Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.mft
File:                     MeubLbSjvd-MkvxQuXEwQ91W3Dg.mft (raw, json)
Hash identifier:          OWNKIAO8M6MsToGYhwl/yHJTaVW7qN9s/nWhbfnn82k=
Subject key identifier:   E4:E5:28:55:9E:E6:74:A6:5E:C9:E6:D4:6D:51:59:5E:D8:71:21:F6
Authority key identifier: 31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38
Certificate issuer:       /CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38
Certificate serial:       018F87484849089EB152939A1BE9EAFE3A26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.mft
Manifest number:          1183
Signing time:             Fri 17 May 2024 16:00:12 +0000
Manifest this update:     Fri 17 May 2024 16:00:12 +0000
Manifest next update:     Sat 18 May 2024 16:00:12 +0000
Files and hashes:         1: MeubLbSjvd-MkvxQuXEwQ91W3Dg.crl (hash: eClS+gbguFQsQ1EW5LXfUyxQi6f2vcjZgE3NeTj4Mq4=)
                          2: Mqk7D_EpavTTrhvXbKz-4uO5ssk.roa (hash: R35aR03+xWaLj3RdshTBwjB/30yZD8pfFDuNVs67jgU=)
                          3: Or_zghljESIqFgw_q8HxDi9hoKk.roa (hash: 8CEijm+o7bj8uEYoLxS0m8RhnkB6jwj9s+k7oFkEb5o=)
                          4: WJPr0H_a39X5gs0HjTluLtM3FdE.roa (hash: cTCkfELCyR6kndxEjfm1v2HungUXgYtPEO8R7UDayxw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:48:49:08:9e:b1:52:93:9a:1b:e9:ea:fe:3a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38
        Validity
            Not Before: May 17 16:00:12 2024 GMT
            Not After : May 18 16:00:12 2024 GMT
        Subject: CN=e4e528559ee674a65ec9e6d46d51595ed87121f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b9:8d:17:0d:61:e0:82:d4:f7:b6:a1:4e:50:
                    32:77:39:a4:1b:a9:a0:7d:b2:f3:92:37:72:27:b0:
                    d1:e3:82:06:51:9d:02:06:94:90:08:7e:a3:60:8d:
                    52:fc:8f:50:c4:60:6d:be:2d:f3:d7:3b:b1:55:59:
                    39:0b:9a:2e:ab:9b:d6:db:db:bc:86:1d:f0:e6:f2:
                    00:a8:22:77:0c:f3:61:78:bd:df:59:15:d4:bf:c8:
                    b1:77:47:d8:7c:e9:c7:40:30:e2:ae:1f:66:13:94:
                    f1:f9:45:c9:51:ed:5c:6b:9e:2d:0b:76:9f:68:a8:
                    56:9d:e4:a9:0a:b9:0f:01:47:b4:21:b8:0e:3e:c3:
                    4f:5e:34:e8:a6:bd:14:16:9b:c6:a2:7b:31:e9:e8:
                    e2:87:13:4e:fc:a0:84:88:28:89:7f:c0:a3:45:c9:
                    1c:62:78:c7:57:ec:69:e2:e2:b3:c6:c6:2a:16:42:
                    f7:f8:ba:ef:89:c7:4d:d4:b3:2d:ea:a3:a6:fe:a5:
                    7c:73:48:39:a2:fb:44:c9:85:08:b9:b3:e0:57:95:
                    ed:2a:b3:9f:fd:dc:1e:36:ed:28:e6:88:73:27:a7:
                    2a:ac:9d:86:49:5c:93:5a:c7:b2:17:1c:de:5f:8a:
                    e1:cb:0a:ff:a5:3c:ef:e7:cb:2c:38:e4:26:55:d4:
                    7b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E5:28:55:9E:E6:74:A6:5E:C9:E6:D4:6D:51:59:5E:D8:71:21:F6
            X509v3 Authority Key Identifier:
                keyid:31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:dd:6b:7f:8e:3e:c1:c8:11:9e:0b:1a:0a:25:e8:2d:e8:67:
         ea:c5:f1:87:58:10:f2:a6:53:df:b5:f1:5e:8f:d3:8c:1c:d0:
         86:81:84:15:f9:78:07:66:46:9f:2b:44:ad:b3:66:0c:9c:8a:
         e6:b0:05:cf:84:a7:fa:3c:30:14:73:56:ba:f5:49:5b:d2:9d:
         91:fe:3f:a5:68:f7:60:01:d3:f4:91:94:53:0a:87:b7:bb:29:
         b2:4a:2e:e7:75:5d:37:a7:52:55:92:90:a2:76:b6:af:dc:ef:
         4c:1b:5b:fb:29:55:96:f5:58:3e:6b:23:e2:0d:ab:49:b9:b4:
         cc:26:82:7e:c7:bc:ba:21:1f:02:1f:56:8c:3e:99:25:cc:26:
         ce:a0:b3:14:9c:61:b6:f3:57:98:4b:8d:be:44:d6:ef:49:02:
         f0:b8:4f:54:2d:aa:19:f8:08:5f:fd:6a:e4:83:60:7b:e8:bb:
         48:3e:d0:79:90:1f:d3:61:9a:a5:0c:2a:f4:4b:cd:6f:4b:92:
         d1:c4:43:4c:e4:98:3f:25:61:44:99:22:b0:90:5a:e4:fd:79:
         7c:fa:ea:d3:cf:2a:73:92:07:97:8a:7e:c8:b1:4f:9d:d0:a3:
         3c:60:a9:87:fc:5a:37:49:18:39:93:12:b7:d5:7b:9b:b4:0f:
         a9:49:be:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----