Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/30bfb7-3c7d-47d7-ac68-9462d4e1cc72/1/H5UQYGrZTE98emPlwewmxA-0qog.mft
File:                     H5UQYGrZTE98emPlwewmxA-0qog.mft (raw, json)
Hash identifier:          t6hx3KhQDzWBrOtPxI7GTy8oImfstNf3yuwsNqPvqoU=
Subject key identifier:   72:F7:79:8E:3F:F7:FE:44:0C:D9:78:A3:17:83:3A:A4:BD:04:82:CA
Authority key identifier: 1F:95:10:60:6A:D9:4C:4F:7C:7A:63:E5:C1:EC:26:C4:0F:B4:AA:88
Certificate issuer:       /CN=1f9510606ad94c4f7c7a63e5c1ec26c40fb4aa88
Certificate serial:       0191FAB5083DEC7A96F2EE3B8B9C18300A6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H5UQYGrZTE98emPlwewmxA-0qog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/30bfb7-3c7d-47d7-ac68-9462d4e1cc72/1/H5UQYGrZTE98emPlwewmxA-0qog.mft
Manifest number:          EB
Signing time:             Mon 16 Sep 2024 12:00:53 +0000
Manifest this update:     Mon 16 Sep 2024 12:00:53 +0000
Manifest next update:     Tue 17 Sep 2024 12:00:53 +0000
Files and hashes:         1: H5UQYGrZTE98emPlwewmxA-0qog.crl (hash: GiG+etum4grZLBbdLMuaQVxUMRQUyiW5HAyNq/GjkdQ=)
                          2: dDGfxJgQDEhWRqruzToq6X8nEuU.roa (hash: JnU1eCYRmKhegJDAs13ooRBV55pedHqUqA7hj/wwMwM=)
                          3: j5MNdfuNQQMbOsQgGZ33Y_QQ1yc.roa (hash: LccVt7voulS6je2wPUOnuLmm4sAJTWJKDhvfQsLRdc4=)
                          4: yaPKdn8WHVdLbesMuDAkH_fxy50.roa (hash: jcOeVos1WxY9QyFu0f/q9CwSDmvmiCv/vo5FiDzKfuQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/30bfb7-3c7d-47d7-ac68-9462d4e1cc72/1/H5UQYGrZTE98emPlwewmxA-0qog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/30bfb7-3c7d-47d7-ac68-9462d4e1cc72/1/H5UQYGrZTE98emPlwewmxA-0qog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H5UQYGrZTE98emPlwewmxA-0qog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:b5:08:3d:ec:7a:96:f2:ee:3b:8b:9c:18:30:0a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9510606ad94c4f7c7a63e5c1ec26c40fb4aa88
        Validity
            Not Before: Sep 16 12:00:53 2024 GMT
            Not After : Sep 17 12:00:53 2024 GMT
        Subject: CN=72f7798e3ff7fe440cd978a317833aa4bd0482ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:91:af:bb:ce:c7:69:34:7f:b7:1a:ed:08:fd:
                    2a:5b:09:3e:72:d5:5c:bd:f7:9b:ee:ad:ff:64:97:
                    b5:72:e1:fe:f7:1d:b6:a3:5f:ce:4e:64:f4:4f:11:
                    9b:fd:b6:0c:9a:87:49:a6:ef:ce:1f:91:51:89:98:
                    c7:01:82:37:58:3b:0c:be:d3:06:b9:e6:5b:1d:f7:
                    ac:ba:ef:fa:de:bd:c5:87:87:13:f6:20:61:3f:7e:
                    e7:24:49:a8:5b:88:9e:ab:f7:f4:3e:45:db:e5:82:
                    e6:e4:18:7c:62:7d:d4:33:ab:59:89:fd:8a:6e:a5:
                    fa:70:1d:c0:94:e5:cb:26:76:a4:c3:76:05:ee:86:
                    53:96:59:bd:08:83:e4:30:72:e3:14:85:e9:e0:a2:
                    ad:4e:ca:c9:7c:a6:96:07:8d:f4:10:96:ff:0f:75:
                    27:b8:b0:3a:70:60:cc:09:32:44:67:39:8d:41:d5:
                    eb:7e:b8:56:d7:f1:c1:6a:f6:f3:b6:9a:92:6e:84:
                    76:72:91:0a:ee:7a:6c:2c:9d:77:85:c6:ac:b9:11:
                    0a:40:8d:9f:8d:fb:9b:db:1a:2c:1d:73:0d:f8:0e:
                    cb:2a:1b:99:cb:ae:31:96:a6:b9:73:9d:55:61:59:
                    75:49:2d:8b:fb:f5:4b:2b:87:46:31:d8:b9:cb:5c:
                    87:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F7:79:8E:3F:F7:FE:44:0C:D9:78:A3:17:83:3A:A4:BD:04:82:CA
            X509v3 Authority Key Identifier:
                keyid:1F:95:10:60:6A:D9:4C:4F:7C:7A:63:E5:C1:EC:26:C4:0F:B4:AA:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5UQYGrZTE98emPlwewmxA-0qog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/30bfb7-3c7d-47d7-ac68-9462d4e1cc72/1/H5UQYGrZTE98emPlwewmxA-0qog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/30bfb7-3c7d-47d7-ac68-9462d4e1cc72/1/H5UQYGrZTE98emPlwewmxA-0qog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:12:a6:ed:e3:91:f9:d7:33:d8:df:62:5e:3a:49:cc:5e:58:
         ae:04:9d:60:cb:be:7b:1e:f7:a8:e6:4e:e3:76:6d:09:dd:3e:
         b3:a4:ff:5a:f4:f2:8c:8a:f8:95:87:a6:b0:ba:1b:dd:61:2c:
         87:f8:29:ca:e6:46:71:55:d6:b4:0c:c5:48:ae:d5:8e:91:f7:
         6c:12:ab:98:df:2d:55:42:e3:08:e3:8e:0d:c7:55:b0:3d:2e:
         22:bb:ec:44:e4:de:28:e5:b6:a7:62:38:fa:d0:b0:44:66:0f:
         76:0f:17:62:05:ef:cc:4f:86:7a:73:06:7b:5b:ce:8b:79:16:
         34:d2:5f:25:3d:75:fc:24:ca:8d:4f:53:4f:d5:40:6d:ee:b2:
         08:7b:ba:56:54:14:04:f8:13:56:47:02:4d:28:03:63:fa:b8:
         93:19:9a:43:d1:8c:94:6d:be:14:de:78:93:7a:a3:dd:5e:0b:
         3f:3c:7c:36:9d:62:e5:76:1c:4e:b8:b0:a3:b0:96:32:4d:9a:
         42:01:c3:fa:0a:b7:ee:82:61:c9:4d:16:ff:6f:8f:06:eb:fa:
         5c:a2:f6:8e:6b:90:5d:13:65:13:cf:52:fb:5b:7e:8e:af:4d:
         32:44:73:fb:c7:18:24:82:93:0f:d8:32:78:b7:b6:a7:dd:36:
         75:d5:a9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----