:93:0c:98:f2:40:e2:b1:
                    2b:51:12:5f:36:ff:1a:5d:63:f3:82:65:72:5d:ab:
                    fc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EF:89:C5:7F:1C:9B:3E:AB:CC:B4:6F:00:05:29:AA:F6:B3:FF:76
            X509v3 Authority Key Identifier:
                keyid:26:86:29:26:A8:57:49:15:54:BE:E9:49:51:BB:5F:A6:70:20:7D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoYpJqhXSRVUvulJUbtfpnAgfZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:9d:e9:9e:cc:97:cb:84:4f:40:31:eb:85:91:42:1f:98:7a:
         67:89:dc:64:a6:39:72:17:c3:73:01:b3:d8:a7:6a:fa:26:8d:
         d7:17:95:72:1d:2d:6e:6a:d7:95:4e:d4:ec:10:9b:88:18:7b:
         c0:47:6a:01:c9:09:08:ed:61:f4:18:44:d1:fa:fc:69:7e:37:
         9f:a1:42:a1:1e:2a:c1:71:c9:47:dc:8c:06:9c:e3:96:1b:67:
         52:74:90:22:d5:9f:bf:07:ea:ee:bc:3c:d8:c3:41:55:cf:5b:
         54:82:ab:40:9a:05:1c:ee:53:62:59:dd:e7:c1:d0:10:c5:5f:
         1c:2e:c9:20:e3:50:8d:d4:cf:f4:79:07:35:04:7d:ef:7b:e1:
         e6:91:0b:60:c4:1b:6a:51:e1:ee:34:cb:eb:e4:8c:e6:b9:a5:
         a6:e5:10:15:f5:75:a1:c3:6e:dd:a4:42:ef:f6:52:4c:3d:6e:
         e7:bf:ac:86:dc:d1:19:cd:52:d9:e1:d7:d6:f0:1a:f7:be:5b:
         3e:cb:72:50:12:25:ad:81:e8:10:93:04:50:5e:d4:e8:7d:42:
         99:66:a7:68:c2:87:d4:bd:89:5c:00:f4:34:80:76:84:2a:f1:
         7e:f6:bc:29:1c:b4:04:7d:f6:5a:38:3d:a5:7a:29:86:f1:bb:
         12:f0:ff:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----