Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
File:                     YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft (raw, json)
Hash identifier:          Yv/Isbybh80PBfC8DCuWYdSHc5gs3auXDY7zKx6YQqs=
Subject key identifier:   A0:2B:ED:58:24:BF:40:EF:4F:9F:68:D5:15:BE:73:74:58:7F:86:B6
Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
Certificate issuer:       /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Certificate serial:       018F88C8C9C676211ED1490404D59A4792C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
Manifest number:          0912
Signing time:             Fri 17 May 2024 23:00:11 +0000
Manifest this update:     Fri 17 May 2024 23:00:11 +0000
Manifest next update:     Sat 18 May 2024 23:00:11 +0000
Files and hashes:         1: 9bPGNtKShWxSVGxvvwEJV7GVBko.roa (hash: OdpA7SAjb8zio/08bXjleqQmiSBMbfXb8W6j4+tsGh0=)
                          2: AISIiFU7ojKk8ZnCm6J_NwGCG4o.roa (hash: aM0GTUOzYh+1nbNDr9TAQ5eubBPDeTCS1oiYwg5mxes=)
                          3: YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl (hash: AEIx0c1NOJbYdyOqThngrJxpoCre3H9jTrH8ZdSYdDM=)
                          4: qoqnzEgXNZEznyZMDTxHr0kovJ4.roa (hash: qQ/dWvYXKPbX7Nz1E4iHq6eo8QKMNbpPsLUPn3nEOHE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:c8:c9:c6:76:21:1e:d1:49:04:04:d5:9a:47:92:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
        Validity
            Not Before: May 17 23:00:11 2024 GMT
            Not After : May 18 23:00:11 2024 GMT
        Subject: CN=a02bed5824bf40ef4f9f68d515be7374587f86b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:95:22:e7:96:fa:71:89:8e:ac:86:5a:ad:82:
                    f9:56:27:03:8c:9a:29:6d:56:d1:64:32:70:b6:be:
                    76:6b:9a:b5:96:36:64:d4:14:8f:7a:f8:aa:ae:20:
                    6f:63:b3:68:d4:1f:5a:2b:50:4a:e8:a1:e9:3a:9f:
                    ed:84:70:1c:0f:53:61:e8:1c:1a:ba:0c:58:7e:a4:
                    8e:cc:be:44:2d:3b:db:ce:07:d4:85:9c:42:17:91:
                    5c:a4:d2:a1:50:cf:27:4b:73:b5:99:d2:53:52:7d:
                    ab:de:46:5a:89:2d:3c:b3:b9:47:b4:2a:09:7d:6c:
                    2f:33:b6:21:91:59:d6:2f:3c:06:39:96:23:2c:dd:
                    a2:63:81:0c:6a:a5:32:df:04:db:f2:f9:20:4c:bf:
                    ab:bc:ee:6d:89:4c:82:d3:5c:77:c4:47:ef:24:bd:
                    96:5b:d7:75:d8:cd:1e:14:ce:d1:32:ff:32:b7:a3:
                    c4:4d:b9:f7:e6:01:39:05:8d:29:09:0e:c5:3c:ae:
                    0d:b0:bc:eb:f7:4c:41:6e:b4:a3:fb:10:13:73:c9:
                    30:d5:0b:ea:32:5c:4a:eb:8f:99:b5:34:26:13:d3:
                    0c:a4:79:a7:99:a2:08:3a:5f:2b:72:a3:22:8d:de:
                    b1:4b:b8:81:5a:a8:c7:9d:f1:24:2f:9b:ac:9f:43:
                    28:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2B:ED:58:24:BF:40:EF:4F:9F:68:D5:15:BE:73:74:58:7F:86:B6
            X509v3 Authority Key Identifier:
                keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:e7:04:f0:d7:0a:4b:e9:10:f7:8d:39:e4:de:72:1c:5b:d6:
         5e:8c:88:97:e9:de:6c:c3:ad:fc:9f:bf:ea:a7:b2:57:b9:df:
         44:9b:72:e7:94:70:70:e8:ab:2f:6e:16:22:6e:c1:f0:66:88:
         a1:01:9f:5d:9c:b4:17:80:16:0f:eb:7d:ec:e5:13:e4:a1:6d:
         07:ac:3c:74:0a:17:64:f8:43:81:89:0a:a8:a6:19:36:bb:34:
         51:23:1b:04:d8:f8:b6:ca:81:92:86:d3:45:f5:a5:84:15:6f:
         74:88:58:8c:d8:10:69:f4:80:0f:1b:83:b4:e8:bb:96:7b:01:
         35:49:e2:84:96:d6:80:f7:27:57:c0:12:b3:c9:0f:7f:10:d2:
         3d:f8:dd:4f:27:a0:8c:6f:93:c3:7e:67:aa:db:8b:e5:ec:b8:
         b1:0a:19:8b:86:48:ec:42:f6:c9:21:c0:af:57:a2:5d:c5:c9:
         59:b7:3b:1d:6e:4d:e4:f2:b6:c1:24:e8:21:7c:67:f8:06:a8:
         29:95:24:8e:2e:0a:b6:e5:f2:28:17:2a:86:d0:85:39:bb:c7:
         8a:b8:52:31:d2:8e:bf:ae:6c:06:59:cf:84:b5:d1:f8:c9:56:
         a3:69:cb:71:1d:53:d7:8e:60:75:34:4a:51:c3:30:18:f1:1a:
         6d:24:bd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----