Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
File:                     p2q9qQNG0MrSXcpvdFC8z40I53E.mft (raw, json)
Hash identifier:          e4cPoQTUletFBqDUYOi6JUbc9WkQNTGLb65WGR0xHJ4=
Subject key identifier:   A3:53:0B:41:97:C6:9F:4A:45:9E:BF:A8:27:80:30:FE:EE:01:82:DD
Authority key identifier: A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
Certificate issuer:       /CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Certificate serial:       018F8892636025C4548F4B16A97D7F13A2A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
Manifest number:          085A
Signing time:             Fri 17 May 2024 22:00:46 +0000
Manifest this update:     Fri 17 May 2024 22:00:46 +0000
Manifest next update:     Sat 18 May 2024 22:00:46 +0000
Files and hashes:         1: 3cQZPfHrEF0ghIG24gBDtcjaezw.roa (hash: yBLIW3nF7xejMtDR40pyJu77Hq4IB55mP7q4vrswIQ8=)
                          2: p2q9qQNG0MrSXcpvdFC8z40I53E.crl (hash: BRRI5ORHNgQOhyWHigi4dy+f4xHTwIimlqbGx5J+NoE=)
                          3: rYdRq5RTzZifkGgAtto1CocgyRE.roa (hash: KnfDnVyY4opx9ZRFCOe1u8iEEM+apklBuv2YWbj4GZY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:63:60:25:c4:54:8f:4b:16:a9:7d:7f:13:a2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a76abda90346d0cad25dca6f7450bccf8d08e771
        Validity
            Not Before: May 17 22:00:46 2024 GMT
            Not After : May 18 22:00:46 2024 GMT
        Subject: CN=a3530b4197c69f4a459ebfa8278030feee0182dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fe:ca:d0:28:77:62:c7:cc:26:1d:da:b1:f5:
                    bf:9d:50:e9:fb:c0:90:5e:54:34:0d:bf:6b:42:94:
                    f8:75:d7:0e:18:2e:bc:cc:e6:70:e4:08:4a:57:be:
                    8a:c8:05:ef:d1:1e:a9:a5:e4:1f:df:29:f5:d0:78:
                    0e:64:24:eb:c5:72:06:e5:46:5d:cb:69:c3:e8:be:
                    d6:d2:43:21:43:63:3b:69:ca:f7:49:cb:dc:ad:e4:
                    5c:8e:44:b5:32:7d:c8:af:2b:0a:c6:90:81:c4:49:
                    c1:f0:80:c6:d7:81:0b:88:ff:c0:fb:b3:82:f1:16:
                    d7:7a:ba:a1:54:bf:2f:b3:9c:2e:3b:43:56:65:6e:
                    9d:5a:95:aa:d7:68:96:47:38:ea:18:ba:a7:90:1d:
                    f7:43:fd:b9:ba:ac:d6:be:d1:74:f1:f1:c5:62:8c:
                    ca:c8:20:db:f9:68:45:aa:4c:49:01:cf:b3:ae:3b:
                    8d:4c:a0:28:55:4d:d2:cb:f2:65:3c:2c:1b:ac:df:
                    92:c6:47:2c:14:6a:05:59:a5:94:dc:18:f3:13:c1:
                    c0:b4:a0:5c:5a:fc:99:b4:1e:4d:64:2e:36:38:2d:
                    78:55:74:bc:d0:01:5e:df:f9:e8:3a:8d:e3:63:41:
                    69:4c:b9:93:eb:64:9c:a8:73:43:7c:ae:55:6b:c7:
                    6c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:53:0B:41:97:C6:9F:4A:45:9E:BF:A8:27:80:30:FE:EE:01:82:DD
            X509v3 Authority Key Identifier:
                keyid:A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d4:3a:e1:79:fe:2f:d5:d8:38:38:51:c8:67:8c:8a:07:f3:
         fa:22:d7:33:28:0b:c8:0f:69:ba:9c:55:bf:4b:85:e3:c5:b9:
         c9:ff:ec:17:48:2b:3b:e7:b5:ff:66:41:f3:db:72:f1:3c:96:
         84:80:40:ed:9d:b4:0a:68:4b:e7:d8:71:78:dc:bd:79:ef:4c:
         36:bd:19:8e:45:93:57:74:33:3d:28:07:b0:49:a4:d0:5c:8f:
         fc:7b:74:ed:f6:29:aa:2c:a5:97:02:5a:6d:7f:f6:d6:61:b2:
         fa:36:a4:07:ec:80:17:19:d8:23:f3:0c:1a:ca:b3:b2:27:da:
         0b:4f:fb:d6:f9:c6:04:d2:76:b9:65:f8:cd:3e:2b:fe:56:ff:
         2e:5e:7a:e1:85:e8:86:fd:26:7b:aa:bf:93:00:ea:34:50:b8:
         ea:54:80:02:e1:1a:f8:d8:a6:ba:f0:2b:43:2f:cd:ac:18:ee:
         8c:26:79:bb:3f:a5:2b:7c:9b:76:4b:90:13:1a:47:aa:62:d9:
         d8:2d:c4:eb:d2:df:c5:3d:4e:0d:6a:20:b5:66:46:21:fd:d3:
         02:71:4b:3d:3e:8f:4e:88:25:4c:f1:26:75:46:be:0b:4d:81:
         32:79:14:aa:6b:fa:ae:3a:bd:fe:12:24:f2:e0:a9:00:c6:e8:
         ed:e0:4f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----