Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
File:                     fiyz0KZBdpx4AcSBYSAVwsyztlU.mft (raw, json)
Hash identifier:          /Tj8yIFvO+tI/fRCiAWvDHLk+MjVLIZUUPyyieop/fg=
Subject key identifier:   E9:7D:1B:DD:09:7F:F0:43:19:26:42:1C:D0:CB:3B:4E:D0:B9:EC:76
Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
Certificate issuer:       /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Certificate serial:       018F836DC73E8503930D31C057AFB8B807BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
Manifest number:          1179
Signing time:             Thu 16 May 2024 22:02:40 +0000
Manifest this update:     Thu 16 May 2024 22:02:40 +0000
Manifest next update:     Fri 17 May 2024 22:02:40 +0000
Files and hashes:         1: 2XE1S5jPNshNL_VS5Kchyq2Dmzc.roa (hash: 7oDzcnyspznt471bYizuFC0lBGXEbr+kmoCFj7/DZ/c=)
                          2: 5QXCfyDPPphpcAX5JvnC-ujHBCk.roa (hash: CqYuNfocldGsQ/CXtBO2QCu+/15iww0b0d3v8e23hrY=)
                          3: XtNYT_Dj5Z5A6MQbH_1BYVuV9DQ.roa (hash: BMTr2ccM98F11g7cRkVNxsvAE8csx8v/5iMv+Aj9aho=)
                          4: fiyz0KZBdpx4AcSBYSAVwsyztlU.crl (hash: 5/lGFqCToXwrEh/DXrWMA241tzXK9l9Q9Vd8Ssi37WA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 14:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6d:c7:3e:85:03:93:0d:31:c0:57:af:b8:b8:07:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
        Validity
            Not Before: May 16 22:02:40 2024 GMT
            Not After : May 17 22:02:40 2024 GMT
        Subject: CN=e97d1bdd097ff0431926421cd0cb3b4ed0b9ec76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8c:a0:82:f0:0f:41:13:68:09:fd:bf:33:4d:
                    fd:0d:6c:dd:88:7e:f3:41:d3:7d:df:15:20:02:71:
                    7f:fc:e5:47:67:b5:10:e9:18:47:3d:30:9f:d4:26:
                    54:92:88:0a:05:cd:e3:ec:3d:b8:c6:3a:24:5b:68:
                    78:da:0b:48:01:55:34:ee:83:47:5d:ea:ce:e7:44:
                    58:9f:cd:66:eb:99:8c:81:35:24:b4:6d:d6:3f:19:
                    8d:3b:c0:91:3f:f0:ff:1c:7b:29:3d:7e:80:49:fa:
                    bd:25:63:86:3a:5f:e2:de:2a:75:05:e4:e6:3b:cd:
                    97:d1:a3:f1:a3:b0:e4:14:4a:2a:4b:45:aa:96:24:
                    32:19:24:02:60:43:7d:8e:cb:34:83:1d:10:69:d2:
                    86:f0:c5:fb:43:22:8b:de:c1:3c:cd:3a:9a:6f:12:
                    3e:22:93:96:e4:d2:56:b7:60:b7:8a:98:94:9a:2c:
                    16:43:f0:a6:5f:88:6e:2c:39:1d:02:36:ef:ea:c1:
                    14:79:ae:a3:82:9b:e3:6b:f7:5a:ae:ef:cf:24:b9:
                    c5:e8:78:62:e4:42:cf:ae:13:ef:4e:1d:61:9d:52:
                    24:a9:be:7c:e0:2a:3e:b3:b0:fb:5a:6c:a3:39:eb:
                    32:7c:a0:a0:a2:6c:3d:36:6c:c2:49:9a:63:7c:60:
                    ff:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7D:1B:DD:09:7F:F0:43:19:26:42:1C:D0:CB:3B:4E:D0:B9:EC:76
            X509v3 Authority Key Identifier:
                keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:78:5f:89:63:0e:19:dd:d7:5e:21:2d:fe:97:86:c0:77:39:
         b0:e1:3d:1b:7a:30:1f:8f:9a:48:71:7d:6a:c1:3a:bb:39:28:
         b6:56:c8:9e:fd:90:14:c3:a7:92:d0:69:be:b0:0a:87:25:17:
         c3:67:38:57:f3:0b:32:c3:e6:fc:10:e7:7c:d2:11:43:37:6f:
         b2:89:3a:dd:cd:46:21:fd:99:9e:2e:55:d0:a2:b7:a2:da:3d:
         a7:bf:b5:be:25:5e:37:04:fd:54:00:a8:e5:30:e7:65:de:17:
         05:67:63:84:ec:2c:79:93:ec:7b:d4:27:63:b4:87:8e:7c:e1:
         bd:a1:79:2d:a3:c8:da:59:ed:bd:f9:04:50:25:fa:d2:da:9a:
         f2:dc:a2:d8:c5:a4:81:fb:ab:9a:67:7d:9b:ee:0c:1d:a3:34:
         87:d5:d0:d9:99:02:23:e8:3e:dd:17:7c:30:ec:f1:bb:41:82:
         9e:c0:36:ba:9e:57:a9:16:e2:45:0c:7f:23:ea:74:76:a4:7b:
         3d:1f:9f:a0:e3:11:67:ca:3f:c9:12:ba:cd:74:1b:0b:cb:31:
         56:b4:6a:89:d6:17:a6:ed:6e:cb:b5:ed:b6:fe:3c:d5:10:4b:
         79:ad:ba:43:d6:4a:26:b4:ad:c4:2c:89:c5:e1:d6:83:5b:5e:
         0c:1f:51:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----