Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
File:                     GQAdVXoGmNrXfEs-3fKn02tyqwA.mft (raw, json)
Hash identifier:          thrqaxbCgCabgH3tSGFZ62brkrxHyUOrunRgT5MX7F0=
Subject key identifier:   51:F9:80:63:6F:5D:A8:53:B1:07:B7:B5:1B:C1:8F:A2:63:0F:63:6E
Authority key identifier: 19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00
Certificate issuer:       /CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
Certificate serial:       018F877F3CC8858F30276EA9DAFFAB2C74BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
Manifest number:          B7
Signing time:             Fri 17 May 2024 17:00:13 +0000
Manifest this update:     Fri 17 May 2024 17:00:13 +0000
Manifest next update:     Sat 18 May 2024 17:00:13 +0000
Files and hashes:         1: GQAdVXoGmNrXfEs-3fKn02tyqwA.crl (hash: NF5Ivj4mymap9lrWc2ZuUFuUF9g0cMrhe5xOnLikmNA=)
                          2: Hw3Fs_WUEWZA6gDDm_NHN4H0DG0.roa (hash: Tzz/EPVa/WfCZnAoBYBW+7Bcqu/oCgsPOgvVRxUBD+w=)
                          3: a8PAHGN90hIMyt5T-gyc-wfdL-k.roa (hash: hFbr1pd6U3GVdgT9p8YvyXeM6RBYlfPiYR9YSMM5OaY=)
                          4: ia-zfmhZEg-xMDw_lrLKENQc-qQ.roa (hash: MIufwqkDphz7VtQ1Fb/Z97WttZNQIvtROO3ik+c8vyM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:3c:c8:85:8f:30:27:6e:a9:da:ff:ab:2c:74:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
        Validity
            Not Before: May 17 17:00:13 2024 GMT
            Not After : May 18 17:00:13 2024 GMT
        Subject: CN=51f980636f5da853b107b7b51bc18fa2630f636e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:95:68:9d:e9:f6:23:00:8d:8f:11:35:6b:2a:
                    c5:90:d7:77:61:9f:7e:62:00:b8:09:81:24:7e:e8:
                    1a:67:a6:8e:b5:7b:09:c8:51:62:88:61:2f:e7:42:
                    ec:fe:a5:2d:63:17:6c:f6:48:25:e1:8a:8c:0d:f7:
                    6d:c8:c2:84:1c:af:4d:13:d2:8d:da:69:94:d2:e9:
                    38:2c:f0:85:66:d8:e1:69:4b:3b:f1:1c:95:11:50:
                    1e:89:ae:fc:79:0e:61:e7:e8:19:86:0c:16:ca:0c:
                    a6:c0:03:fa:a6:22:af:db:94:3e:fa:28:59:46:dc:
                    a0:1c:0e:94:d1:4e:40:0a:16:ca:31:1b:40:8c:4f:
                    e5:c2:d8:33:f1:a8:99:cc:a1:d2:58:18:a1:ed:a2:
                    70:be:62:a0:c8:ec:f9:57:45:bb:88:7a:28:8e:25:
                    cb:fc:e6:19:55:cd:cd:c9:39:5c:5a:1f:1f:6e:fd:
                    e0:84:79:71:1e:14:4b:03:3a:0d:09:c1:40:2e:a2:
                    47:d2:c7:5a:ee:7e:7d:24:4e:20:c5:f2:b4:84:75:
                    af:5b:aa:be:6d:87:8c:77:f9:f0:43:17:af:93:5f:
                    e1:0c:ac:2d:9c:c1:5b:39:70:cc:1b:b9:15:58:55:
                    3a:3f:dd:24:21:4a:32:76:1d:c7:6e:20:35:e0:5b:
                    b8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F9:80:63:6F:5D:A8:53:B1:07:B7:B5:1B:C1:8F:A2:63:0F:63:6E
            X509v3 Authority Key Identifier:
                keyid:19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a8:cf:6d:d1:20:30:4a:6b:b3:7b:c1:21:50:e2:25:97:89:
         2f:b2:9c:ef:d2:48:50:7f:36:1b:53:7e:24:98:b9:c5:87:56:
         c9:b4:90:ad:01:4c:5e:90:91:68:8d:01:68:2f:27:6c:44:cc:
         2e:0c:c7:c5:81:bb:1f:8b:13:6f:dd:ab:22:30:2e:6d:0d:bc:
         5b:68:6b:21:4a:d5:61:e1:2b:83:2e:ef:36:24:83:85:b7:6c:
         b9:9f:f6:32:7d:a2:07:93:52:26:a6:ed:00:93:7f:f1:a6:c3:
         d1:a9:51:1a:1a:3f:57:63:eb:20:1b:ca:5a:50:7c:1e:c5:37:
         2e:b8:a3:46:95:e8:59:10:4d:bd:51:66:af:0d:04:c1:c0:bd:
         46:6e:d2:73:b9:9a:e8:8a:26:6e:4b:3a:9c:b7:79:b7:b9:79:
         13:61:8b:35:72:b7:26:20:b4:ca:ca:9d:eb:f8:d7:c2:30:9f:
         e2:8c:4a:40:68:4d:22:46:be:85:40:5a:99:6d:84:79:c7:fb:
         63:6f:0d:fe:9d:7d:5e:87:2a:3a:cb:d4:8f:88:88:33:b8:70:
         9c:9c:be:65:76:39:7c:9f:68:37:bf:15:bd:1c:67:29:f4:af:
         b6:be:2c:84:5a:70:a3:6c:f0:93:7e:d9:11:b2:79:7e:30:6a:
         14:83:d4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----