Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
File:                     x24D_30L_eMoOcKP7IHGJ1wE0z8.mft (raw, json)
Hash identifier:          qLVZB1qCGGXSkTGyE45+ntECOEe0s5txNITRnMqUOso=
Subject key identifier:   90:E9:AC:B0:E0:7E:D1:EF:A8:D1:57:F3:1F:9C:D7:26:93:01:4A:64
Authority key identifier: C7:6E:03:FF:7D:0B:FD:E3:28:39:C2:8F:EC:81:C6:27:5C:04:D3:3F
Certificate issuer:       /CN=c76e03ff7d0bfde32839c28fec81c6275c04d33f
Certificate serial:       018F87B6A546F047BD9CF79BBC1F373C0CF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 18:00:44 +0000
Manifest this update:     Fri 17 May 2024 18:00:44 +0000
Manifest next update:     Sat 18 May 2024 18:00:44 +0000
Files and hashes:         1: 61GY1R8wYDxa_lyBZ9hmT1qgG2k.roa (hash: aG+XDaW77/Td5w26SqmAR9HeWY1Ds0VsYkAE7IRG8D0=)
                          2: DQREGMYHzz2HsiuDfAUIkFGEXZo.roa (hash: dqVzqoQJTPvKg+gCBH8NIabXtJcQbfGc752VqUY+XHQ=)
                          3: x24D_30L_eMoOcKP7IHGJ1wE0z8.crl (hash: MUbnf/LVK37mjYuHjoLCyjZSoqlEnE+U/iCnrjFU69E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:a5:46:f0:47:bd:9c:f7:9b:bc:1f:37:3c:0c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c76e03ff7d0bfde32839c28fec81c6275c04d33f
        Validity
            Not Before: May 17 18:00:44 2024 GMT
            Not After : May 18 18:00:44 2024 GMT
        Subject: CN=90e9acb0e07ed1efa8d157f31f9cd72693014a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:a8:d3:a0:dd:fe:ec:2f:ee:7b:ff:c2:cb:54:
                    05:a5:43:df:b8:d3:db:82:2e:55:25:6d:a3:55:00:
                    1c:66:b1:4d:38:8a:0c:48:a7:23:69:75:da:fd:df:
                    22:d1:d8:d2:2f:70:7c:4f:12:b3:1f:6f:44:79:df:
                    39:54:a0:1d:7f:a3:47:eb:be:9a:47:a1:9f:b1:4a:
                    de:7c:2d:20:f6:50:4f:d7:0b:72:c7:8f:9e:a1:f3:
                    50:d0:72:ee:d7:2a:7f:c6:5d:5e:2d:72:d8:c6:0e:
                    3d:a6:bb:ab:5e:41:b3:97:68:76:59:b3:83:7b:c0:
                    44:98:06:3e:70:4c:0f:26:26:f1:16:b5:75:67:ef:
                    0c:e9:5f:eb:84:3c:f7:3e:ae:25:0d:1b:e2:d2:18:
                    51:9f:f4:7e:81:bd:2b:54:44:7d:08:ed:1c:a7:bd:
                    94:62:fb:48:d2:b3:38:5e:cb:ce:0c:96:51:1a:a4:
                    3a:a8:de:e7:b2:e6:a2:b1:6d:c1:3a:ed:10:f8:87:
                    b1:1e:d6:84:e3:7b:1b:ba:0d:ca:6f:06:21:4d:86:
                    3a:ee:e0:75:5c:ef:47:76:c2:59:d2:b4:da:26:80:
                    25:25:2b:7f:67:72:d2:76:f9:a2:db:92:1c:5b:1c:
                    77:c6:80:44:61:f3:dc:19:88:fe:5c:31:60:0d:a6:
                    38:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E9:AC:B0:E0:7E:D1:EF:A8:D1:57:F3:1F:9C:D7:26:93:01:4A:64
            X509v3 Authority Key Identifier:
                keyid:C7:6E:03:FF:7D:0B:FD:E3:28:39:C2:8F:EC:81:C6:27:5C:04:D3:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:52:04:3c:ce:01:9d:f9:3d:9c:b1:be:0d:02:c1:ed:6b:71:
         44:6f:62:75:6b:6b:e6:bd:d5:e2:0e:f1:ac:d4:68:39:98:80:
         f6:74:d9:1d:74:e6:9e:82:66:a8:e9:9c:df:b9:06:71:2f:87:
         19:7d:f1:d8:f8:04:de:81:a3:f0:5a:e6:17:2d:a9:7d:72:62:
         42:40:38:a7:4e:ce:75:49:98:f2:91:47:7f:2b:03:2f:1b:42:
         29:e9:48:c2:67:f2:20:f1:f3:f3:ad:f0:51:c0:5e:e5:63:c4:
         b8:44:e0:0b:ed:4e:6b:8c:6c:7f:d2:d9:a3:43:1f:e8:ba:1c:
         98:05:d7:d8:92:ff:67:3b:7f:8e:48:f5:80:fd:de:78:e3:70:
         68:b0:6c:e9:cb:51:8a:24:4d:de:31:76:fc:da:93:1c:e7:61:
         42:56:5e:78:a9:d0:3c:c0:2d:de:e5:a0:ef:ca:01:f6:08:55:
         f2:06:05:b9:2e:67:39:17:8e:eb:40:03:1e:45:1e:5a:08:07:
         bf:fd:f3:87:02:91:24:e2:18:18:c2:b2:e5:5d:4f:94:2f:2f:
         4d:1c:ec:c0:42:b6:72:b4:a5:01:6b:90:9a:90:87:bc:84:11:
         78:f1:6b:5c:4a:13:da:97:50:f3:76:a7:d0:71:3e:7f:42:3f:
         69:31:b8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----