Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.mft
File:                     F6ECNM-1UiqimzJgp1-Kn3mTPns.mft (raw, json)
Hash identifier:          nsbIcrJ+dvsvwnq5PuoUvufnkeCJdkqZAY8AD2GV3SI=
Subject key identifier:   7C:81:23:95:20:7D:14:33:92:09:14:04:97:CD:CB:D0:AF:9F:F3:29
Authority key identifier: 17:A1:02:34:CF:B5:52:2A:A2:9B:32:60:A7:5F:8A:9F:79:93:3E:7B
Certificate issuer:       /CN=17a10234cfb5522aa29b3260a75f8a9f79933e7b
Certificate serial:       018F9729CC4A46BD2F451C3085A68B91A4A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.mft
Manifest number:          B5
Signing time:             Mon 20 May 2024 18:00:49 +0000
Manifest this update:     Mon 20 May 2024 18:00:49 +0000
Manifest next update:     Tue 21 May 2024 18:00:49 +0000
Files and hashes:         1: 1ZWW97jhAU94C7jUQmj8I4vPW5s.roa (hash: GCZdc25l4il73b6WeQtkKWMIVMctm5OlYo4sCGjQ+xw=)
                          2: Da3AJDXzfRh5ibfxBnEXbhKwhro.roa (hash: LPk9vPnWOc8dpmV5+oDSq0fZxkyT3+Bt80puEx1njnE=)
                          3: F6ECNM-1UiqimzJgp1-Kn3mTPns.crl (hash: 3+527y5qZqGK+/p8yyUqC8dXxb9M79ErnY+7JZqPR9o=)
                          4: ZW2qMuaRu08qZ_meHAa28f7DCvY.roa (hash: 3QUj/BQRMd/7tI8Ijbkpm8l4OnNsIkmqrSIedOyQrmc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:97:29:cc:4a:46:bd:2f:45:1c:30:85:a6:8b:91:a4:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17a10234cfb5522aa29b3260a75f8a9f79933e7b
        Validity
            Not Before: May 20 18:00:49 2024 GMT
            Not After : May 21 18:00:49 2024 GMT
        Subject: CN=7c812395207d14339209140497cdcbd0af9ff329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:40:2e:0d:9e:81:2c:32:2d:ab:5f:ef:80:a5:
                    b6:58:4e:67:ed:d0:22:82:4f:ee:d2:39:ce:e6:61:
                    ec:d4:02:27:0e:ba:10:ab:79:19:9d:b3:97:b7:ec:
                    c9:10:95:6d:54:00:8d:ef:e3:31:29:6e:b6:56:29:
                    73:75:02:0c:32:a2:8a:0e:78:f7:cc:4b:ba:7d:87:
                    0c:a7:f1:cd:b5:94:01:fa:b4:c4:b3:f8:e0:aa:d1:
                    6e:2e:37:7b:80:5f:67:15:3f:06:0b:c2:5d:f9:d0:
                    97:04:10:fc:fc:e2:a2:22:69:74:28:33:78:30:ef:
                    87:03:f0:bf:da:de:39:3d:cf:32:bb:30:cd:89:f1:
                    27:fe:c3:68:ae:01:eb:32:07:49:ca:96:52:fb:73:
                    86:41:a5:68:28:25:2b:0f:b7:f4:3f:ac:48:5f:d2:
                    0e:6f:7c:39:57:0d:e5:47:28:45:0d:4d:6d:a6:a6:
                    ed:6e:7c:6b:a8:e8:cc:f2:7c:43:d2:e5:51:63:1a:
                    e5:50:0a:76:be:8c:a7:7e:90:74:fe:d7:c2:02:2e:
                    41:ae:0d:aa:03:1e:e5:7d:e9:e3:6a:d2:cb:a5:c0:
                    de:31:87:f8:f6:f7:60:2e:c7:de:09:bd:c8:41:cd:
                    b6:24:27:f0:76:b7:9f:e1:fd:10:7c:e1:b3:94:d5:
                    3c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:81:23:95:20:7D:14:33:92:09:14:04:97:CD:CB:D0:AF:9F:F3:29
            X509v3 Authority Key Identifier:
                keyid:17:A1:02:34:CF:B5:52:2A:A2:9B:32:60:A7:5F:8A:9F:79:93:3E:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:b8:56:73:be:e7:0b:97:15:7b:52:f0:95:0a:4b:65:fb:b8:
         73:d1:40:ee:e8:c3:be:6a:43:5f:30:6f:5a:b9:60:36:99:6a:
         a1:2c:0a:70:e2:d6:35:78:e6:d0:49:99:69:9d:7f:5b:8b:c2:
         ff:60:60:11:15:15:a1:08:41:d8:a7:07:70:cd:c6:0e:2a:ae:
         f6:86:da:53:6e:94:c7:1d:11:44:18:d4:45:8a:2a:10:aa:5b:
         ca:98:4c:31:f8:96:ca:4c:22:fa:19:40:fd:c8:81:f2:b1:02:
         f5:b4:30:92:93:f3:69:c1:b8:d6:3e:34:ee:c7:69:6a:ab:81:
         3c:f8:39:7c:82:c1:9f:e2:49:67:91:ee:94:70:71:64:16:40:
         0a:50:b5:54:0a:b6:21:1d:b2:c3:0e:21:b8:18:10:ab:e6:89:
         36:ec:48:d6:75:ca:8f:54:ca:db:62:4d:68:99:2d:d3:6c:76:
         2a:85:93:bd:86:33:7a:b8:4c:11:6a:9a:88:eb:2c:f1:57:e1:
         3e:0d:81:2b:1a:0c:2e:ce:ba:40:8f:9f:b9:bb:e3:fc:29:26:
         06:f8:a1:6e:7e:d7:57:dd:62:31:5f:c6:f5:f0:17:5c:df:a4:
         f2:72:92:59:ec:dc:b2:bf:b1:d4:48:ad:23:97:c7:2d:08:96:
         7e:29:28:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----