Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
File:                     K8hpV3Lw5k87mhYhczzAJQb3RwI.mft (raw, json)
Hash identifier:          F0Z3DXFPOycoGzAy2M+W4yi4uHmiakemlZeT275BZJs=
Subject key identifier:   0A:B4:91:D3:12:6A:44:47:ED:55:6B:A2:2C:1D:57:CC:1F:46:8C:15
Authority key identifier: 2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02
Certificate issuer:       /CN=2bc8695772f0e64f3b9a1621733cc02506f74702
Certificate serial:       018F87ED47A18BBCC1A92F8A7504D807F04E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
Manifest number:          118B
Signing time:             Fri 17 May 2024 19:00:25 +0000
Manifest this update:     Fri 17 May 2024 19:00:25 +0000
Manifest next update:     Sat 18 May 2024 19:00:25 +0000
Files and hashes:         1: 1-4UDbocNFtvjg9nQIp4alXwEFg.roa (hash: VMrDtB/HNh/gS6gEEiyGZJ6tAZbb29qnml2ItOCl1R8=)
                          2: 1-YO6Attdtx5xSs_j2q1NRX2VZ5Q.roa (hash: Gpiju3Z6ngE1F05AjTSYdcmftfpO2uuW5ocYIMpzxkg=)
                          3: K8hpV3Lw5k87mhYhczzAJQb3RwI.crl (hash: oT1CrVx7hqgZPoDYJzOlK4pf3YMih1qxXMv/scuulXo=)
                          4: lOD1LivQ79P--EWvMKrJ2f3poGg.roa (hash: +7O++nvqvu92NYcnNHW9HRWJxwjv6JqCzKuU2jDygqo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:47:a1:8b:bc:c1:a9:2f:8a:75:04:d8:07:f0:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc8695772f0e64f3b9a1621733cc02506f74702
        Validity
            Not Before: May 17 19:00:25 2024 GMT
            Not After : May 18 19:00:25 2024 GMT
        Subject: CN=0ab491d3126a4447ed556ba22c1d57cc1f468c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:88:37:f2:f1:2b:7b:82:4c:53:bf:1d:cd:68:
                    57:77:d5:76:03:b3:77:4a:36:0d:70:87:50:53:b9:
                    f1:10:4a:53:17:7a:7b:81:63:c4:27:e6:43:62:61:
                    6a:41:da:0f:ed:6a:40:cc:3f:ab:76:10:33:51:5e:
                    86:c3:3a:9c:c1:cb:6b:37:4b:fa:3c:fa:cf:80:ed:
                    63:c3:8d:0e:35:60:15:bf:c3:2b:49:f7:10:12:6c:
                    e9:e2:33:60:25:81:93:89:21:4e:f9:0b:f1:7c:9c:
                    ca:cf:79:f4:cd:91:b2:f6:90:cb:ea:6b:7e:26:84:
                    19:87:7a:71:7d:38:53:d0:ee:7f:1a:1d:34:a3:1a:
                    a5:41:82:ba:98:9b:2e:33:93:d4:ce:48:f8:ba:21:
                    3f:45:c9:d2:b4:e9:a1:56:12:0e:9e:b1:22:c0:3f:
                    b8:15:8a:54:3b:5b:e3:3e:47:a5:18:77:fe:02:f3:
                    91:05:73:a4:f9:80:7c:01:3b:3d:e9:c7:32:87:28:
                    be:a6:44:f6:f2:c5:a9:35:80:7c:ed:68:47:f2:d8:
                    7b:b2:61:10:5c:db:e0:c3:77:6a:96:5a:fb:88:f7:
                    82:94:e8:f6:41:10:00:c5:6d:bc:06:92:b2:87:ca:
                    e2:1c:81:69:57:f6:a1:41:76:d8:a5:fb:93:93:00:
                    4c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B4:91:D3:12:6A:44:47:ED:55:6B:A2:2C:1D:57:CC:1F:46:8C:15
            X509v3 Authority Key Identifier:
                keyid:2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:8b:30:3a:8a:2a:e1:3a:b3:49:a1:33:66:74:1b:8f:d8:68:
         29:81:42:f3:36:0a:48:55:ab:b3:64:44:f0:8a:eb:22:4a:99:
         09:b2:05:d5:fa:b6:34:d4:b4:a3:0b:25:98:f5:bf:e6:a3:63:
         4d:d3:d7:c0:8f:99:52:b0:bb:4b:eb:29:87:12:db:2f:81:20:
         c9:b4:e9:f3:e5:07:6e:a9:e2:39:ae:66:5c:43:42:dc:7e:62:
         b5:9b:e3:78:c6:43:c5:dd:85:2f:91:d1:8a:14:7b:27:9b:32:
         35:13:03:b9:9e:1b:b5:1f:d8:1a:73:e0:47:ec:d3:35:c8:2c:
         a8:3a:c4:3d:9b:c7:aa:77:58:37:b8:46:d5:36:50:2d:4e:44:
         b9:92:c3:20:90:bf:d0:d0:7e:d8:54:34:29:da:cf:96:bb:d3:
         70:38:e4:42:52:6c:44:c2:b4:29:a5:5e:83:95:50:28:f6:38:
         90:43:f4:ad:61:50:12:3d:a2:bf:29:28:1e:51:36:b0:48:8f:
         12:f3:0f:aa:b1:03:b0:80:96:5d:1a:ec:5a:7b:0a:9f:8c:1b:
         13:39:c7:e7:a4:49:e1:4d:fe:17:a2:1c:6a:d9:f9:d6:ba:d9:
         56:62:ee:d4:de:3b:27:1e:cb:e6:61:54:21:b1:b5:39:8e:8f:
         43:52:26:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----