Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft
File:                     l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft (raw, json)
Hash identifier:          xMYneo9EKoCbH3C1aB0NJTNadccPSI7qdDajSv+ml+k=
Subject key identifier:   25:92:A2:D6:1F:BB:FF:F6:79:9E:7F:A9:07:75:47:2D:CB:E8:C2:2C
Authority key identifier: 97:7B:8A:A0:63:FC:4F:2B:B8:4A:9F:56:A3:BF:A3:8B:2A:BE:DF:9B
Certificate issuer:       /CN=977b8aa063fc4f2bb84a9f56a3bfa38b2abedf9b
Certificate serial:       018F94CDFD86D25EA3C0F84A24E67843D691
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft
Manifest number:          0B79
Signing time:             Mon 20 May 2024 07:01:18 +0000
Manifest this update:     Mon 20 May 2024 07:01:18 +0000
Manifest next update:     Tue 21 May 2024 07:01:18 +0000
Files and hashes:         1: cA2y4GR9jG5G4BE8Dx91M--4Nso.roa (hash: RRn6DZLPGm1lEQ0alL+JuVp6hqUe/aAlfuXsX+4VIlw=)
                          2: l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.crl (hash: EakZNiH+vekATQl/hITCDAvknK1z8ABKsThBXfhkaf0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:94:cd:fd:86:d2:5e:a3:c0:f8:4a:24:e6:78:43:d6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977b8aa063fc4f2bb84a9f56a3bfa38b2abedf9b
        Validity
            Not Before: May 20 07:01:18 2024 GMT
            Not After : May 21 07:01:18 2024 GMT
        Subject: CN=2592a2d61fbbfff6799e7fa90775472dcbe8c22c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3e:b0:f0:23:02:ea:29:56:d7:e2:d0:f0:25:
                    30:92:79:2d:00:e8:3f:1a:be:ce:61:44:97:f7:a4:
                    bb:e5:75:d3:70:6c:59:d4:50:08:bb:3d:7b:4e:8b:
                    18:6b:ff:cd:84:7e:1e:bf:aa:f7:6a:b0:e4:7b:2b:
                    0b:cd:08:f1:c1:bd:79:84:e6:77:6f:53:f8:06:9c:
                    85:68:af:3a:bb:21:a1:a8:bb:23:59:3a:31:45:e0:
                    6c:19:0a:0c:b3:d2:09:c6:82:c6:ce:20:dd:32:2d:
                    2e:96:82:36:81:51:63:1b:fc:65:70:e6:0f:3d:46:
                    a3:ec:58:97:22:d5:3c:b2:6a:08:99:bc:1c:17:08:
                    00:7f:70:2f:f9:79:0e:b9:25:2b:1c:86:85:d8:50:
                    eb:f0:14:90:99:ad:25:7b:27:99:e0:83:37:2f:0e:
                    bc:04:b3:55:aa:bd:9f:2a:d7:5c:84:1e:0f:8f:9f:
                    d1:d6:8d:dd:ba:d5:91:a3:7c:01:ba:4e:fc:1b:89:
                    b3:aa:7b:bf:d3:55:8b:99:ad:29:2e:b2:52:43:61:
                    17:cf:41:3a:38:88:e0:3c:ce:92:a3:0e:73:b1:ee:
                    e9:2d:2c:f1:f5:13:e4:33:e3:b5:4f:31:79:c6:74:
                    37:a8:64:1e:f6:93:ea:98:b6:ce:b6:0d:ed:0a:7f:
                    d8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:92:A2:D6:1F:BB:FF:F6:79:9E:7F:A9:07:75:47:2D:CB:E8:C2:2C
            X509v3 Authority Key Identifier:
                keyid:97:7B:8A:A0:63:FC:4F:2B:B8:4A:9F:56:A3:BF:A3:8B:2A:BE:DF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:17:c8:16:65:b5:58:45:b6:a7:8d:95:54:5e:08:5f:2a:76:
         68:58:12:f8:94:f8:f3:4e:5f:81:d7:9e:d4:75:cc:8f:74:e8:
         b8:0b:cc:d0:2d:f5:b4:be:49:7b:5f:b0:0a:b9:7f:d8:78:e8:
         ba:9b:e5:ef:d1:39:0e:01:b3:cc:bf:f6:a2:6d:34:8b:ef:2d:
         f8:ea:ad:b1:09:bb:f6:c9:c9:89:f9:87:50:1d:21:0c:b2:6d:
         35:1e:b8:9e:73:19:3e:2a:3f:b1:19:b1:33:5b:53:f6:4a:3c:
         97:6c:9e:35:67:5b:f0:e0:4f:f7:dc:ac:d7:5e:ac:17:aa:6b:
         47:4a:d4:b9:5a:3f:15:70:ff:9e:1c:1b:29:2f:4b:f1:70:eb:
         cc:18:35:fc:dc:5f:ca:69:1f:6d:ba:b4:75:03:9d:96:87:87:
         97:4c:35:ac:83:5d:ed:1c:36:d3:9f:7f:17:dd:2d:bb:41:fa:
         77:48:52:f7:36:1a:ac:47:15:b6:39:6f:24:c0:5f:2d:ab:97:
         66:cd:4a:99:9f:c7:fc:4b:6b:c9:7a:d7:21:c4:46:f5:0d:89:
         2d:08:ea:67:82:af:c8:d3:13:5f:1d:bc:bb:59:38:c4:31:e4:
         c1:76:8b:53:be:57:c5:36:dc:c2:d2:9e:df:6d:eb:f5:2b:55:
         29:96:bb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----