Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
File:                     ow9vtvXIDKSmA4J8lrO99grVY6o.mft (raw, json)
Hash identifier:          prMFpjVujoMJVRlpUbzhaTlNv8UOXwBqI9tofLwE3CI=
Subject key identifier:   DD:95:0C:B8:D2:A8:EA:F1:60:B1:67:0E:CE:DD:4B:CD:16:03:30:6A
Authority key identifier: A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
Certificate issuer:       /CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Certificate serial:       018F885B43A8AB25E23EDDA29A7C48D82C9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 21:00:33 +0000
Manifest this update:     Fri 17 May 2024 21:00:33 +0000
Manifest next update:     Sat 18 May 2024 21:00:33 +0000
Files and hashes:         1: l_LngkSHoUT3vTsmFjRKUpczYuw.roa (hash: hgM7A689d2PJFnRYtUwVATFcZfXybmgQOYTHchyYJO8=)
                          2: ow9vtvXIDKSmA4J8lrO99grVY6o.crl (hash: 52ApvMeebb/MFxd7D0U+HR6ZSAlDq9jdkbkeoIxtd5A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:43:a8:ab:25:e2:3e:dd:a2:9a:7c:48:d8:2c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
        Validity
            Not Before: May 17 21:00:33 2024 GMT
            Not After : May 18 21:00:33 2024 GMT
        Subject: CN=dd950cb8d2a8eaf160b1670ecedd4bcd1603306a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fd:a9:3c:34:e6:66:66:30:f9:f7:9f:03:5a:
                    35:0b:76:f0:26:2b:56:75:63:3d:67:bc:1a:3a:d4:
                    62:8c:ba:37:ed:3b:e6:ec:15:f0:bd:20:45:2f:f5:
                    75:1b:e6:ab:b2:84:c1:6f:49:d0:e7:f2:b9:a9:e1:
                    0b:0a:d4:b4:ea:fe:3d:da:8a:c4:66:e2:e5:c5:e3:
                    0e:1b:36:69:64:32:66:0b:db:3c:cf:0b:c7:3e:0d:
                    8d:03:de:68:cd:93:9b:6e:7d:d6:95:30:16:26:e8:
                    4f:7b:6b:e2:df:f4:ab:9d:17:7e:9d:f7:85:67:b9:
                    8f:bd:c0:5d:65:fd:02:9d:a7:ea:2e:a0:d9:c5:09:
                    cd:90:b3:5f:9b:5c:6d:7d:e0:c8:48:0d:a8:73:d0:
                    17:63:3a:cb:ce:09:9b:cb:5c:c8:1c:ab:dc:25:0d:
                    30:86:c3:d7:4b:cb:74:2f:c9:8c:5d:b3:a5:ec:86:
                    3d:5b:af:68:35:50:a7:8b:f7:7c:8d:7d:79:0f:5d:
                    cf:13:f7:4b:70:bd:62:19:47:9e:4e:47:50:75:e1:
                    ee:43:f4:d7:44:0f:97:8c:e4:2e:31:88:71:b9:34:
                    ac:08:ea:c5:f5:6a:80:8f:35:16:20:ce:22:c1:f4:
                    b9:c4:c2:c4:4f:4c:c8:70:f1:bb:6f:2a:d6:bd:6d:
                    0e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:95:0C:B8:D2:A8:EA:F1:60:B1:67:0E:CE:DD:4B:CD:16:03:30:6A
            X509v3 Authority Key Identifier:
                keyid:A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a2:94:de:9b:72:6c:6e:8b:48:de:29:e8:7b:75:44:88:d5:
         7c:56:dc:87:60:87:ad:ab:9b:67:6b:75:a9:42:76:11:1a:16:
         4b:b1:9b:02:9a:b8:ec:f7:81:d1:fd:f7:8e:09:ed:cd:4d:dc:
         d3:34:6e:d6:34:b9:31:5a:f2:df:70:52:35:cf:eb:6d:47:35:
         d8:db:3f:2d:dd:58:79:4e:62:00:be:2e:49:69:96:5e:ba:3c:
         fb:b7:7d:7b:97:ed:e7:c7:e9:a1:1d:b3:b2:f1:d9:ec:4d:53:
         53:ed:65:ef:3f:9f:b5:b9:d1:9b:e3:3c:d8:2f:d8:fc:77:24:
         a7:80:38:eb:bd:40:fb:7b:c3:09:fc:c9:af:20:23:1b:1a:c4:
         f3:04:42:b7:89:ef:81:49:e8:37:ff:98:2c:4f:45:3c:b7:d4:
         4e:6e:93:e6:bf:31:47:b5:cd:2f:11:fb:3b:7f:1a:6d:85:b5:
         9b:f2:f2:ec:e2:6e:05:8c:29:a7:63:d0:1b:cb:c3:d9:b1:66:
         62:a0:cb:a9:5d:25:5d:23:f7:47:17:6b:dd:b8:8c:c8:98:18:
         59:d6:3a:7b:79:8e:ac:a5:c3:10:b7:ec:36:fe:2c:6f:08:4a:
         3b:77:e2:08:31:3e:10:d0:3b:1e:f1:66:66:f9:97:8f:87:07:
         83:08:a9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----