Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
File:                     XZno1XE6XmOCwNE4nWJCgW-db7k.mft (raw, json)
Hash identifier:          l5fvNs/4xtt4Uf2moDTPQOvgFLxcXEp0PvgQdOE/Tqg=
Subject key identifier:   48:F1:42:11:50:4F:E1:7E:08:3B:B2:5E:D4:C1:5B:5A:A4:D7:F9:CA
Authority key identifier: 5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
Certificate issuer:       /CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Certificate serial:       018F98AB6C64657DAE5F4527AEEFA28CADD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
Manifest number:          1182
Signing time:             Tue 21 May 2024 01:02:02 +0000
Manifest this update:     Tue 21 May 2024 01:02:02 +0000
Manifest next update:     Wed 22 May 2024 01:02:02 +0000
Files and hashes:         1: BFvI0ANym3QoN7I-RQKbMIt6gig.roa (hash: GrlnaBdw7dBvLMUTrNOXUqsN/qRKJzGUYDALeRJwyFA=)
                          2: TRXJl1FHjHUFLAbPXioeeQS0GU8.roa (hash: v3IBf+nGF2X8TNJR1+CHrX1MQgZ+C2257d1namFw/P4=)
                          3: XZno1XE6XmOCwNE4nWJCgW-db7k.crl (hash: /U7/FGlBwwOfOQ+YnY2UdpTT68W3EcQRSUwu4/yBv1g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:ab:6c:64:65:7d:ae:5f:45:27:ae:ef:a2:8c:ad:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
        Validity
            Not Before: May 21 01:02:02 2024 GMT
            Not After : May 22 01:02:02 2024 GMT
        Subject: CN=48f14211504fe17e083bb25ed4c15b5aa4d7f9ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:da:3b:d7:4a:0e:0b:f5:b0:f0:b9:71:d1:df:
                    c4:f0:b7:5e:03:d3:49:24:af:8f:82:41:45:a9:09:
                    d1:86:22:49:1b:5b:ef:cf:4d:68:bc:f7:6f:e2:ab:
                    71:9b:c3:3d:ad:a2:3a:35:b3:82:75:82:1c:c6:29:
                    d4:64:1e:0c:80:85:8a:22:9c:84:77:7b:c4:9a:4b:
                    b7:4d:0d:e1:ce:67:59:14:b2:3b:b6:7a:5f:be:38:
                    e5:4f:41:fd:bb:09:0c:f1:54:29:51:c3:b3:ed:a8:
                    71:90:d1:23:6a:55:d9:11:7b:2b:37:3b:ff:0f:69:
                    c4:b5:f9:50:0a:a2:e4:a6:df:a2:28:87:ed:d3:e4:
                    c5:2f:44:0b:d4:6f:a2:61:60:a9:d9:61:48:88:37:
                    a6:66:3d:f8:ae:52:42:ff:94:2b:d5:76:93:9f:e1:
                    31:45:b9:c9:06:26:9e:1f:9d:e4:ca:0c:4a:56:2d:
                    3c:32:f5:8c:4c:ae:58:2b:f2:c1:eb:2f:e3:a5:cd:
                    0d:89:6c:41:f0:bd:e2:89:b5:8f:d7:c7:23:81:8e:
                    17:14:a7:a9:27:1f:04:85:67:31:4a:e3:3f:c0:00:
                    28:ce:af:f0:f3:c0:0a:bc:cc:41:1a:2a:a4:0f:ee:
                    89:bb:a4:59:f9:9e:2b:5b:d5:3c:ae:7c:77:f3:13:
                    dc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F1:42:11:50:4F:E1:7E:08:3B:B2:5E:D4:C1:5B:5A:A4:D7:F9:CA
            X509v3 Authority Key Identifier:
                keyid:5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:1b:1f:ca:06:49:8d:ae:00:ec:64:41:11:de:04:c0:62:67:
         b1:11:3d:91:38:ea:c6:2b:c5:11:97:44:80:20:79:de:03:09:
         82:36:44:cd:49:bd:c9:96:31:fe:66:1f:39:c4:70:47:77:06:
         83:94:65:4c:ed:e6:d3:dc:45:be:01:d3:8d:bc:5e:50:af:7b:
         9e:19:6d:58:67:e4:3e:2f:07:25:28:13:a9:2c:c5:7d:08:27:
         c9:55:04:f0:0a:43:1a:63:85:ce:cf:08:22:92:4f:dc:84:ce:
         20:bd:59:80:9d:14:e3:61:17:75:33:ca:4b:3d:40:38:37:f3:
         68:ce:7d:91:ea:c1:e8:3c:1d:80:da:d3:a7:48:ab:0f:d7:43:
         c9:1d:3e:71:c1:25:d5:e9:7b:98:84:12:52:54:1c:d2:55:1c:
         e4:63:a4:f8:95:ff:24:13:51:6b:a7:4c:e0:78:3c:3b:6e:08:
         da:80:11:6c:d5:be:25:76:c9:8e:ca:9c:ec:91:b1:58:59:1c:
         da:70:c7:09:a3:a5:91:57:69:75:59:e4:fa:f0:fa:3b:62:51:
         ea:99:d9:cb:f2:b5:b4:ee:25:50:b9:28:be:6b:54:b6:64:a5:
         81:55:2e:f9:3e:7f:60:bd:bd:d7:39:f5:90:97:cb:91:44:5d:
         af:d8:bd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----