Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
File:                     kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json)
Hash identifier:          IGnh2gzognkjtMaEryOaplPonYdqo00a8DBXQqeFx38=
Subject key identifier:   14:78:97:AE:0F:13:CE:1C:25:7E:41:0A:6A:94:EF:E7:04:2E:37:32
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Certificate issuer:       /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial:       018F877F4B0B2B070C050156413EEDD425E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
Manifest number:          1195
Signing time:             Fri 17 May 2024 17:00:17 +0000
Manifest this update:     Fri 17 May 2024 17:00:17 +0000
Manifest next update:     Sat 18 May 2024 17:00:17 +0000
Files and hashes:         1: 0ZG6b6TNVo5DhfNUl_T7x6pBRo8.roa (hash: V4n/9IlJu6H+rthurkAQAFBm8T2t5GYskf5Ngb0P8zw=)
                          2: Bcd64sXxsrhhoBGEsLgOed4DrGo.roa (hash: AHFj3hAMhkjs3fnWLa2ezZKFTiKwQR7g8qqlIskh2f4=)
                          3: KtuKlVVzb0vNX3-3d_LM1zzzkmg.roa (hash: Hii3JDmb4VYupPUAWgMNi2HcFSUGSLha0z2q/avJPkE=)
                          4: ZF95itVHinbQgH1ND9H3eLsRN2g.roa (hash: sPumUlir/eeeq4ztOX6Eq6H3kjXYrFdgR1LiNlvaMv8=)
                          5: cuXw-wdQy7ClKOiXtJsAUlqBFhQ.roa (hash: pRPAxhwSkPdf89m90G0Oz7e+/dRd8EhHZr9dR7uQdbk=)
                          6: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: Mj/KrjKNOWSP8Q8YrhlmNMYR+uxt60as4HsZWBVdLWc=)
                          7: l8u9x3VFX5Xg0FeH8ILD1SINvpw.roa (hash: J+7DUYbCZAAmeT4Qc+mXxkaSdm1CHQ9oYUSUIcnP79o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:4b:0b:2b:07:0c:05:01:56:41:3e:ed:d4:25:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
        Validity
            Not Before: May 17 17:00:17 2024 GMT
            Not After : May 18 17:00:17 2024 GMT
        Subject: CN=147897ae0f13ce1c257e410a6a94efe7042e3732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5f:ca:d6:1e:69:99:72:09:0f:e7:ce:94:bb:
                    fb:7a:ca:19:9d:9b:24:e2:c2:00:e0:2b:e8:cc:73:
                    41:53:7d:e4:83:0c:c1:f1:e8:07:83:9a:f2:39:0a:
                    e0:85:c1:a6:14:5e:ac:42:b2:b2:72:1a:b7:ea:c8:
                    76:49:ab:15:8d:72:35:8b:3f:99:bc:88:bc:87:8c:
                    60:b2:30:ab:c9:e0:8d:79:b9:34:5d:5d:ba:24:94:
                    03:fc:da:cb:d8:bb:bf:7e:d3:6f:d8:3b:b6:33:c7:
                    96:45:2a:06:93:64:4d:c1:70:b8:54:bd:06:33:af:
                    4f:96:38:84:bd:6b:17:0e:fa:17:36:dc:a1:37:b3:
                    7b:12:32:0b:80:46:65:4c:68:ae:d8:ae:e0:06:25:
                    2b:53:58:c8:24:f6:97:75:f3:91:9d:f0:75:15:fa:
                    f0:76:f1:1a:42:46:5a:27:cf:fe:a8:f1:79:f1:9a:
                    60:7b:50:23:ba:6c:30:65:19:2d:77:77:40:66:87:
                    51:2a:cf:2f:04:a0:03:7b:17:3e:25:20:ea:05:b5:
                    1e:be:46:52:d1:76:c4:39:16:5b:d6:09:f2:d6:9a:
                    0f:c9:b6:d2:42:b7:2d:bf:5e:b4:d1:14:c6:00:68:
                    16:42:b5:1e:10:cb:e3:3f:39:b8:8f:a5:44:39:92:
                    22:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:78:97:AE:0F:13:CE:1C:25:7E:41:0A:6A:94:EF:E7:04:2E:37:32
            X509v3 Authority Key Identifier:
                keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:cb:c5:18:af:5c:f6:a2:c7:97:07:8a:84:93:98:96:e1:57:
         89:4d:c8:4d:f7:f6:47:78:2a:29:bb:d5:38:61:5d:bc:e3:aa:
         88:6d:04:01:84:36:5f:a8:dc:80:6f:81:22:2b:db:df:35:69:
         b4:48:97:30:09:6b:f0:d4:e5:f4:2b:09:a9:dc:c8:28:9a:0a:
         de:32:e4:46:8e:53:e1:79:a8:7b:49:4e:88:9b:a9:d5:b9:df:
         66:85:d9:49:74:64:be:06:51:46:77:87:6a:fd:be:29:cb:bd:
         2f:30:49:d5:4b:02:88:ee:cb:60:93:b7:0c:d6:4f:46:2d:c8:
         fb:e1:a5:13:29:07:b5:26:a6:58:51:ad:68:a8:c1:64:5f:74:
         b9:7a:4e:a9:26:84:e7:7d:9c:2f:41:9d:64:7b:53:23:3c:81:
         86:32:eb:93:31:b0:94:75:01:57:fa:0b:fc:7a:6a:78:84:29:
         5c:0a:59:74:f3:d9:62:34:3b:3a:e4:e9:a2:82:86:d5:28:b0:
         d1:0d:3f:80:7f:9f:74:db:e6:68:2d:ba:b8:f0:42:c6:be:16:
         a6:fe:a6:88:b2:07:ca:28:79:0b:00:e9:69:d9:08:05:00:91:
         4b:ad:82:5e:e8:69:3c:82:13:2e:39:c7:ea:38:a7:11:2e:c5:
         e2:31:cc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----