Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
File:                     tiuWfFIUXmeksyBrHKSShTyg34Q.mft (raw, json)
Hash identifier:          vbrfu8tW9t1vXaGClXRJSOdsMhNPqFQtV89Ix2ccWbg=
Subject key identifier:   51:32:48:B9:2C:85:1C:A4:90:4B:D5:E3:BD:C1:37:42:B1:C8:BA:70
Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
Certificate issuer:       /CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Certificate serial:       018F96BB82A08BE9E67DD26150DCA99E040B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
Manifest number:          117F
Signing time:             Mon 20 May 2024 16:00:22 +0000
Manifest this update:     Mon 20 May 2024 16:00:22 +0000
Manifest next update:     Tue 21 May 2024 16:00:22 +0000
Files and hashes:         1: cXvzX-YV9-vCMA1Vyo6qcx_NrXY.roa (hash: tJl//2sIIWV0+/8r4bsfUakItWeFNGKmw8lymOT9oLw=)
                          2: tiuWfFIUXmeksyBrHKSShTyg34Q.crl (hash: DHvc0DsQagteaqI8Zp/p8nc15KkVmPQBnxyPNz9jE8A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:bb:82:a0:8b:e9:e6:7d:d2:61:50:dc:a9:9e:04:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84
        Validity
            Not Before: May 20 16:00:22 2024 GMT
            Not After : May 21 16:00:22 2024 GMT
        Subject: CN=513248b92c851ca4904bd5e3bdc13742b1c8ba70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:79:6e:5f:50:19:c3:c3:64:4a:5b:4d:e8:36:
                    8a:6e:69:40:c2:1d:4e:b4:f7:95:51:7c:fd:a4:cd:
                    46:0d:1e:f6:2d:5b:89:57:ad:3d:fd:79:68:29:6e:
                    7d:5e:28:2e:fd:3c:e3:5a:fe:8b:6b:9e:3f:75:4b:
                    04:8d:00:5a:bc:8a:e7:93:3d:66:8c:ff:96:e8:88:
                    2d:a2:96:da:c9:d4:f7:b5:b7:a9:a0:c8:f1:c3:40:
                    0c:2b:e4:60:19:36:e6:ae:8b:ad:1a:a9:e2:f7:fc:
                    59:d1:eb:d6:24:cb:d9:29:c5:13:ad:7d:47:19:fa:
                    d7:30:92:0e:27:2f:35:84:39:87:3d:46:3e:1d:9f:
                    d5:b7:87:fb:3e:f0:46:4a:71:0f:5d:16:be:cb:0b:
                    db:c7:70:1f:4e:b3:22:1b:3b:0e:6e:cd:59:73:70:
                    b7:e9:a0:a2:c9:4c:3e:5f:1a:29:f6:39:5c:4c:25:
                    e6:34:ee:c3:4a:24:cf:d0:3b:20:5c:fe:68:b5:31:
                    9e:12:32:a7:0c:28:1e:d8:64:08:02:fc:4e:b1:e5:
                    21:b5:b3:06:29:06:e4:82:80:68:75:2a:f6:08:64:
                    8e:f8:fa:2c:23:85:a9:c0:98:9a:87:dd:df:6b:cb:
                    86:26:d7:e2:73:95:5a:f2:b7:84:69:fd:c0:ad:3f:
                    c4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:32:48:B9:2C:85:1C:A4:90:4B:D5:E3:BD:C1:37:42:B1:C8:BA:70
            X509v3 Authority Key Identifier:
                keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:69:4a:87:07:2d:2e:21:20:c2:28:23:46:a7:b4:0a:5f:83:
         7f:d6:a0:78:43:bd:ad:b0:06:58:a5:b7:cb:cc:0e:2f:6e:78:
         d8:a3:53:9b:b9:76:2d:d4:96:b5:48:17:e2:55:f9:96:32:56:
         a5:17:91:e4:7f:7d:5b:4a:ba:bd:c1:59:88:95:bb:a6:6b:a8:
         d5:32:cd:dc:f9:d8:52:1e:e6:13:13:1c:5e:ed:33:12:8d:e2:
         4e:e5:6b:dc:53:13:31:9d:64:c7:10:b8:c5:39:ff:34:c4:62:
         02:3b:8b:e8:f3:8d:46:5d:8d:dc:c7:d8:6b:bd:14:b2:cd:29:
         39:8f:a6:9b:60:5d:50:03:1c:fc:b7:94:e7:d9:5a:e2:e1:fd:
         55:c2:e4:a8:69:c9:7b:9f:b8:f2:91:bf:17:fe:f4:09:98:cd:
         b1:c7:f6:93:7b:01:3e:34:c8:23:88:e2:cf:1e:0c:b8:c7:2d:
         df:27:4b:b0:fd:9f:8b:02:f7:8e:29:39:ba:f7:62:5f:ae:49:
         9e:f6:66:e0:22:07:73:26:64:75:f4:2d:10:28:1c:11:49:a2:
         54:87:be:e1:65:e3:20:92:28:8f:d0:d8:ff:c4:4a:ef:82:96:
         9a:ef:ea:84:06:bb:81:da:b0:dd:17:f3:e2:e9:63:62:4b:a3:
         90:a3:6f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----