Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
File:                     xOuh_fbE3hksHT7fioAMpZf5fWg.mft (raw, json)
Hash identifier:          bpV2F8lXgyYSuJT3u5Ayfp9tR4nvVV4HivlBPSg8Spw=
Subject key identifier:   35:7B:0C:56:D9:93:75:54:87:E0:BF:C7:0C:C9:85:F1:C8:6A:68:2A
Authority key identifier: C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
Certificate issuer:       /CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Certificate serial:       018F885B4563B582AC63F650F233E32B1876
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
Manifest number:          117C
Signing time:             Fri 17 May 2024 21:00:33 +0000
Manifest this update:     Fri 17 May 2024 21:00:33 +0000
Manifest next update:     Sat 18 May 2024 21:00:33 +0000
Files and hashes:         1: jlejG3jO_CJz0zanFnKFjCx_xDk.roa (hash: Nmj8gDotfzDwKGgYTC+6Nx+zUWTsFgf8qvo24v+paEk=)
                          2: n9GxiV-GozGmqC4P3JY20N1-jS8.roa (hash: KuRvJ6t+7RhxKbGqWgmPx8sd1SEQ/Tf/uCdlKANKWqY=)
                          3: xOuh_fbE3hksHT7fioAMpZf5fWg.crl (hash: 41dlAmlFW0RNe6oXSuqWNMizvW+SxLoTx34SIHf/f4A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:45:63:b5:82:ac:63:f6:50:f2:33:e3:2b:18:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
        Validity
            Not Before: May 17 21:00:33 2024 GMT
            Not After : May 18 21:00:33 2024 GMT
        Subject: CN=357b0c56d993755487e0bfc70cc985f1c86a682a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:81:c1:0b:f3:fe:3a:b4:40:34:68:2d:9a:68:
                    bf:70:98:2c:f8:e4:c9:bd:72:9b:96:cb:fc:82:14:
                    e4:04:a4:c0:c8:bb:d0:64:a4:68:68:58:39:ed:e6:
                    0d:fa:05:9e:dd:18:fa:06:a3:9d:d3:47:ba:7a:f1:
                    78:3f:15:ed:4d:63:40:60:b1:89:79:15:5c:59:53:
                    c1:79:f4:69:b0:7b:b3:e5:d6:08:cb:a6:82:94:24:
                    11:74:4b:bd:72:d4:24:45:18:6e:fd:65:89:14:89:
                    11:09:23:33:64:1a:bd:cf:a7:04:1e:fb:51:11:60:
                    05:2e:85:24:9d:c7:66:51:12:f3:3a:93:0f:ee:1b:
                    b9:da:d2:e4:c9:d7:7a:86:9b:96:5a:b6:2d:4e:b3:
                    f8:04:3d:14:27:25:a1:13:5e:0e:e5:07:eb:8b:01:
                    39:2d:c9:45:91:cf:c6:31:48:8c:28:e4:3a:1b:e2:
                    af:93:de:89:32:7a:5d:7f:94:29:3a:92:ad:3d:25:
                    de:f1:e7:d2:37:da:52:fe:84:d2:fe:46:92:71:9f:
                    06:a5:15:2d:01:c6:5a:66:a7:0b:2e:3a:c0:06:88:
                    20:9b:b8:9f:20:e8:f3:fb:ec:53:d7:dd:d5:12:16:
                    01:98:b8:5b:e0:9b:b8:a7:c9:d6:1b:d9:4f:2a:d2:
                    1a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:7B:0C:56:D9:93:75:54:87:E0:BF:C7:0C:C9:85:F1:C8:6A:68:2A
            X509v3 Authority Key Identifier:
                keyid:C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:43:c9:64:6f:bb:33:6d:9e:a8:aa:eb:61:a2:f5:bd:06:be:
         67:4e:54:db:8a:f4:4c:ab:75:ba:49:be:c6:fc:4b:99:13:bf:
         17:28:b1:4c:33:6c:e5:80:b2:23:ae:09:1b:d2:9c:a7:1f:e6:
         09:7d:28:a2:62:bc:22:c1:5c:3f:b3:31:6f:6c:25:6f:3b:29:
         8d:e5:6d:60:3f:af:96:8d:2b:96:39:cb:2e:f1:cc:e2:de:7a:
         3a:4c:d1:1d:f2:6f:a8:e2:93:d1:3d:90:38:5b:b7:15:e3:30:
         c8:54:83:b9:81:0d:80:f7:f7:64:c8:c8:00:60:62:d0:28:5a:
         04:e8:be:27:fd:3a:4a:63:f9:0f:d1:23:76:dc:8a:09:da:8b:
         e7:46:41:c3:bb:62:70:75:4c:6b:6d:67:e1:43:0a:7f:f7:d1:
         8d:5e:74:9b:d1:28:49:5e:82:e0:72:52:f2:cf:f3:0b:04:5d:
         4b:81:ee:c3:f4:a2:4a:76:20:63:9a:e7:89:9c:a4:a4:a2:b1:
         a6:bc:d0:6b:7e:02:ec:71:b0:8c:60:87:49:2f:5c:f9:2b:f7:
         56:ce:a0:d3:f7:95:38:81:a7:9e:ba:5f:ee:49:85:1d:9b:0a:
         0f:45:8e:93:55:30:21:ba:21:a2:4e:b5:76:7b:eb:80:b2:56:
         78:7e:58:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----