Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
File:                     h9mQExRnt30RFit5--OwbKirLTk.mft (raw, json)
Hash identifier:          uxUNBIUIpTe8yNK4bMwucCFeQTYVxYQO2jZt1vKFeEw=
Subject key identifier:   3C:F5:A0:90:CD:21:A4:68:E5:19:37:9B:3A:C7:C7:1C:19:32:84:0D
Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
Certificate issuer:       /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Certificate serial:       018F87492574374FD3155726D27B37ACAF72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
Manifest number:          1185
Signing time:             Fri 17 May 2024 16:01:08 +0000
Manifest this update:     Fri 17 May 2024 16:01:08 +0000
Manifest next update:     Sat 18 May 2024 16:01:08 +0000
Files and hashes:         1: LzrXAUwVr1Qc4nTuExOsX_jyPto.roa (hash: geTbU7ck9K+Oxn2tQSxollnCW88iMKOU5476RDGrrG0=)
                          2: bTtG97T7KE8UtfGUei5NS6LvYsA.roa (hash: JyoQ6Kk3uEWlNacgnwIKdhV5S6WPM74VTeq1LrfAKp8=)
                          3: bwtBiqPruAmVI1y_XHnSwgfwR40.roa (hash: 8TeOaCE2ME4zDbUw1mo+VJhTg4vPvQFqnR0+idEDacU=)
                          4: h9mQExRnt30RFit5--OwbKirLTk.crl (hash: 2V51B2W+RFxi22J1cEJuvqs3Jo1u7tnPE6515t4QyIg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:25:74:37:4f:d3:15:57:26:d2:7b:37:ac:af:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
        Validity
            Not Before: May 17 16:01:08 2024 GMT
            Not After : May 18 16:01:08 2024 GMT
        Subject: CN=3cf5a090cd21a468e519379b3ac7c71c1932840d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c9:68:27:8b:18:e2:50:b2:a1:2c:56:da:1e:
                    e4:aa:b6:6d:48:84:eb:50:a1:a5:5d:a5:92:b6:9a:
                    f6:db:61:9d:22:b2:0b:25:f9:3b:ff:0a:51:eb:fc:
                    8a:ab:1b:9e:7f:44:98:0f:e3:4d:fe:36:53:b4:dd:
                    d2:57:22:62:62:0a:27:ad:53:2f:ca:9a:74:d2:3d:
                    9a:d7:13:83:4b:ef:2f:34:44:4e:a5:14:6e:d1:a3:
                    e1:09:29:dd:4b:a0:c0:dc:d2:95:7e:fd:7e:b0:de:
                    f8:88:fc:9f:00:b4:d7:86:15:09:59:d4:f7:b8:fb:
                    ba:21:f6:ec:51:30:16:0d:0e:94:20:56:a2:7d:48:
                    fc:4c:eb:16:d1:5d:8a:58:69:29:2a:6d:1a:a6:c0:
                    b3:c7:ef:82:36:08:80:f3:df:1d:6f:36:93:4e:b2:
                    13:c8:af:6a:76:88:f8:00:ce:59:69:70:18:52:e6:
                    cf:d2:a5:d3:4b:d2:81:0c:e7:88:86:66:55:f3:48:
                    12:91:3d:fd:1b:7f:b5:79:db:ff:c4:ea:f8:b9:36:
                    0e:3b:ca:8f:5e:7c:4d:2c:df:a5:f1:72:f2:50:82:
                    a9:d7:d4:d5:45:5a:9a:1c:bd:e8:40:7a:96:0e:be:
                    4d:4e:e8:f2:f1:e3:ec:04:95:9c:20:5d:04:87:5f:
                    8d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F5:A0:90:CD:21:A4:68:E5:19:37:9B:3A:C7:C7:1C:19:32:84:0D
            X509v3 Authority Key Identifier:
                keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:94:47:ef:71:f2:89:4f:77:0a:f2:89:ba:1e:64:87:44:5e:
         fd:9e:70:6a:a8:d9:7b:8f:33:34:2a:68:54:62:61:91:2c:2c:
         ca:4a:60:dd:96:68:a4:9b:76:a0:9c:2a:b1:1f:07:a4:08:68:
         80:c2:61:c2:8c:99:b2:c7:1d:de:40:e7:3a:99:1b:a8:e3:08:
         b1:b0:1d:47:d4:66:d8:6a:21:62:59:8b:c1:cf:7d:61:ac:e7:
         85:a8:bd:10:96:e8:8e:5f:0a:1f:16:75:98:c4:82:59:da:ea:
         19:1c:aa:07:2e:7d:ea:52:95:0b:0d:c7:36:c4:2d:26:6b:86:
         fe:9c:54:41:1d:00:0a:fe:b2:11:46:98:04:f5:0d:02:de:50:
         5b:5f:84:72:95:34:b9:c8:2d:92:88:61:0b:cc:ea:ee:2d:af:
         da:33:25:64:02:79:05:a3:ea:d0:a1:c1:2f:15:39:a6:17:37:
         3c:f6:4d:bf:03:40:eb:38:f4:e3:dc:c2:e7:6c:eb:61:c6:a3:
         05:92:63:f3:4d:07:8d:e0:28:46:68:a8:e0:74:b4:39:d5:48:
         b5:36:e5:73:3f:b1:0d:92:2f:e3:e8:b6:7c:87:df:ad:22:42:
         15:e4:cd:97:74:ec:c7:8e:5d:9e:dc:3c:16:91:f7:a1:e5:8a:
         1f:44:27:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----