Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
File:                     sZQPAAmW6_0tq3HEacxR7ogbP14.mft (raw, json)
Hash identifier:          8gGnEClUl22SJsuJy8DcrfisFG53kiadobXhX1mCzoI=
Subject key identifier:   3E:FD:42:FE:77:22:B1:C5:49:87:49:26:0E:34:92:50:31:EE:1E:BD
Authority key identifier: B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
Certificate issuer:       /CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Certificate serial:       018F836C8A7315D626102AEEF89C4E5A1A27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
Manifest number:          1177
Signing time:             Thu 16 May 2024 22:01:19 +0000
Manifest this update:     Thu 16 May 2024 22:01:19 +0000
Manifest next update:     Fri 17 May 2024 22:01:19 +0000
Files and hashes:         1: Ha1eK6ml2MxNitOYWFbqRrKnvnI.roa (hash: 71fz6Wu9m8HM6ha5JKqa4kOgHfensWm1zZGnh3jic5Y=)
                          2: enwbyryacSotUS-eXE3YdFfHVCM.roa (hash: B+X7JGLJX4AemODXUHdEuvIwS9YLgMNo6xfuQZdZpio=)
                          3: sZQPAAmW6_0tq3HEacxR7ogbP14.crl (hash: ihZzp5SNtLN+ru4YC/GkmO4JcCaiNAlE0PN8yqGikyE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 22:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6c:8a:73:15:d6:26:10:2a:ee:f8:9c:4e:5a:1a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
        Validity
            Not Before: May 16 22:01:19 2024 GMT
            Not After : May 17 22:01:19 2024 GMT
        Subject: CN=3efd42fe7722b1c5498749260e34925031ee1ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ad:81:7e:0c:ba:cd:38:ea:bc:16:4e:e6:0c:
                    cf:4f:c8:12:46:3c:70:91:79:7d:ac:98:1a:49:10:
                    88:de:04:31:9e:3f:20:dd:9e:7f:dc:a1:11:af:43:
                    24:b2:da:2b:00:74:53:2a:fb:2c:b2:cb:2f:3f:d4:
                    66:64:60:53:23:b8:74:d6:1f:df:8e:74:6f:a0:bb:
                    44:f9:b4:da:b3:87:a5:73:f5:0a:ab:41:98:db:fc:
                    6f:81:2e:f8:38:c0:11:d0:2a:52:6c:55:fd:f3:70:
                    b1:7d:0c:5d:41:64:25:6f:8a:cd:4c:8f:67:cb:86:
                    59:10:28:15:df:69:11:f6:d2:3b:d4:e7:4a:79:8b:
                    07:b4:d5:f9:74:b6:a6:45:36:e2:05:b4:e3:50:33:
                    f3:40:e4:53:55:4e:bf:98:34:46:fc:77:d0:75:71:
                    49:37:38:91:0c:03:4c:85:b0:2d:df:a6:81:43:54:
                    e3:f8:3b:46:94:ee:26:2c:fe:92:68:df:9c:95:d3:
                    cb:6e:7e:be:ac:96:bc:02:87:af:f5:e0:ad:54:d5:
                    57:da:6a:d9:70:5a:90:82:fc:07:62:7f:80:65:5f:
                    e5:2b:79:dd:3c:77:d9:50:5d:96:57:7a:d6:25:ac:
                    98:c7:f0:64:61:a3:6f:9a:f5:de:89:8f:6e:00:be:
                    9f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FD:42:FE:77:22:B1:C5:49:87:49:26:0E:34:92:50:31:EE:1E:BD
            X509v3 Authority Key Identifier:
                keyid:B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:33:75:ae:9e:2f:c0:a7:21:79:41:a6:e1:49:f3:3d:1e:a5:
         0d:77:96:88:9d:d2:99:26:39:84:86:5c:52:cb:bd:2d:a4:25:
         12:52:23:48:89:8c:db:2d:d6:56:f0:96:89:7b:4c:57:9d:9f:
         63:94:1a:e3:4c:03:03:d4:f5:a8:e6:bf:d0:50:07:ea:5e:34:
         83:37:99:a1:77:3f:6c:84:a9:6f:62:2b:a9:81:b1:7a:2f:ce:
         87:a2:c1:83:34:34:17:1c:11:61:42:c1:72:d1:84:54:0c:6c:
         63:fe:db:bb:a1:d1:72:bc:0e:d6:b9:e2:c8:d2:8c:49:b8:b3:
         1c:1a:cd:2a:09:73:a1:4f:dc:5d:f5:5d:6a:23:9b:3b:87:9b:
         32:91:20:d5:c7:07:97:98:fd:47:01:bf:b4:17:6b:c6:9c:73:
         05:20:a0:89:64:55:04:46:d6:1a:7d:08:20:7a:c7:ec:15:5b:
         e2:27:8d:9c:af:11:96:75:a8:1e:e3:db:b3:8b:7b:78:4c:d5:
         4d:ad:9a:c8:de:fc:68:32:65:56:41:44:30:84:2a:39:56:8b:
         14:eb:c0:c6:a7:41:aa:a4:3d:4a:85:a0:34:b6:e5:6f:77:1f:
         60:84:c1:98:d9:f9:b5:a1:04:9e:48:72:d5:9e:1c:1b:2e:b8:
         91:21:b4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----