Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
File:                     d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft (raw, json)
Hash identifier:          EibeIahnCy7UzTv6k5+uiQ+o8zOfru8WKXnFJ1SZz30=
Subject key identifier:   BD:07:97:A8:A2:53:BD:7F:A8:27:A4:E3:FD:C8:DE:01:54:E8:14:AF
Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
Certificate issuer:       /CN=776405e0283743cf52180d5b13812dfba3ded7fc
Certificate serial:       018F87ED7BCC195D2A95CC6E2392EDA85910
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 19:00:38 +0000
Manifest this update:     Fri 17 May 2024 19:00:38 +0000
Manifest next update:     Sat 18 May 2024 19:00:38 +0000
Files and hashes:         1: G-Li-L-zA7H6Qn6pMuDlxkytSX4.roa (hash: BZ5UdsB1reU6sjcwql7G9vuteBg1izPh1zN+tFMWy68=)
                          2: Sl_fRC5JfD-oOOYmHI52DiXobHI.roa (hash: Ol8cYTHNDZ4iSNge1r+Q28goP1vrKY4Nent0GisNWYw=)
                          3: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl (hash: 37GPmey7HFhWClGIx5zJ+bGjkjCIlizVqjZfcqLic2Q=)
                          4: fQixw7Tu4ZsqCOwssTsTfunP9C4.roa (hash: l4sLlzPJg9A/m9dizR+hjOkm7C2RxyDB0d6l/PiN5kw=)
                          5: fp1f-QPm-T_kZ0qE-U33nQt5c_4.roa (hash: l8oY36E1AmelTiL8XS5swsd5f74Oiyd5moO16Q1jw+k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:7b:cc:19:5d:2a:95:cc:6e:23:92:ed:a8:59:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc
        Validity
            Not Before: May 17 19:00:38 2024 GMT
            Not After : May 18 19:00:38 2024 GMT
        Subject: CN=bd0797a8a253bd7fa827a4e3fdc8de0154e814af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ca:99:10:4d:7e:67:02:a4:da:d5:14:c5:a7:
                    c5:16:0f:df:04:25:ac:6e:f3:08:8a:b5:99:67:4c:
                    0c:33:0e:2c:af:10:64:50:6d:f3:09:30:44:ed:16:
                    42:d6:93:58:ad:15:42:e1:e4:f4:33:ae:44:6f:4b:
                    11:ac:60:3e:ea:21:7e:58:2c:60:98:c2:f4:74:12:
                    0e:7c:79:ae:95:34:d7:63:27:4b:bc:2c:88:68:36:
                    93:28:c2:b1:7a:c2:3d:68:79:27:c0:fd:86:4f:b3:
                    7c:a2:43:76:2f:cd:d6:3c:b1:f1:ec:91:89:5d:b0:
                    82:1c:44:b3:3a:6c:82:72:1b:c0:d8:08:b7:78:85:
                    27:67:48:a3:d5:95:a9:83:4c:26:c5:cd:6f:d8:6f:
                    72:20:2b:1e:ef:e9:5d:8f:4d:c8:83:f4:79:eb:2b:
                    d5:69:26:29:45:05:82:29:43:99:ea:26:16:34:da:
                    7d:09:bc:69:b3:8d:fc:b1:65:d8:a1:30:0f:2d:22:
                    ff:2d:49:72:04:45:92:9e:f5:63:83:59:14:0f:38:
                    82:39:19:77:c4:84:2f:f7:0d:3a:0e:77:2e:81:f8:
                    01:2c:c9:00:e5:48:e8:70:36:ee:84:74:92:b6:08:
                    ff:0c:bc:7b:02:80:60:8e:b5:ec:99:d5:ae:70:cb:
                    00:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:07:97:A8:A2:53:BD:7F:A8:27:A4:E3:FD:C8:DE:01:54:E8:14:AF
            X509v3 Authority Key Identifier:
                keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:40:64:c0:99:6d:0e:01:12:05:c7:37:2d:d8:f2:a6:ac:35:
         f9:3e:1b:18:91:da:9f:97:2e:b3:6f:7a:74:42:ff:37:6c:32:
         08:02:f7:c1:69:67:38:c2:cc:fe:db:18:42:5c:f8:d5:d8:da:
         7e:b5:f1:f3:41:29:2f:7c:b5:03:2c:28:80:f2:85:47:d3:a7:
         3f:6a:32:8a:17:b4:60:7c:f3:4c:3f:e3:8d:7c:47:68:e5:d8:
         67:2d:42:bd:8b:14:e5:0a:af:9e:7c:ab:3c:69:73:70:62:27:
         ba:b3:0f:41:72:89:57:18:c5:b2:a4:d6:f5:bc:61:6a:50:d4:
         61:97:03:69:c1:17:24:71:62:3f:fe:26:01:c8:38:53:a6:87:
         34:06:fc:94:24:1b:c4:43:e7:14:f7:d7:55:6c:b9:c3:d4:df:
         17:67:6e:a3:81:63:4d:99:ea:09:5a:93:82:7a:3c:a5:20:a1:
         09:d9:12:7e:c7:a7:66:56:47:2a:69:94:aa:07:3c:d6:45:44:
         86:62:1b:b0:39:ab:46:a1:4d:e5:b4:3c:79:ec:d5:32:c5:6b:
         4e:24:ff:87:e8:32:e7:ca:6d:c1:74:9f:65:3d:d2:9b:36:4e:
         ea:3b:bd:8d:1a:a2:b9:76:a2:1b:88:e0:01:b5:f1:3e:82:0c:
         f1:e0:26:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----