Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/sxQ5IJVoAqjrS0Ynov9POYfsGj0.mft
File:                     sxQ5IJVoAqjrS0Ynov9POYfsGj0.mft (raw, json)
Hash identifier:          Yo47/y3RJX694LTuvGzLnO2O7ae29PT7FgZZG5zpf/Y=
Subject key identifier:   25:B9:65:70:FC:46:4E:3F:B4:D1:C3:27:0B:13:FD:9D:0D:E4:DF:E4
Authority key identifier: B3:14:39:20:95:68:02:A8:EB:4B:46:27:A2:FF:4F:39:87:EC:1A:3D
Certificate issuer:       /CN=b3143920956802a8eb4b4627a2ff4f3987ec1a3d
Certificate serial:       0190486811CDDC04B6FA7095824DC260217D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sxQ5IJVoAqjrS0Ynov9POYfsGj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/sxQ5IJVoAqjrS0Ynov9POYfsGj0.mft
Manifest number:          1196
Signing time:             Mon 24 Jun 2024 04:01:38 +0000
Manifest this update:     Mon 24 Jun 2024 04:01:38 +0000
Manifest next update:     Tue 25 Jun 2024 04:01:38 +0000
Files and hashes:         1: 1-Ys6qPRVw4dEA9Sx679USJiSc88.roa (hash: bei0t84vI3xuH5Lkjoowl1iutPHbhAOQsHzT7FMonAA=)
                          2: jjbkFgxddA7EZggn92DHiRq9Ats.roa (hash: C4SZeY5jHLqEwzFyu6RIM9+wkRolsK2L53zoQfW1zcg=)
                          3: kPOSuqmzBSieWy3VrLzX2cS-4t0.roa (hash: EO7zV9agxnTBbNYDna+B9Tk2Shu6WJbFV8gKIDOvHH4=)
                          4: nKaRFEx6C2AJ4uG53aPWdy8GbKg.roa (hash: Mg460YaYJGsEEFWaLRzhqDm52ak2hrCD+X2CBARI3DE=)
                          5: sxQ5IJVoAqjrS0Ynov9POYfsGj0.crl (hash: orX6C+3lyhCxM9viDmxMha1vjF9yzAkauXsNIuoA37Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/sxQ5IJVoAqjrS0Ynov9POYfsGj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/sxQ5IJVoAqjrS0Ynov9POYfsGj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sxQ5IJVoAqjrS0Ynov9POYfsGj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 04:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:68:11:cd:dc:04:b6:fa:70:95:82:4d:c2:60:21:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3143920956802a8eb4b4627a2ff4f3987ec1a3d
        Validity
            Not Before: Jun 24 04:01:38 2024 GMT
            Not After : Jun 25 04:01:38 2024 GMT
        Subject: CN=25b96570fc464e3fb4d1c3270b13fd9d0de4dfe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:99:e2:4e:79:fc:96:cd:4b:32:a8:db:46:45:
                    47:d7:9d:4d:0f:ba:9f:d3:c8:37:3c:07:8b:71:8b:
                    da:05:da:91:65:f8:61:37:57:ed:8c:36:80:93:c2:
                    79:a0:64:ac:c5:6c:7b:c7:58:10:e9:ba:be:85:55:
                    92:10:11:5e:f8:e7:1b:36:fa:73:e1:8b:f5:95:5c:
                    8c:99:ee:a1:8a:35:7e:61:72:27:19:f6:22:c7:39:
                    2a:93:49:0d:9b:72:85:3a:cb:fc:f0:88:8b:6c:4c:
                    4c:65:ba:e9:ed:85:70:01:b9:39:86:94:b0:00:0b:
                    42:79:9e:f5:fd:94:1e:e4:cc:a0:77:6a:78:72:79:
                    19:c5:da:f1:80:c3:d3:35:55:98:91:51:14:9d:c0:
                    45:15:39:b5:94:dd:e5:97:f9:78:6b:7f:d5:9b:36:
                    07:8b:9a:bb:dc:5a:44:68:91:d1:a9:2d:2f:18:94:
                    13:4b:28:9b:46:cd:0d:ac:17:09:d5:0e:52:02:f3:
                    39:9c:de:6f:ea:34:8a:66:ce:51:50:35:fd:d1:ad:
                    86:0f:c3:bf:9a:5d:b2:4a:22:ea:d5:f7:54:cf:df:
                    67:6d:a7:26:8a:16:14:c3:90:e9:43:b4:76:d7:a4:
                    4f:42:b6:6d:f0:fe:c6:61:8f:98:54:fa:4a:11:a8:
                    02:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B9:65:70:FC:46:4E:3F:B4:D1:C3:27:0B:13:FD:9D:0D:E4:DF:E4
            X509v3 Authority Key Identifier:
                keyid:B3:14:39:20:95:68:02:A8:EB:4B:46:27:A2:FF:4F:39:87:EC:1A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxQ5IJVoAqjrS0Ynov9POYfsGj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/sxQ5IJVoAqjrS0Ynov9POYfsGj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/sxQ5IJVoAqjrS0Ynov9POYfsGj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ef:15:bb:18:b8:e4:ce:66:42:1d:7d:1a:0e:b5:17:46:e2:
         4d:c4:8e:03:8b:34:f3:9e:36:4e:30:1e:9a:24:73:26:5d:e5:
         d4:4c:8c:35:e5:21:27:35:5f:ff:f3:71:e9:68:3c:d5:21:79:
         5e:43:26:81:64:84:d4:ba:ab:4c:d3:26:60:d3:19:fd:9d:e1:
         d4:b2:0c:0a:4c:d8:68:2a:5f:56:0a:bb:d2:9c:d0:bd:25:14:
         23:f7:d1:25:2f:d5:f7:5b:c9:3e:3e:cc:e9:72:16:c6:77:68:
         fe:a7:dd:e5:f7:50:34:41:7f:63:d7:8f:7f:c0:58:19:c3:de:
         48:16:d9:3c:aa:70:aa:a9:e6:8f:b3:8b:44:4a:b3:2f:da:88:
         98:06:37:2c:ea:5e:6f:4f:6c:8f:3f:dc:47:0f:b4:9e:af:8c:
         a5:96:97:fd:7a:d8:bd:ab:6d:52:c2:da:ed:99:06:f4:95:d3:
         06:68:ca:0b:80:c7:f6:4b:db:60:2a:6f:47:57:b4:c2:a9:13:
         25:ae:5a:15:dd:88:23:2b:56:ab:e2:7e:65:38:3a:8d:df:6e:
         78:e5:84:30:73:0d:fc:2d:3d:0e:51:6f:04:c1:4d:2c:ce:91:
         48:46:1c:9f:8f:23:6e:c5:19:62:19:f0:69:08:e1:c9:f1:03:
         ec:d6:94:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----