Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft
File:                     jBhqVuqEwTxidoqdF7rhM87fEEU.mft (raw, json)
Hash identifier:          akGiSBxGW4e9teSPJeLgGK3L3R6V3AVbUwsWyN1siZw=
Subject key identifier:   50:00:8D:22:CE:77:EA:E1:24:AA:4A:5E:47:74:78:27:2A:20:76:A8
Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
Certificate issuer:       /CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Certificate serial:       01903BBE246073AB104C66D9FEB7F5AC4510
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft
Manifest number:          11DA
Signing time:             Fri 21 Jun 2024 17:00:35 +0000
Manifest this update:     Fri 21 Jun 2024 17:00:35 +0000
Manifest next update:     Sat 22 Jun 2024 17:00:35 +0000
Files and hashes:         1: 9_aHLAJZp7xwioZPyk98EqvzNPo.roa (hash: I2yql6c/IZDFz+sDSpzDIvfEotdi7ULCySvZQllg/u0=)
                          2: GeamoSvRj0HWUG4CmLwa5wjHR-k.roa (hash: jazD90mE2SbzFRfRT//p2IxE7zBgezzV0FWI65CtI7g=)
                          3: S-I9p18jGoNnwNmOxXkebml5z40.roa (hash: zftZxLU58oHh0k9H7e26oshF0f3gU+SYQnHvu9VKPWk=)
                          4: jBhqVuqEwTxidoqdF7rhM87fEEU.crl (hash: oBk1YPYgYM1DF157VA6lrPOcfx7JElAubVwEGPNtqQo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 13:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3b:be:24:60:73:ab:10:4c:66:d9:fe:b7:f5:ac:45:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045
        Validity
            Not Before: Jun 21 17:00:35 2024 GMT
            Not After : Jun 22 17:00:35 2024 GMT
        Subject: CN=50008d22ce77eae124aa4a5e477478272a2076a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:68:78:55:c6:33:5c:bc:91:03:1f:33:3c:c6:
                    f1:5c:bf:aa:ba:c7:0a:6d:2c:88:96:35:3a:e3:fa:
                    e7:59:44:b8:b0:d4:7f:6d:e2:da:1e:43:10:28:67:
                    07:38:b1:c8:98:d6:4d:9b:0b:33:9f:67:0b:c2:eb:
                    cd:9c:74:f9:35:3e:5c:25:87:56:e9:f8:16:31:9a:
                    e0:3b:99:1c:63:b0:f8:39:b3:4e:e5:93:d9:4f:12:
                    da:ed:56:29:ab:cb:72:95:62:83:16:25:14:12:6f:
                    b9:b4:f8:55:1c:e9:0a:03:8b:7b:48:36:7c:54:f5:
                    77:01:4b:db:85:78:cc:28:de:f4:17:39:d6:e7:90:
                    ba:8e:fa:33:98:0a:50:23:dd:5f:e4:9c:f4:64:74:
                    82:2c:b5:e3:67:ff:ab:9d:05:b6:69:27:31:5f:64:
                    a9:03:85:6e:71:f4:52:13:51:a1:e2:3a:8f:23:5a:
                    42:2f:7e:ad:a2:ac:99:27:8b:e8:a7:f7:c8:83:ea:
                    60:7b:97:ae:c1:c5:83:a7:c9:85:49:2c:79:db:1f:
                    ea:87:b3:31:35:37:ff:48:61:5f:43:5b:c0:af:85:
                    7d:79:f4:de:54:ea:ff:9b:e9:b0:6e:cc:62:5e:2a:
                    df:15:ec:fc:1f:1d:68:cd:0a:c5:f9:10:8f:95:e7:
                    b8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:00:8D:22:CE:77:EA:E1:24:AA:4A:5E:47:74:78:27:2A:20:76:A8
            X509v3 Authority Key Identifier:
                keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:32:b1:17:9c:2a:db:37:b5:21:c2:11:8c:82:9e:f3:2b:3a:
         52:3f:28:64:2a:cf:54:7c:4d:16:3a:e9:a6:c5:61:0e:1c:1f:
         65:e9:82:63:0b:e6:67:1a:04:84:54:32:4d:ec:53:16:f7:00:
         79:79:5c:5f:a8:2f:13:08:5a:0c:16:fb:08:cf:0c:66:14:2e:
         43:79:8a:fc:ab:d7:0c:12:a9:95:27:32:2e:8e:92:fa:6c:a5:
         33:65:c0:84:4d:84:b1:00:2e:53:76:2a:2d:7a:b9:6f:2a:de:
         9b:a9:7a:40:b8:c2:fb:49:fc:51:eb:22:2a:c5:85:66:4a:c8:
         bb:05:c3:01:07:f7:46:91:b6:08:57:d0:f0:54:83:6f:e5:64:
         fe:ca:1e:20:01:1c:15:21:a7:49:ec:0b:c5:d1:5b:7c:54:54:
         69:61:27:30:4f:6a:7a:0b:78:37:a9:43:47:09:de:51:35:38:
         c3:75:a3:13:21:fc:d2:f6:50:c4:56:b1:fd:6d:4e:11:89:dd:
         8a:66:b7:3b:30:00:a7:b1:bf:a7:10:18:98:71:14:d2:22:b8:
         5e:23:dd:66:d5:2a:d3:85:a4:0c:61:da:b0:3e:5c:a8:90:6f:
         a1:f7:c5:4e:d6:1d:79:4e:df:e2:0b:cf:f0:0e:f4:f1:06:06:
         e1:16:35:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----