Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
File:                     XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft (raw, json)
Hash identifier:          MWNu7uU1+ZD7x2nl/oGYaDwX7pSlU5Q77+w7JbHRyY8=
Subject key identifier:   12:A7:68:7C:02:22:C4:6E:6D:16:D2:C7:C9:00:DF:F1:2B:73:7C:B6
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Certificate issuer:       /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial:       018F701F6A655F9E20FCABFA32ECA2DBDC1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
Manifest number:          107C
Signing time:             Mon 13 May 2024 04:04:18 +0000
Manifest this update:     Mon 13 May 2024 04:04:18 +0000
Manifest next update:     Tue 14 May 2024 04:04:18 +0000
Files and hashes:         1: O9230jJ_z7gK6WB-M7pAMQ8_hNM.roa (hash: pgmTaFJudaOPdu4xq5HXXii27fhwH417aICU6d74tSc=)
                          2: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl (hash: hMcGLVdNr528MXaWq+BHymscvv3k0mhcy7FfgxWr3BI=)
                          3: dAOzua8OV9Kl53YG_HqeOLpvKR8.roa (hash: 6Sk2TNdidKj1Cbz3OhIueNa1qW1T1m0HnqxKYC9w5g0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 May 2024 04:04:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:70:1f:6a:65:5f:9e:20:fc:ab:fa:32:ec:a2:db:dc:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
        Validity
            Not Before: May 13 04:04:18 2024 GMT
            Not After : May 14 04:04:18 2024 GMT
        Subject: CN=12a7687c0222c46e6d16d2c7c900dff12b737cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a0:97:6e:aa:ed:d4:de:f6:21:7c:c3:8b:dc:
                    de:3a:4c:a1:86:b3:81:a5:75:bb:86:52:95:00:68:
                    e3:6c:c9:02:cb:af:d4:a9:45:11:32:e0:6f:2f:68:
                    26:b7:1d:69:4c:bb:3f:32:9e:de:47:97:95:a9:83:
                    9b:18:2b:ac:34:07:cc:94:0a:42:b3:99:8f:fc:3d:
                    2a:29:e7:19:35:5c:55:92:6d:35:9f:c0:13:0d:c4:
                    94:66:9e:63:39:e2:3c:38:92:95:9e:30:3a:44:75:
                    71:64:cb:19:99:f2:65:53:0a:71:c6:21:1a:c3:b8:
                    18:bf:40:cb:a9:8e:7c:dd:75:53:40:66:be:48:50:
                    e0:0e:b6:d3:7c:66:cd:7f:ca:7f:4a:e7:9b:3e:ed:
                    a7:03:37:35:6b:62:c7:ef:84:96:6d:57:e0:56:84:
                    5c:62:ec:d4:24:d6:e4:ce:12:60:b0:44:f7:93:3a:
                    e7:4a:5b:5e:57:1e:11:e0:80:2a:fd:b8:d2:c5:9a:
                    98:5a:e9:f4:b5:8d:6d:21:e0:f0:d1:b8:83:6a:30:
                    df:f0:51:52:f3:2d:bc:14:6d:16:1d:e4:f9:fa:98:
                    30:fb:a4:53:85:3a:a6:69:f7:11:b6:3e:92:96:01:
                    fa:61:a8:51:bf:80:bb:43:4a:e4:18:8f:0e:fc:dd:
                    05:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A7:68:7C:02:22:C4:6E:6D:16:D2:C7:C9:00:DF:F1:2B:73:7C:B6
            X509v3 Authority Key Identifier:
                keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:73:e7:02:dc:90:0f:96:9d:0b:32:8c:c2:6e:39:1f:e1:e8:
         ef:c9:5d:bf:bc:d9:2c:ac:6e:8c:bc:3a:2f:55:d2:91:7d:05:
         6e:33:87:2e:7e:7b:61:93:65:df:8b:30:fd:b9:23:d5:ca:18:
         44:9f:9e:52:02:12:e5:f5:0f:74:f5:0d:e7:ad:82:fb:33:93:
         ae:f0:33:3e:e1:ab:41:88:84:98:c8:4e:a2:02:35:96:a8:85:
         a2:47:21:94:6a:a2:cc:59:e5:96:4f:3a:2d:fb:30:ad:08:fc:
         4d:e7:01:8f:4d:c0:d7:02:e9:fb:2d:cf:a6:da:2c:02:62:38:
         09:74:55:c3:24:27:e8:19:d4:46:43:d7:56:43:d3:92:e2:61:
         87:c6:c2:25:9c:54:72:12:69:5a:9e:01:08:6e:2e:74:bf:3e:
         82:0e:8e:36:ed:53:cf:0d:2c:e4:8f:4e:96:20:c3:82:31:6e:
         ee:b1:f9:32:64:89:20:d9:bc:4b:cb:69:5b:8e:ff:83:8a:96:
         ac:1c:5c:ce:6a:30:00:b0:e9:c6:78:10:64:db:67:a4:6a:cc:
         1e:aa:38:4c:01:83:5b:31:04:04:a8:a0:82:bd:81:0b:cd:fb:
         17:88:cc:73:47:aa:2f:dc:c6:72:9e:08:46:96:4f:b7:85:75:
         5d:07:ae:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----