Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
File:                     xTtM8KdHHwAPilagSbFjlnzDvZk.mft (raw, json)
Hash identifier:          rqPyNMULHy5Ptx9PLrsjvRqxW8LThLkSphwvbEv6L6g=
Subject key identifier:   40:D3:AD:25:88:93:DB:7B:2A:AA:F0:E4:05:BA:91:9A:9B:32:A2:DC
Authority key identifier: C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
Certificate issuer:       /CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Certificate serial:       01902981A983808346806A09963E79F9AE99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
Manifest number:          10EA
Signing time:             Tue 18 Jun 2024 04:01:21 +0000
Manifest this update:     Tue 18 Jun 2024 04:01:21 +0000
Manifest next update:     Wed 19 Jun 2024 04:01:21 +0000
Files and hashes:         1: VgxqpN4Ef5zxkx3lf00qpwpwDSM.roa (hash: w8m/IkBCd5/dVrgbZ8NoytU09XHyljlcRD1iSnosr70=)
                          2: xTtM8KdHHwAPilagSbFjlnzDvZk.crl (hash: nhhSOLgkLEQCVnTq3SOYeE3U+JHGr51ziySpiQY1cEE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 04:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:29:81:a9:83:80:83:46:80:6a:09:96:3e:79:f9:ae:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
        Validity
            Not Before: Jun 18 04:01:21 2024 GMT
            Not After : Jun 19 04:01:21 2024 GMT
        Subject: CN=40d3ad258893db7b2aaaf0e405ba919a9b32a2dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4c:a2:96:d7:16:3c:f2:9b:5f:b1:1a:9b:c6:
                    80:68:f1:d7:bb:b8:37:d7:f6:ad:5b:61:fe:6a:53:
                    2a:f6:d4:98:66:0d:d4:c8:d9:41:27:b7:c9:5c:51:
                    be:29:2a:c6:2b:c8:2c:bb:77:83:bb:48:ea:fb:02:
                    69:3a:fc:38:f1:cc:2f:69:61:d6:51:b8:37:e3:3d:
                    e1:c0:b1:eb:b8:ac:a9:f9:37:a3:99:3a:e0:f9:16:
                    b7:33:9f:36:32:c8:7a:2f:4e:c5:0c:56:d2:b8:12:
                    29:b2:08:bb:7a:d3:97:12:f2:3a:9d:a3:e4:58:48:
                    33:67:43:c8:fd:d2:c9:fe:15:b9:71:36:90:55:cc:
                    b3:19:f1:9a:55:98:54:11:c5:5e:11:df:67:51:c5:
                    3e:dd:94:e4:02:ac:e6:7d:9a:6a:48:9c:64:15:6d:
                    6c:51:ed:96:e6:34:74:a1:1d:8c:19:94:eb:55:2e:
                    73:68:4a:47:d4:d0:3e:46:f1:ef:8c:9a:45:2d:70:
                    13:62:ba:25:3e:e4:0d:72:eb:6f:ae:58:6d:1e:c9:
                    13:25:ac:b5:33:5f:10:b3:d3:8a:75:3e:5d:80:8b:
                    e1:8d:6e:8e:c2:19:88:d1:6e:69:6c:c1:cb:f5:13:
                    86:2e:0c:f3:7b:5b:59:46:75:f0:b9:df:bb:6a:6b:
                    c8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D3:AD:25:88:93:DB:7B:2A:AA:F0:E4:05:BA:91:9A:9B:32:A2:DC
            X509v3 Authority Key Identifier:
                keyid:C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:4a:67:28:bb:2b:d2:67:58:e4:9e:b5:d8:11:9c:ce:62:5b:
         16:85:0f:61:b5:21:ff:56:d8:4f:29:2d:91:4d:49:92:69:07:
         46:b1:8f:e8:36:74:91:79:c0:ea:f4:c1:5f:a8:3f:c4:89:4f:
         3b:23:03:c3:f7:5c:6e:5f:1f:60:15:63:49:de:99:a9:66:53:
         d9:71:b5:06:12:1f:19:bd:d1:32:fc:ea:d6:c9:b2:af:ae:1a:
         9f:ca:5f:1b:71:20:0f:42:1c:c8:08:b4:52:1a:ee:74:80:6c:
         af:91:2e:47:08:8b:44:ba:6f:dd:c7:6d:9c:13:55:e9:fe:80:
         49:ac:5c:1c:2d:a2:f6:9b:94:4a:8d:06:89:f1:30:47:5f:23:
         4e:f7:eb:d8:fb:4f:a9:64:99:e7:25:37:80:ac:41:7e:19:47:
         a7:31:42:21:4b:f0:ee:92:af:38:5c:4a:b9:5d:c2:56:a2:b9:
         a6:38:b2:b5:80:23:cb:a2:99:fa:b1:35:06:1c:91:6c:e9:9a:
         03:35:a9:db:bb:5d:22:4e:12:33:3e:57:38:60:74:e2:43:1e:
         f7:a0:cd:eb:2b:6f:98:cf:94:a2:9a:6a:b3:6f:25:1a:c5:20:
         90:39:a5:8e:c9:a3:24:19:1c:87:bf:37:6a:50:27:82:ce:2e:
         06:52:5d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----