Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
File:                     aotaN08UbXtqbcfTFujrsS3upnA.mft (raw, json)
Hash identifier:          sLEbY3abBxNQ7R4dgzXJcZ6ATLRR4cFyFlnIwZqMSkk=
Subject key identifier:   96:81:8F:80:68:6A:82:50:42:83:83:53:DD:82:3C:D0:95:BD:AF:31
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Certificate issuer:       /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial:       018F690838A17BE2D3393FB07E5503ABD219
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
Manifest number:          083C
Signing time:             Sat 11 May 2024 19:01:37 +0000
Manifest this update:     Sat 11 May 2024 19:01:37 +0000
Manifest next update:     Sun 12 May 2024 19:01:37 +0000
Files and hashes:         1: F6SBUfhTbQs6eh8hbec7-mQvHn8.roa (hash: H9ZPWm3MjvzpDBl5y4YzTUF54Ae1TRqmpLB5IIwPiHA=)
                          2: H-27VmkQTZusmORCn5Lbv7OCsOI.roa (hash: /ymncvd7SUK5ZS4bzYcumUZ1b9TvbTf9rOojF5/Q5GA=)
                          3: T3S_F3Muqsy7glglwZvHyFz4TvQ.roa (hash: i3uCXSCtmp8IEDwRvPACOvUF5hhlbVuRAGQY39YwFA4=)
                          4: aotaN08UbXtqbcfTFujrsS3upnA.crl (hash: /HxyFCghL0SbREPRATc73/m+1sJN0yjIRpzExYYfhOM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 12 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:69:08:38:a1:7b:e2:d3:39:3f:b0:7e:55:03:ab:d2:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
        Validity
            Not Before: May 11 19:01:37 2024 GMT
            Not After : May 12 19:01:37 2024 GMT
        Subject: CN=96818f80686a825042838353dd823cd095bdaf31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fb:32:c0:46:b4:7d:95:0f:6c:de:ef:4d:75:
                    e2:ef:15:fe:5a:a1:37:36:2f:64:d4:8c:b2:ec:ab:
                    fc:91:8e:63:62:08:9b:e8:29:c8:dc:8e:92:d7:cd:
                    45:ff:95:0e:80:03:6c:ea:79:af:86:e4:7a:d8:85:
                    71:d3:f0:6c:5c:3f:83:b0:6e:6c:21:05:65:6d:b1:
                    43:ea:74:7b:59:aa:cd:e0:28:17:b2:99:69:57:48:
                    20:81:e8:78:3b:ac:8f:2e:b3:20:b9:32:61:86:7a:
                    0a:6b:78:bd:4c:68:ce:eb:3d:54:9d:d0:ae:b8:68:
                    86:dd:fd:a1:7a:e6:25:22:f8:46:b4:e8:2c:eb:a1:
                    85:58:36:00:bd:49:3b:4d:8c:d2:8d:a7:5b:ae:17:
                    44:a8:4d:eb:0f:4a:05:ac:e3:26:3f:73:c0:c8:68:
                    7f:92:6d:0e:85:ac:51:d8:12:b3:61:90:21:f1:37:
                    16:72:94:99:a2:73:08:64:ae:66:bf:82:00:db:d8:
                    7f:d8:37:e4:51:64:38:d8:77:07:42:ee:4a:96:8b:
                    45:14:7c:22:b6:1d:73:b7:ca:fb:43:b7:78:03:93:
                    82:e3:39:6e:e6:aa:11:9a:e3:e4:2f:37:b3:91:dc:
                    83:8e:72:f3:f6:6f:0d:b9:5f:6c:3a:c9:a3:07:da:
                    de:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:81:8F:80:68:6A:82:50:42:83:83:53:DD:82:3C:D0:95:BD:AF:31
            X509v3 Authority Key Identifier:
                keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:16:a0:67:8e:60:42:69:0b:a9:b9:70:be:bc:f0:f1:e3:c5:
         2c:4c:d4:d4:47:dd:51:0e:b3:db:15:40:d3:e0:78:91:40:8d:
         60:26:82:bc:9e:16:ad:be:19:46:bf:4a:45:cf:d3:67:7d:b1:
         a0:24:02:e9:0c:f2:89:43:1e:45:18:84:14:08:6a:b7:f9:3e:
         08:db:a3:09:f3:14:bf:74:29:ee:6e:99:b5:c9:64:ad:7e:65:
         e0:f0:f4:1e:73:75:22:e5:e3:2b:c2:e8:93:47:69:b0:f7:b7:
         ec:f7:df:a8:33:04:36:8f:d3:e7:be:3a:59:dd:8b:ed:d5:5e:
         f1:5c:20:f2:e1:db:9d:1a:0f:69:55:a7:87:45:51:70:01:88:
         e2:70:53:01:f8:2a:39:1e:03:98:57:9b:0f:6f:d5:f6:f0:d6:
         8c:51:79:df:ad:b6:1a:cc:d2:9e:3a:a0:61:35:55:80:23:8a:
         19:3a:09:c5:34:a7:ba:80:25:98:c9:de:43:23:9b:0c:8c:68:
         a8:e5:97:74:7c:7d:c5:f4:01:fc:18:a0:4e:92:4c:f9:34:d3:
         a9:35:c0:c5:fe:30:16:90:7d:f6:d2:c5:e7:7b:f6:28:da:7d:
         23:d2:d8:02:ac:4c:ba:26:8b:68:56:66:11:b2:c2:45:4d:21:
         64:20:80:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----