Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.mft
File:                     TGD9CUHz0veinDVh5WMYbvd1oeU.mft (raw, json)
Hash identifier:          8GuQZvNSo/SSQUoHao8GZyn/GgmvmY8Zg+gp6+IRW14=
Subject key identifier:   30:13:ED:8F:AA:F7:C8:86:36:1F:0D:5D:4F:01:68:6E:EB:1D:DE:21
Authority key identifier: 4C:60:FD:09:41:F3:D2:F7:A2:9C:35:61:E5:63:18:6E:F7:75:A1:E5
Certificate issuer:       /CN=4c60fd0941f3d2f7a29c3561e563186ef775a1e5
Certificate serial:       018F93158403CCF4A6BDA617C0D92B8F2DE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TGD9CUHz0veinDVh5WMYbvd1oeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.mft
Manifest number:          012A
Signing time:             Sun 19 May 2024 23:00:11 +0000
Manifest this update:     Sun 19 May 2024 23:00:11 +0000
Manifest next update:     Mon 20 May 2024 23:00:11 +0000
Files and hashes:         1: TGD9CUHz0veinDVh5WMYbvd1oeU.crl (hash: whYlHOJRsDBZtW/ZlDn+ZFWqG28WgJq31NkIdLCslLk=)
                          2: ccRHiH9EVWGO3e6k1qk3dIKpNGw.roa (hash: LMal4uqE4sl0WthxJ9DMALt41uiCc1+eeqqGvHt9F1g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TGD9CUHz0veinDVh5WMYbvd1oeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:93:15:84:03:cc:f4:a6:bd:a6:17:c0:d9:2b:8f:2d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c60fd0941f3d2f7a29c3561e563186ef775a1e5
        Validity
            Not Before: May 19 23:00:11 2024 GMT
            Not After : May 20 23:00:11 2024 GMT
        Subject: CN=3013ed8faaf7c886361f0d5d4f01686eeb1dde21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:da:a2:e8:7e:29:d2:b7:89:4a:da:af:52:50:
                    4e:a6:93:5c:ca:89:2a:3b:0e:4d:c3:ef:20:e1:35:
                    f5:59:dd:61:f1:a8:f0:c5:b1:96:6d:89:eb:54:bf:
                    df:7a:2b:7e:f3:0b:f4:2f:2a:2d:64:f3:e5:21:63:
                    42:93:c0:82:78:49:49:64:f3:33:ee:10:08:44:e7:
                    94:e2:ac:35:9c:de:89:de:cc:77:2c:19:cc:d6:34:
                    25:b5:7b:50:0d:db:33:0d:d3:2b:0c:2b:e3:f9:46:
                    2a:b6:65:9f:60:56:14:40:97:e9:12:4f:da:e4:ae:
                    11:65:3c:b2:c7:eb:2b:59:04:74:41:94:8a:bd:1d:
                    1b:66:63:03:7d:f2:60:d8:a1:4d:94:df:d6:c3:1c:
                    f8:d0:47:4b:ab:03:35:a7:33:b5:29:9b:e2:75:c1:
                    bd:b1:32:91:16:34:ae:86:79:6a:4e:1e:5c:d0:54:
                    1d:8f:9f:17:f8:cc:98:4b:2d:86:85:1c:1c:f7:07:
                    03:13:fa:4a:c6:b4:03:79:aa:8a:33:e2:b7:32:72:
                    d5:ca:74:4a:b9:e5:bc:2a:c4:52:9d:56:0f:84:9c:
                    3c:ea:c9:cd:b9:5e:b6:65:b3:a2:5f:c3:a6:db:96:
                    40:c7:8a:ce:8d:ca:15:77:fd:cf:51:7b:ba:d2:ec:
                    8c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:13:ED:8F:AA:F7:C8:86:36:1F:0D:5D:4F:01:68:6E:EB:1D:DE:21
            X509v3 Authority Key Identifier:
                keyid:4C:60:FD:09:41:F3:D2:F7:A2:9C:35:61:E5:63:18:6E:F7:75:A1:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGD9CUHz0veinDVh5WMYbvd1oeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a4:95:36:2b:f0:c9:3a:18:25:f1:8b:f3:3a:e3:18:e9:31:
         0c:22:db:c2:94:56:d5:00:88:75:3d:65:8d:e7:bf:72:22:ff:
         b1:7e:d7:31:17:6c:d2:94:02:ff:18:28:f0:dc:e8:aa:1d:a4:
         f0:50:39:f8:bf:87:6a:78:bd:a1:68:53:49:4a:58:86:94:1c:
         53:7f:7f:e8:89:bb:bf:76:b4:71:23:f2:25:8c:0f:e7:bd:b5:
         78:ce:87:dd:1a:d2:1b:cf:49:63:32:e1:89:7a:1d:3f:41:79:
         99:6c:69:1d:5e:a5:67:e3:c3:48:a9:2e:66:1e:ab:78:75:c5:
         cf:f2:05:d9:23:13:8b:99:01:55:b3:66:b2:df:5a:fa:3a:b1:
         34:f8:a8:30:f4:90:62:75:2d:ee:fd:66:a6:1a:1e:65:c5:f9:
         87:03:04:63:be:b7:b2:c3:a5:72:ca:88:a9:64:3e:b5:22:16:
         be:7d:36:fd:4a:43:83:12:44:77:0b:f2:19:c3:f5:3f:1a:53:
         2b:62:12:8d:25:ba:ab:3e:0e:03:dc:b1:40:12:bf:a1:b1:bc:
         94:1f:f1:69:40:78:76:b1:f0:77:3f:6e:b7:7e:be:cf:fc:74:
         e4:02:2e:74:76:cb:ac:04:4e:74:c1:3c:e7:dd:6b:13:f4:41:
         2b:01:c1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----