Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
File:                     vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft (raw, json)
Hash identifier:          Vi9sjj8Q18dCIrEHbI3g5mGdiMPrkSZb6II07biew3I=
Subject key identifier:   96:27:E8:D5:33:EF:57:23:E1:3C:62:CF:9D:2F:8D:3D:48:A4:F4:A0
Authority key identifier: BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
Certificate issuer:       /CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Certificate serial:       018F88240A346CC18804E4C3E1419E50B392
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
Manifest number:          07A9
Signing time:             Fri 17 May 2024 20:00:14 +0000
Manifest this update:     Fri 17 May 2024 20:00:14 +0000
Manifest next update:     Sat 18 May 2024 20:00:14 +0000
Files and hashes:         1: NKHaDnHJcZnTvpuPYmmyg0WjXIQ.roa (hash: x9GztcWDYcaNExMa9CSYu6lq9Q6US6yxTXal+7iGeyw=)
                          2: apUQseKQi8gyaxev1hnesC50ZdE.roa (hash: TNMvQYL8n5P7lFXXd7rzRPNTLsXFV+l2sdErDDILJxA=)
                          3: vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl (hash: woWjlOjwrv0hfAVBlQ6ec+ndpdnJAPyKqVMgbWmFMPM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:0a:34:6c:c1:88:04:e4:c3:e1:41:9e:50:b3:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
        Validity
            Not Before: May 17 20:00:14 2024 GMT
            Not After : May 18 20:00:14 2024 GMT
        Subject: CN=9627e8d533ef5723e13c62cf9d2f8d3d48a4f4a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:30:d5:ae:e6:50:7a:6e:8b:70:ec:f9:4e:3f:
                    ab:53:7a:9d:fb:b3:a5:10:24:09:5c:c9:cf:5e:df:
                    26:25:f2:fb:21:8f:e8:be:ea:a9:96:12:3a:5f:ba:
                    d9:de:67:be:31:e3:74:8d:25:33:5f:6c:9c:92:65:
                    87:c6:6d:2c:c8:a6:d9:55:a5:cb:ac:fc:b4:86:eb:
                    a8:7a:77:71:16:20:0e:96:13:f9:70:f4:9f:70:09:
                    a6:76:3e:67:39:03:a2:6b:8e:c9:a4:4e:40:eb:1f:
                    46:25:ea:f6:09:a9:c7:44:96:d5:45:52:08:4e:e3:
                    dd:f2:bd:c9:dc:de:7e:88:19:e6:7a:41:97:ea:f5:
                    28:31:4a:ec:98:95:02:35:06:4a:8f:a6:ae:f8:90:
                    27:65:63:22:50:77:71:39:04:0a:36:ca:b3:a8:f2:
                    2f:0d:dd:43:20:aa:68:48:17:23:a0:b7:cf:67:1d:
                    f1:dc:ae:e0:52:82:65:ec:ef:2c:1d:5a:58:31:bb:
                    de:4e:3e:dd:b5:df:46:ea:7a:19:dc:06:38:06:83:
                    5d:70:55:50:56:a0:fe:c0:b1:98:90:68:74:d8:98:
                    35:8c:3f:89:eb:db:f4:d1:3f:16:d1:74:cd:1c:7b:
                    c1:79:36:61:16:2c:2b:95:28:c2:ba:4d:c2:17:e2:
                    f0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:27:E8:D5:33:EF:57:23:E1:3C:62:CF:9D:2F:8D:3D:48:A4:F4:A0
            X509v3 Authority Key Identifier:
                keyid:BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:75:6c:ee:01:34:95:5a:65:68:2d:e1:3b:9a:14:e2:39:f5:
         47:c3:18:48:67:dd:45:81:8f:c1:6e:74:9f:a8:43:5b:c3:74:
         e7:70:4b:a9:80:4c:9e:6b:de:0a:2e:3e:05:0d:34:5c:ef:bf:
         be:5c:27:ba:f9:d0:9f:d8:52:aa:2d:09:fd:f7:48:55:9e:f8:
         fd:f4:90:aa:4b:e4:f0:4b:47:83:dd:bf:d6:12:19:5d:ec:1f:
         97:40:60:a2:03:2f:ec:86:94:6c:57:72:36:25:a9:ef:b9:de:
         c2:09:ac:56:55:3f:94:e9:e6:dd:42:4e:44:61:79:c9:22:3d:
         56:85:63:67:fd:f7:27:5d:42:db:08:a9:41:b8:b0:87:e2:57:
         1f:7b:37:be:79:af:d7:7c:17:a9:84:43:a1:9a:07:97:e3:7b:
         e4:ca:ad:0e:7f:33:1b:d0:17:d7:87:5e:0d:45:e6:d8:99:92:
         7a:49:9b:2b:51:c2:84:d8:81:bf:fd:7f:ac:a2:5f:42:07:3e:
         d9:e1:18:9c:4c:fb:f5:f5:39:b2:d5:02:0b:88:60:29:41:16:
         5a:32:04:b1:2d:6c:b2:a7:9a:9d:e0:6a:b1:59:7a:ae:e5:ec:
         97:6a:de:51:dc:5b:30:78:7e:c6:65:76:ba:b0:68:84:c0:0a:
         f3:ab:c3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----