Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
File:                     5_7U53ggnDyuk9S3bTUHBEYsOqs.mft (raw, json)
Hash identifier:          rF7Y1XAcGxZg3eShxqyeiGPbjjbWEtq7FLTGYcvvSG0=
Subject key identifier:   24:A9:6F:0A:BC:15:B2:CD:96:79:A9:AE:02:7A:3F:2C:8C:D8:20:E8
Authority key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
Certificate issuer:       /CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Certificate serial:       018F7C20674DD7B3A2962667198FFFA4B2B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
Manifest number:          0EFB
Signing time:             Wed 15 May 2024 12:00:49 +0000
Manifest this update:     Wed 15 May 2024 12:00:49 +0000
Manifest next update:     Thu 16 May 2024 12:00:49 +0000
Files and hashes:         1: 0cBZWdxrxmToAHKCETVLabu1eyk.roa (hash: 7HyBX8/ICLw78CfGrUV8FozZ7wr1YMUNQBBEE0+RYMs=)
                          2: 5_7U53ggnDyuk9S3bTUHBEYsOqs.crl (hash: iaXUQG5UK7ZLLD9cQP+aMJN8e8//fbsaFtXd+joJw6A=)
                          3: Xwsu2jIOyQfYshrdXrZcTrNBAAo.roa (hash: bzOd5MWHjI57wobBdE+UvKowBKNDP/SKPIJK+acC7U8=)
                          4: ti7s_6S9lliIOLZU4oFAEoMJDVE.roa (hash: weGozYt/t4/1b7IktWBAXqPWntN9ZJQGv2uVKuCSqAo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 12:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7c:20:67:4d:d7:b3:a2:96:26:67:19:8f:ff:a4:b2:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fed4e778209c3cae93d4b76d350704462c3aab
        Validity
            Not Before: May 15 12:00:49 2024 GMT
            Not After : May 16 12:00:49 2024 GMT
        Subject: CN=24a96f0abc15b2cd9679a9ae027a3f2c8cd820e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c2:d1:0d:82:37:53:b1:19:64:2e:4d:75:41:
                    76:64:f4:1c:3a:0f:3e:8f:22:b5:04:98:ac:ac:68:
                    f7:f2:bb:ef:3a:12:2c:2b:62:ec:77:7e:68:0b:4a:
                    53:8d:8e:83:7a:14:5c:38:81:67:94:b4:5a:99:ac:
                    fc:d9:f4:de:0a:81:e1:55:3e:08:3c:4d:39:49:85:
                    d6:27:94:13:bf:07:f1:76:61:e9:62:da:f5:b2:e9:
                    3b:3b:03:df:f9:f9:10:64:e2:ae:ac:8b:0c:5c:19:
                    18:2a:fe:c2:6f:ed:59:2e:94:71:12:79:5d:87:fa:
                    79:fb:7e:53:90:0a:87:8f:3f:f8:ae:02:52:f4:22:
                    e0:3c:e3:ec:6b:99:ef:d2:d4:00:db:45:58:bc:c9:
                    97:be:10:d0:b2:0f:fb:d9:88:fa:5d:f8:57:94:2d:
                    d7:8b:3f:cb:63:2d:68:bc:1c:14:f4:6d:f9:21:8b:
                    27:0f:6c:0c:99:7e:2d:58:28:3c:ac:bc:09:87:ae:
                    fb:f0:96:9f:2a:fb:cc:83:a1:fa:d7:02:0d:d8:36:
                    32:70:cf:65:2f:eb:99:b5:f8:57:06:d8:be:df:29:
                    f2:da:3b:bb:bd:ce:2e:c7:46:7b:de:04:6d:78:5b:
                    10:0b:fe:7a:d4:fb:b0:d5:be:aa:46:96:aa:bc:97:
                    16:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A9:6F:0A:BC:15:B2:CD:96:79:A9:AE:02:7A:3F:2C:8C:D8:20:E8
            X509v3 Authority Key Identifier:
                keyid:E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c8:f8:a1:3f:10:45:fd:3f:48:78:d0:12:8d:87:cf:83:2f:
         45:30:b9:eb:de:35:62:c3:99:da:b1:8b:f6:da:b1:4d:bf:95:
         1d:3b:05:72:d7:c2:fb:25:d8:ec:ed:0c:19:51:73:0b:3f:f2:
         f2:f7:a5:63:f1:fe:a9:da:0a:18:bc:0b:3a:d6:3b:ea:24:dd:
         81:8f:59:36:5f:0c:2e:cc:26:8e:26:89:4f:86:71:32:a6:0a:
         3b:af:71:5f:55:5b:4e:99:05:b6:23:42:a3:5b:f4:77:94:69:
         b0:b4:b6:02:df:42:9b:87:84:ca:63:ee:af:e5:05:17:60:c4:
         28:f7:5b:3e:fc:69:53:37:f0:be:31:57:2f:90:a7:da:0c:4a:
         1d:5f:13:a3:95:ef:0b:77:62:c7:9b:8d:71:5d:b9:00:a1:4c:
         e8:72:dd:65:39:37:1f:5e:15:da:a6:e5:cf:d3:82:cc:76:48:
         9e:29:b9:05:26:86:d1:01:9b:94:c0:e4:7d:96:35:5b:d2:f4:
         72:2a:c8:9a:04:a9:ff:f7:fd:bb:1d:93:f2:38:cc:01:23:ac:
         89:80:2d:aa:25:2e:48:4d:4e:d3:0f:ca:45:ea:72:3a:e7:9b:
         1e:ea:68:f5:4d:92:70:87:2b:5b:61:06:11:a1:e1:7f:10:ff:
         d5:4c:c1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----