Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
File:                     _Laxe9Ll8UvTdaDA5p38d9lwL0o.mft (raw, json)
Hash identifier:          mySbBJ2akoQyWfVru0wDsc18iZeizkBsY8OzJSXD/vY=
Subject key identifier:   2D:0B:FF:1E:3E:A5:D3:29:9E:B9:70:D2:5A:44:14:F4:3C:C4:C8:C0
Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
Certificate issuer:       /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Certificate serial:       01905ADB9CF09FDCEC30A0F851060D2B688D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
Manifest number:          11E6
Signing time:             Thu 27 Jun 2024 18:01:00 +0000
Manifest this update:     Thu 27 Jun 2024 18:01:00 +0000
Manifest next update:     Fri 28 Jun 2024 18:01:00 +0000
Files and hashes:         1: 0ZxpJXAYYbfoHoi_eFL2AW43xEU.roa (hash: qJJLtGKDpBjw+g4HM+ATgoRwp69DzQ12MXlq9RHZKjo=)
                          2: 5FivppEAi4kkxR-0FWjgL3bLBPU.roa (hash: U7VfQQX0QYEg1AfAbtSFSWJEmYgGS2p1dXEVxObqVuo=)
                          3: _Laxe9Ll8UvTdaDA5p38d9lwL0o.crl (hash: PaqC3OyO+rm/vEhSWj/LnXscdM0K1qWHqxS7LDkP4TI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Jun 2024 14:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:5a:db:9c:f0:9f:dc:ec:30:a0:f8:51:06:0d:2b:68:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
        Validity
            Not Before: Jun 27 18:01:00 2024 GMT
            Not After : Jun 28 18:01:00 2024 GMT
        Subject: CN=2d0bff1e3ea5d3299eb970d25a4414f43cc4c8c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:19:0d:3f:65:4c:db:c5:7e:9f:50:73:62:
                    63:8c:a9:94:5e:1e:64:f6:48:93:f0:3a:64:52:6a:
                    73:e4:9a:8a:88:d5:33:c1:85:77:a8:7e:bc:70:d8:
                    b0:f0:08:29:73:de:f4:f0:06:10:b6:22:5d:c2:ad:
                    25:b8:e8:2b:ff:e7:48:0a:b9:c7:70:66:2e:2d:0c:
                    aa:03:34:4f:a9:9d:33:66:7a:a9:f2:a1:3e:72:ec:
                    ba:be:a1:0f:6b:32:9a:bd:d6:7c:72:38:14:80:9d:
                    96:8c:b1:26:24:d8:ff:30:23:39:95:ee:ac:f0:0e:
                    af:d7:ed:22:31:e2:59:d2:32:9e:2b:98:3d:26:ad:
                    ac:1c:9c:03:60:bf:4f:21:41:6f:6a:8e:fe:24:ad:
                    08:ba:7c:f0:7f:d7:bb:57:c1:2e:28:ff:a4:93:90:
                    d7:bb:d8:f9:3a:f1:20:ec:fc:86:93:b7:1c:68:08:
                    fb:ea:84:f4:96:62:96:56:49:bf:c8:6f:b7:e0:8c:
                    fb:8f:48:27:37:72:52:59:ee:c4:d1:89:31:85:12:
                    db:9e:bb:f8:4e:30:66:46:a2:90:40:24:90:44:3d:
                    ea:4d:73:6f:db:da:f3:ab:90:c3:88:25:40:53:59:
                    c5:52:cf:64:9b:61:5d:6e:e2:aa:12:cb:a2:ee:67:
                    7e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0B:FF:1E:3E:A5:D3:29:9E:B9:70:D2:5A:44:14:F4:3C:C4:C8:C0
            X509v3 Authority Key Identifier:
                keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:cc:65:ba:c3:b3:b7:f6:20:1a:99:47:7d:39:b4:8f:bc:c3:
         79:e8:89:c8:ad:d2:65:0e:ed:89:0e:38:01:d6:a7:91:90:34:
         ac:23:b4:b8:2d:89:e5:94:b2:d1:4c:f2:b7:e4:5e:86:b0:81:
         72:9c:4f:00:2e:e2:54:63:91:8e:50:33:55:3d:cf:55:e3:c9:
         b4:de:f5:db:ae:b5:43:0d:92:c9:2b:27:0a:dd:fd:9b:18:67:
         34:11:26:8e:81:6c:9c:9e:c9:69:66:9f:41:65:82:04:3f:93:
         d4:00:38:64:99:72:c8:14:9d:3b:79:f4:11:5a:a0:bf:2d:c6:
         2f:9e:df:79:e1:a5:aa:d6:19:0e:64:d1:b5:54:50:95:b2:1e:
         44:5a:b0:b0:5a:b1:94:1b:fb:6a:8c:df:da:ed:a8:9e:66:58:
         d0:0d:64:cb:2a:37:ad:86:06:22:00:ff:dd:66:3d:63:23:4b:
         53:29:fb:78:ca:72:28:1b:ba:c4:f4:92:65:12:52:56:e0:c0:
         e8:7c:77:2f:09:f8:09:90:a2:9b:f4:34:f0:06:7e:04:48:32:
         eb:f9:cb:c8:8c:91:86:12:ec:cd:ab:35:dd:9a:82:cd:08:5b:
         31:22:f1:13:42:88:79:26:65:31:2f:07:a4:fc:9e:14:9c:6c:
         84:20:58:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----