Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft
File:                     e0iUW51xbNR_veKGDYEA_NqYdJY.mft (raw, json)
Hash identifier:          7+8coSouqFgZLtZ9PyerREkhtYeu3ISrnQZhkAUkn8k=
Subject key identifier:   0A:C5:4D:88:F9:2B:14:84:92:15:70:47:73:FC:FF:C6:CB:EA:E0:07
Authority key identifier: 7B:48:94:5B:9D:71:6C:D4:7F:BD:E2:86:0D:81:00:FC:DA:98:74:96
Certificate issuer:       /CN=7b48945b9d716cd47fbde2860d8100fcda987496
Certificate serial:       018F97971E72514FBCB7A54BE5532C0B0736
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft
Manifest number:          0C41
Signing time:             Mon 20 May 2024 20:00:14 +0000
Manifest this update:     Mon 20 May 2024 20:00:14 +0000
Manifest next update:     Tue 21 May 2024 20:00:14 +0000
Files and hashes:         1: 1-KZFvutnbzjx8rBN7ofFM15a-M.roa (hash: n4XuT+bij3B830rKeyUYfw9G33AouYEH8/cA1VGNYV4=)
                          2: LJCyQ9PDCkU1Ez34OZ_BtkylUFQ.roa (hash: Ktf2MnMqyy+5h6asitUxeOYJEXYzKdFkLmEbXzMZl9k=)
                          3: e0iUW51xbNR_veKGDYEA_NqYdJY.crl (hash: XTxrygH9eexC1YLAXoay1E5DQFm6J7rkfSnfIkkSun8=)
                          4: j4SwGDj0K-YXdHGcNPpGsnqfX5M.roa (hash: vkbtk1lTxoIeOIDIV10/lx4JGPGZmbYoZ2uvKUunihs=)
                          5: usJ0h9h0KZ-1ASPQeebo0yTbN3U.roa (hash: b0k0q3tUqrCnajtU8AJkI/y0Aazw3DwBKDnxveviNzw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 16:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:97:97:1e:72:51:4f:bc:b7:a5:4b:e5:53:2c:0b:07:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b48945b9d716cd47fbde2860d8100fcda987496
        Validity
            Not Before: May 20 20:00:14 2024 GMT
            Not After : May 21 20:00:14 2024 GMT
        Subject: CN=0ac54d88f92b14849215704773fcffc6cbeae007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8b:6c:f9:07:53:3d:41:6c:f2:99:3a:3e:89:
                    96:86:5a:f1:20:dc:a8:03:66:01:8f:c8:58:8c:81:
                    8c:10:6e:86:05:04:ca:84:33:ee:43:03:1c:d8:93:
                    18:14:a4:21:e1:a6:dc:ba:f4:0f:a7:cf:d0:04:73:
                    95:f7:d0:fc:c6:06:40:30:e5:34:16:89:e4:4d:54:
                    2c:69:06:0f:eb:ca:d2:b5:4b:7a:1e:e8:70:80:93:
                    b3:ce:4d:b9:2e:44:85:4a:16:17:eb:f6:64:cd:92:
                    62:4b:1d:d4:5c:4e:41:bb:56:ed:32:8e:d6:d3:19:
                    f5:d0:cb:59:2d:f1:73:c1:90:5f:2d:df:55:53:81:
                    2c:83:d8:32:e9:70:22:13:ee:12:e0:27:7b:e6:69:
                    83:dc:44:61:53:4f:14:a7:09:95:b5:ca:46:29:62:
                    f2:35:2d:76:53:2a:5a:6b:3a:0d:56:01:93:25:ef:
                    9c:56:62:af:da:22:9d:ed:2e:bd:38:62:1a:54:39:
                    2d:10:c3:a1:c2:48:ac:da:c2:a5:f9:81:a1:64:b8:
                    25:35:3c:2c:1a:06:d5:95:12:81:3d:ac:86:c7:68:
                    3d:a2:02:4a:14:e2:02:6f:36:53:4c:68:f9:ab:b4:
                    18:55:08:bc:5c:e1:f6:87:1e:a6:64:00:9c:5f:ee:
                    b6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C5:4D:88:F9:2B:14:84:92:15:70:47:73:FC:FF:C6:CB:EA:E0:07
            X509v3 Authority Key Identifier:
                keyid:7B:48:94:5B:9D:71:6C:D4:7F:BD:E2:86:0D:81:00:FC:DA:98:74:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:b2:8e:82:3d:06:f6:36:2c:12:8a:3b:6c:aa:8a:fa:30:cf:
         36:69:06:f6:38:9d:75:a6:66:de:ee:11:b1:c0:63:fa:93:6e:
         06:b0:e5:c0:2b:ce:b3:d4:f5:61:2a:5f:33:01:82:4f:8a:1d:
         41:00:80:fa:53:a7:4a:93:ab:de:2c:74:73:8c:d5:a3:47:86:
         02:cc:7f:c9:41:51:d3:e0:a5:ec:b8:63:2d:96:bd:a6:c4:e8:
         ba:78:e7:f0:9e:dd:62:7e:9a:c5:7e:1c:1c:e6:ff:8c:4d:f1:
         e5:2e:67:f9:28:1c:4b:89:e2:79:0c:03:43:56:9b:7f:bb:67:
         14:72:1f:66:7a:f5:3a:3c:1f:1d:f5:c8:62:4d:cc:14:65:85:
         0e:27:9a:db:af:1d:c1:89:1b:c7:8e:a6:90:fe:10:c1:7e:95:
         2c:eb:83:30:ee:4e:10:f6:de:6f:c9:3a:0e:20:c0:02:41:e0:
         91:62:69:f6:d6:96:36:da:e3:87:3e:1b:36:e2:d5:f0:14:1e:
         91:54:76:7f:4c:11:84:32:f9:f1:b4:4e:cb:bb:cc:21:93:95:
         5f:9b:6b:be:db:61:b9:a9:29:73:c0:2c:4a:92:d7:28:8a:22:
         e9:66:0d:63:e3:ec:81:3a:e2:9d:5f:31:7c:23:d2:e5:26:cd:
         4f:15:70:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----