Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
File:                     _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json)
Hash identifier:          w4wzl2xaMNvTdgfar+Xrw3dWQXp22VQ3xSH5iRCivsY=
Subject key identifier:   8C:2A:9F:20:A1:9F:50:FB:44:F2:87:F3:14:9F:74:05:11:C4:B2:2F
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Certificate issuer:       /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial:       018F87ED042FD7F9D1D75A25952737E32644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
Manifest number:          0CA6
Signing time:             Fri 17 May 2024 19:00:08 +0000
Manifest this update:     Fri 17 May 2024 19:00:08 +0000
Manifest next update:     Sat 18 May 2024 19:00:08 +0000
Files and hashes:         1: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: blPzTJSZx8wB3AEPVyOTmDNdljSH/yX6eK277PQFcrI=)
                          2: o1fe5TF_RuCRBfyc5DY_8QRAcjA.roa (hash: EQ8mib7KA1huVJrUBrYKM2PpROWTS2KYy0rBxwKea7E=)
                          3: oDPFQQWqjr-Uu8dd_N5hadL_FEk.roa (hash: CDGfxzy86vr4MlxKU7Gii3NV90F7siFci9Esa7k+7JI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:04:2f:d7:f9:d1:d7:5a:25:95:27:37:e3:26:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
        Validity
            Not Before: May 17 19:00:08 2024 GMT
            Not After : May 18 19:00:08 2024 GMT
        Subject: CN=8c2a9f20a19f50fb44f287f3149f740511c4b22f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ac:79:35:e6:53:00:c0:73:57:91:cf:eb:00:
                    21:73:8a:9f:2f:8e:d8:75:bd:49:b0:a0:bf:ce:fa:
                    aa:6b:38:1b:57:1c:2f:c3:cb:da:55:2a:8b:ff:f8:
                    9b:11:dd:25:c2:4c:de:23:85:a3:33:ff:6d:b1:84:
                    4e:b7:be:97:70:df:a0:ab:81:b6:ca:64:03:02:e1:
                    18:47:d3:7e:72:3e:f0:ab:48:13:9e:93:16:81:9c:
                    af:0f:83:09:33:04:71:01:a4:d4:0a:1e:64:eb:fe:
                    92:eb:cb:ae:d7:be:99:68:e9:a8:00:c4:fc:01:e6:
                    16:ea:c3:5c:3a:fb:71:01:6f:de:0c:0f:29:44:15:
                    ff:b9:72:ff:33:c3:89:9e:d3:1b:31:09:fa:72:ba:
                    a6:3e:d9:79:f6:85:f1:7d:46:93:25:9b:6a:77:9a:
                    ac:9e:e4:3b:27:e2:ba:3c:0e:7c:d5:39:ba:b3:da:
                    66:f1:de:8e:dc:24:1f:fb:6f:10:6e:6c:c1:d6:e1:
                    94:96:99:12:4d:3a:bb:40:45:93:d9:7f:0d:e2:f4:
                    2b:c3:7b:7a:ca:45:b9:18:2e:ac:70:79:a0:c8:32:
                    cc:87:2a:df:89:ce:46:26:cf:7f:09:9f:84:a3:81:
                    e9:04:d6:25:6a:05:d9:41:19:84:34:ea:c0:20:f3:
                    44:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2A:9F:20:A1:9F:50:FB:44:F2:87:F3:14:9F:74:05:11:C4:B2:2F
            X509v3 Authority Key Identifier:
                keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:b6:f1:d2:33:b2:1e:ce:77:cb:ab:74:f4:28:b1:ef:1f:7e:
         32:7a:be:26:f0:6a:69:97:0f:f9:a6:39:59:f6:df:35:11:26:
         8a:1d:ff:58:9a:cf:5c:ba:9d:47:4d:de:71:aa:bf:26:4c:0c:
         87:b4:a7:95:9f:eb:08:c5:64:ef:90:1c:e2:33:a1:2b:95:00:
         81:04:c0:fb:bf:eb:8e:b1:2f:df:9c:eb:06:f4:14:5a:91:ff:
         4f:1d:e8:bc:6b:81:e6:4d:d1:7c:8f:13:44:8d:30:34:5b:07:
         bd:a6:2a:98:95:80:e4:03:13:ff:26:9b:d7:4e:f5:0c:57:5f:
         66:12:3f:ae:56:07:09:05:7e:b3:58:ca:54:4a:5a:bf:3e:34:
         67:ce:79:8c:e4:ea:2c:6b:14:d4:c0:13:8a:53:ac:11:23:d1:
         cc:dc:f0:f1:62:81:2e:2c:19:df:cd:e9:e5:ea:c5:ce:a0:76:
         71:16:20:ee:3b:08:cc:87:98:c3:d5:bc:16:2d:95:c1:a2:38:
         03:c6:e9:42:dc:d0:5b:66:f9:69:b0:c7:ed:84:4a:df:b8:e2:
         fb:81:dd:df:d7:ba:d4:18:48:af:c8:5f:65:63:e8:b2:19:60:
         e4:08:b6:4f:92:c0:16:39:05:25:93:a1:29:21:61:08:9d:3b:
         9d:78:ce:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----