Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
File:                     NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft (raw, json)
Hash identifier:          INMlIqUPee7+nZ++5EfhGYz33HI8Xo43CXGWX0RsW/w=
Subject key identifier:   BA:A9:60:1F:51:FC:05:E1:05:B5:59:80:6C:0F:86:C9:61:09:83:E9
Authority key identifier: 35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
Certificate issuer:       /CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Certificate serial:       018F87ED2D269983A88F9ED2AE8F6413BED6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
Manifest number:          0ADD
Signing time:             Fri 17 May 2024 19:00:18 +0000
Manifest this update:     Fri 17 May 2024 19:00:18 +0000
Manifest next update:     Sat 18 May 2024 19:00:18 +0000
Files and hashes:         1: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl (hash: OK77n2rBBQicPwyujCwJNAlEL3BhcUSQ+CG6i26D1yw=)
                          2: gKgdAMDbMKnijn_6V-pzjI6RNHQ.roa (hash: 9i2U3h7ZseW94hPv/JklRBcynjv74i5WcinlnP+dhbo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:2d:26:99:83:a8:8f:9e:d2:ae:8f:64:13:be:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
        Validity
            Not Before: May 17 19:00:18 2024 GMT
            Not After : May 18 19:00:18 2024 GMT
        Subject: CN=baa9601f51fc05e105b559806c0f86c9610983e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:f3:af:93:4f:cd:6c:5c:c7:ec:1e:42:03:
                    ce:63:d3:a2:7d:af:95:2e:8b:4f:af:5f:a0:79:a3:
                    6f:a5:b3:87:10:13:e2:9d:34:e4:74:55:62:8a:e3:
                    1f:61:29:0d:59:69:8c:5f:64:4a:c9:77:d0:7d:a6:
                    b4:32:6c:d3:d1:48:e7:56:bb:24:19:fc:84:22:a9:
                    d5:31:f4:64:61:63:1e:3d:0f:be:33:76:7d:78:64:
                    ae:8e:cb:59:2d:6f:7d:6e:fa:07:0d:b0:9d:68:b2:
                    e5:85:40:59:8d:77:6e:f7:ac:ae:f5:65:0f:d3:35:
                    48:89:63:1e:e1:bf:fa:d7:c5:fe:ba:38:0c:70:ef:
                    24:89:bf:a1:c7:26:86:74:5b:f6:77:f7:86:1b:88:
                    3d:b7:dc:c9:ea:4e:74:c0:52:9e:ec:79:94:f2:a0:
                    ee:7b:e1:7b:24:74:6c:2d:ab:39:d8:44:d2:25:ed:
                    40:70:b3:5f:33:a3:39:1d:a2:05:0e:86:a2:ce:f8:
                    d6:14:b9:64:15:b3:85:d6:c3:cf:fa:85:8d:08:a0:
                    1c:a4:28:9e:de:bd:50:53:0e:02:36:a1:ce:a0:ea:
                    9d:18:91:42:1c:eb:89:b6:ce:dc:e0:b4:4b:df:42:
                    0e:f0:b9:d1:36:f9:dc:34:7c:5b:07:92:2c:81:8d:
                    b0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A9:60:1F:51:FC:05:E1:05:B5:59:80:6C:0F:86:C9:61:09:83:E9
            X509v3 Authority Key Identifier:
                keyid:35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f8:dd:fd:11:24:49:62:c9:fa:33:39:f1:a8:64:36:06:2a:
         7d:23:65:87:6a:5b:18:6c:4c:2e:21:69:e5:5f:54:18:4c:12:
         3f:bb:4f:f0:e9:08:da:b4:41:b8:42:d8:d1:28:95:a9:3f:3e:
         02:2e:26:46:02:eb:94:55:e6:98:49:0f:a4:35:d5:5e:2f:9b:
         e9:f4:7d:a6:65:da:46:a5:0a:3d:7a:8c:ce:40:22:be:92:3b:
         14:b8:32:a7:2c:e9:9b:e7:37:f2:5f:aa:e2:36:ec:e0:4b:de:
         3d:90:02:75:c1:61:78:c3:2b:1d:12:70:18:7f:46:70:84:2d:
         48:33:46:e8:d8:c4:5e:b9:14:ac:40:e7:f2:89:c3:be:74:5c:
         a4:94:93:80:fd:2d:d7:6f:3c:59:63:77:63:5b:e2:e7:15:72:
         4b:94:fd:37:55:bb:60:17:9f:89:5c:71:74:64:33:2d:36:6d:
         a4:b1:01:6c:14:4f:37:22:51:64:c8:38:49:f6:27:d3:7a:49:
         ba:67:51:7a:86:eb:6b:6c:c0:f7:71:7b:23:5a:68:c2:61:29:
         de:be:50:86:f0:59:f6:7f:a7:c8:ec:d5:a6:4c:f6:6c:02:62:
         50:0e:6e:c4:bf:72:73:66:12:28:9a:9a:f6:78:c7:77:f6:3b:
         8f:f0:a0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----