Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
File:                     YboL58zjgOa7dOPF_OoIHpeZrlQ.mft (raw, json)
Hash identifier:          Uh2XKBM9dsY+U9BjjuKwa6pFWMSQ3zm+uVPmqPiC6bo=
Subject key identifier:   3F:C2:D5:AC:C7:B6:3F:2D:FA:C2:CE:22:3E:57:2D:D9:98:9A:C3:92
Authority key identifier: 61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
Certificate issuer:       /CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Certificate serial:       018F87B6B12BC9377999715EA374234AF68C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
Manifest number:          0EBD
Signing time:             Fri 17 May 2024 18:00:48 +0000
Manifest this update:     Fri 17 May 2024 18:00:48 +0000
Manifest next update:     Sat 18 May 2024 18:00:48 +0000
Files and hashes:         1: YboL58zjgOa7dOPF_OoIHpeZrlQ.crl (hash: GRh8BlnnVXukPFFm1qkGuxQtB+LOx7c84n+l8pmuWvo=)
                          2: Zyf8gWYgtJ-uYz5-PPYMWRnXmAI.roa (hash: LU5blXsJR9zaB3oleAUfP/Q26rxLS938XhCl+GZUu4g=)
                          3: m7Su4VCGLMeib3CNNxYrFM-H-Ac.roa (hash: qi9mJCV3raDSQDabjZBNkES/cEZmcbuRpguoHav9pD0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:b1:2b:c9:37:79:99:71:5e:a3:74:23:4a:f6:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
        Validity
            Not Before: May 17 18:00:48 2024 GMT
            Not After : May 18 18:00:48 2024 GMT
        Subject: CN=3fc2d5acc7b63f2dfac2ce223e572dd9989ac392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7a:b0:82:6b:4e:c1:7b:33:1a:55:c9:13:83:
                    28:d6:7e:be:97:e3:95:cc:f9:ff:16:14:c0:89:64:
                    32:4f:34:40:16:c7:91:69:58:93:1d:03:92:12:70:
                    02:35:0d:14:a9:24:c5:18:a5:16:3c:d9:26:5d:9e:
                    12:7e:13:55:75:6f:78:01:39:c7:23:c5:fd:e6:ea:
                    fd:e0:8a:8a:30:24:07:f5:7a:3b:b5:ff:ae:57:cd:
                    2f:f6:07:fa:cf:3e:9d:28:4c:f2:d3:b2:3b:1e:5b:
                    00:56:c2:7c:61:73:3e:09:b7:bb:4d:6c:c2:d9:8d:
                    08:3a:e7:2c:64:7b:af:be:99:f1:6f:ee:43:51:a6:
                    0e:bd:c9:15:f6:6b:1d:be:db:45:25:7e:9a:83:4b:
                    de:bb:a2:bc:32:d0:29:39:75:64:b2:04:bc:ad:43:
                    9b:06:7d:88:fd:61:a8:db:f0:80:99:8f:61:74:60:
                    9f:a8:c1:41:c0:06:35:c6:3b:7f:3e:5b:25:17:3c:
                    39:7f:80:b4:cf:f0:09:f5:ca:16:e9:aa:51:59:b1:
                    c0:42:12:e6:4d:b8:8b:b9:12:f2:1e:c6:b3:45:b9:
                    fa:c4:75:b0:d3:91:4b:7b:ea:1a:d6:ba:56:9e:81:
                    68:73:b5:81:20:ce:9c:35:7f:e7:05:9f:50:aa:9b:
                    e2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C2:D5:AC:C7:B6:3F:2D:FA:C2:CE:22:3E:57:2D:D9:98:9A:C3:92
            X509v3 Authority Key Identifier:
                keyid:61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:50:b4:d1:3b:c7:05:6c:a6:0a:b9:f3:0d:49:6a:18:a4:a0:
         fe:32:2d:1f:68:7a:d9:42:86:a5:85:6b:36:1e:70:26:48:8b:
         5c:c0:1e:a5:3e:c3:fb:12:2e:dd:67:c8:d6:f3:63:db:d7:c6:
         30:45:ae:7c:a2:aa:84:b7:0a:01:b0:7b:32:b4:b8:e6:e5:7f:
         e3:de:e7:3b:8c:dc:53:42:28:3d:b0:56:bd:fb:7c:b1:96:ab:
         a9:80:4f:e1:62:d2:90:e0:2b:c6:5e:c1:ae:3c:e8:6d:5f:a0:
         97:ff:bf:a8:a2:18:00:04:fb:30:b4:31:e3:e9:31:27:0d:99:
         00:90:84:78:58:d2:32:30:af:e9:7f:32:ca:ae:4e:6a:02:a6:
         8f:ce:52:fd:13:eb:38:84:40:32:ad:55:79:a8:d3:94:42:a0:
         6a:b3:4e:8e:7c:da:09:cf:ed:d4:6c:ab:d8:37:35:61:8b:63:
         b0:04:b4:2d:c6:88:9f:53:ff:31:0f:3d:df:39:27:31:86:34:
         52:26:e2:2f:9a:2e:75:6c:1f:b5:7f:fa:95:ae:0e:a2:72:f1:
         cc:43:9f:f9:91:35:2e:15:f3:d6:a2:63:87:1c:f4:1a:d4:d9:
         b5:32:7e:60:2e:f9:ca:ad:e0:03:e2:a4:f2:b0:1b:ab:23:fb:
         04:78:b3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----