Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
File:                     Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft (raw, json)
Hash identifier:          V1uFCB1wxjxk6hR4sXNwRno3IVSWxL9EVQwV4kp7+7A=
Subject key identifier:   CE:29:AF:61:4F:96:24:AF:C9:D8:D6:C1:5B:10:23:06:C3:4A:A3:8C
Authority key identifier: 3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
Certificate issuer:       /CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Certificate serial:       018F836E1A94EEC3B213AC90269D13786395
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
Manifest number:          0D2B
Signing time:             Thu 16 May 2024 22:03:02 +0000
Manifest this update:     Thu 16 May 2024 22:03:02 +0000
Manifest next update:     Fri 17 May 2024 22:03:02 +0000
Files and hashes:         1: DG0MDFaVPMaf8eAc8cu7Lr4D2-k.roa (hash: LvojZLVUPHfRduTmbyWUKp49vpKIYFv8O6Yui4N6zCg=)
                          2: Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl (hash: v4q/BSKdWym6eqU1JqQBBNMv0By7Y9Tmm9q7ToIho7I=)
                          3: bnboJeV6hquO4vlPQIfjPbVPBtk.roa (hash: S6auoKpR0m5fisai/RHp5ib/WbJ3ogfkODVs1Tn/3sc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 22:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6e:1a:94:ee:c3:b2:13:ac:90:26:9d:13:78:63:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
        Validity
            Not Before: May 16 22:03:02 2024 GMT
            Not After : May 17 22:03:02 2024 GMT
        Subject: CN=ce29af614f9624afc9d8d6c15b102306c34aa38c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ac:5f:53:0b:fd:cf:07:2d:91:65:52:55:92:
                    5a:ad:65:6a:81:04:70:3c:12:76:b5:0a:d9:a3:a2:
                    82:59:21:fd:1c:62:3e:65:9f:4a:5a:aa:d7:fa:0e:
                    de:95:5f:e7:26:60:38:01:88:6f:19:ba:7f:22:60:
                    d0:6f:00:27:6f:ab:10:b1:5a:62:7f:7c:b8:62:ea:
                    b7:70:86:57:b5:b8:37:f3:57:db:9c:46:67:dd:36:
                    12:db:a5:10:bc:a1:1e:86:2c:b2:9a:32:c6:d7:12:
                    4e:b3:ab:ad:8e:4e:11:1a:13:c5:f9:ba:73:57:ab:
                    3d:f6:88:a5:e3:81:11:35:c1:03:90:7e:76:6c:88:
                    3f:0f:6b:b9:c7:b7:2e:d6:d3:57:1c:4a:81:90:47:
                    32:62:b4:38:74:fb:20:d7:1b:87:18:5a:bf:06:44:
                    8c:e4:ec:05:59:cb:13:cc:82:4b:e1:e9:77:1c:32:
                    47:20:92:73:fb:97:fb:0d:d9:60:fc:55:e5:8a:8d:
                    ca:0f:98:12:be:6e:23:8e:e0:f9:a3:71:d4:78:eb:
                    92:69:d1:94:25:55:d7:2b:de:03:3a:ee:97:cb:98:
                    ed:4d:18:66:25:f7:08:75:e5:ed:68:a9:b2:2f:2f:
                    5d:af:0e:16:b9:e5:61:3d:6a:8a:24:bd:1d:89:6a:
                    b7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:29:AF:61:4F:96:24:AF:C9:D8:D6:C1:5B:10:23:06:C3:4A:A3:8C
            X509v3 Authority Key Identifier:
                keyid:3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:89:3a:96:52:0d:a1:ba:d1:21:18:68:e6:94:31:98:b2:9c:
         ee:cf:95:6f:14:0a:12:ab:13:47:31:79:20:3f:76:bb:04:cd:
         85:ec:ba:70:66:26:f3:17:a3:81:25:e3:da:8a:04:27:22:c7:
         96:d8:01:b9:14:e6:56:89:2a:7f:71:3f:4a:2e:af:58:44:f4:
         90:96:73:2a:2a:ab:99:ec:a1:6c:d5:73:40:a5:4b:0a:10:db:
         d0:13:5c:17:9b:a3:58:d1:3e:c3:56:49:df:86:8b:8e:4b:06:
         66:fa:10:61:5b:98:2f:64:eb:1c:22:81:e7:d1:12:5b:25:de:
         01:55:d0:1e:97:85:01:41:55:8a:76:c1:57:17:7d:9e:f8:f2:
         28:34:95:d7:3c:fb:1f:d2:41:d8:ab:c6:b2:99:74:d4:01:96:
         2a:c5:da:f5:dd:81:dd:ab:04:20:c7:f3:60:61:9b:89:b3:9b:
         0e:f9:3e:e2:be:f6:d5:9f:db:82:b7:a8:f6:5d:f8:58:a5:36:
         56:71:60:b8:0b:61:f9:11:c0:04:86:58:b5:06:b0:db:aa:c7:
         2e:e5:bc:b1:f0:f5:a1:56:d9:98:50:fd:6f:2a:d4:57:80:6c:
         4c:f7:c8:35:ec:72:17:b4:60:08:1a:a0:9b:e2:f4:12:d4:8f:
         e5:52:ae:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----