Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
File:                     hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft (raw, json)
Hash identifier:          z2l9Dg7rYytR0I9tRuMNgYIMyPwVkCowXzCWMMf8chY=
Subject key identifier:   4B:03:6F:4E:1D:B5:CB:04:BF:58:D1:16:AA:61:0F:81:F5:EA:9E:AD
Authority key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
Certificate issuer:       /CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Certificate serial:       018F88921A4FD2098E7812185CE429A0044D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
Manifest number:          100F
Signing time:             Fri 17 May 2024 22:00:27 +0000
Manifest this update:     Fri 17 May 2024 22:00:27 +0000
Manifest next update:     Sat 18 May 2024 22:00:27 +0000
Files and hashes:         1: egL3FaAMnV4tPxmc483j3EKI2wM.roa (hash: zKRJX/n+5Pprp4ciGSPp4jjEczaHSIHSMx/NjI2VMEU=)
                          2: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl (hash: CnadUUkLAVHc3TJTMow9QRTGXiiwur5tPkau8B7ERks=)
                          3: uqRfirZTIXb7xxOCDrTrMPCf2jA.roa (hash: LEO4nS7gNsg/JyumRdK4qUBOlJE1pYTDb0uC9m2NrMc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:1a:4f:d2:09:8e:78:12:18:5c:e4:29:a0:04:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
        Validity
            Not Before: May 17 22:00:27 2024 GMT
            Not After : May 18 22:00:27 2024 GMT
        Subject: CN=4b036f4e1db5cb04bf58d116aa610f81f5ea9ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8b:27:ae:2a:a0:98:b2:93:f3:e5:9a:f2:56:
                    e6:6f:2d:ce:2a:86:60:a6:ce:dd:8f:06:3c:90:eb:
                    fd:18:b1:a3:44:d2:4f:a1:8f:d5:32:6e:27:64:19:
                    dc:06:95:e5:20:8c:a5:ed:89:25:29:d7:13:0e:cc:
                    1b:15:e8:f3:01:5f:7e:96:68:f3:bc:82:a0:51:c3:
                    6f:83:8e:12:95:53:6c:35:9b:01:f8:9e:e7:76:87:
                    58:f2:fb:05:c7:e4:ca:3f:ca:2b:a8:37:60:ea:90:
                    49:85:07:01:f8:19:03:50:84:ab:4e:b8:0e:25:62:
                    16:ca:66:02:2b:6b:fd:60:e6:d6:91:d9:86:ba:4d:
                    27:1a:dd:b8:d0:0e:11:6a:da:c4:8a:f9:f8:c8:10:
                    33:40:22:bd:bd:9e:fe:33:f9:79:16:f4:99:2b:54:
                    d1:23:bf:1b:16:91:e3:3f:03:f6:c3:1f:52:a1:ba:
                    b7:fc:25:75:14:9d:61:50:00:f6:36:ec:e6:2c:72:
                    cb:92:fd:dc:c5:09:3b:61:18:b5:7f:30:4e:1a:41:
                    de:49:8e:c5:3b:42:26:be:14:a8:a7:86:4d:fb:94:
                    e3:c5:c8:54:bd:69:53:81:00:bb:7c:57:60:d1:4f:
                    ee:a7:63:d5:bb:1b:df:66:cd:40:a8:d0:d3:69:91:
                    a8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:03:6F:4E:1D:B5:CB:04:BF:58:D1:16:AA:61:0F:81:F5:EA:9E:AD
            X509v3 Authority Key Identifier:
                keyid:85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:f0:39:40:51:5d:71:c3:7c:4d:d9:5e:2b:64:be:a4:a8:c5:
         7a:db:92:ea:c1:af:e3:8e:5a:88:8f:aa:97:fe:e3:57:7b:df:
         fe:15:57:97:3c:f6:52:db:86:00:3e:3a:34:85:57:c7:63:66:
         2f:09:8e:04:9d:d9:07:06:cb:60:f3:c9:a4:a7:19:88:0a:cd:
         be:83:69:28:5c:83:3f:e9:5f:8d:ef:14:3d:d4:41:cb:ce:07:
         0d:da:63:98:15:18:6c:d4:8b:04:70:7a:05:80:7c:ba:c9:5d:
         3c:62:b2:ad:ff:81:b1:38:6d:ba:00:48:b4:0a:c5:fa:ff:72:
         87:56:85:78:a8:59:dd:06:60:ea:9a:8e:36:61:26:00:35:14:
         4b:75:29:3c:b9:e7:ec:ec:6c:66:fb:df:35:9b:7c:9a:e8:ea:
         ad:c3:9f:b5:61:da:c7:52:cd:ec:2d:b0:b7:ca:04:26:3a:d7:
         c8:f5:50:32:8a:d6:9d:54:55:b1:10:77:72:b0:17:01:e6:29:
         38:a4:1a:9d:fe:24:07:ba:83:03:69:38:de:e5:0c:bc:a4:a2:
         03:ea:2a:a3:c0:85:18:db:11:03:92:75:95:05:46:ba:9e:68:
         b2:74:9f:22:e4:e3:45:80:6b:bc:81:ef:26:f5:33:c5:29:63:
         96:14:27:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----