Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/258df2-b8ff-4bda-a200-fbb2e14cbb75/1/KeUoQqbixQwOLA9duJHdLZZW-v0.mft
File:                     KeUoQqbixQwOLA9duJHdLZZW-v0.mft (raw, json)
Hash identifier:          Ye1XbWut53YvMmK942jifrtPbUnzMVLU0sSYjUJhTmA=
Subject key identifier:   85:F7:FA:69:25:34:7A:DF:09:98:66:A1:BD:76:A5:15:7A:66:FA:8B
Authority key identifier: 29:E5:28:42:A6:E2:C5:0C:0E:2C:0F:5D:B8:91:DD:2D:96:56:FA:FD
Certificate issuer:       /CN=29e52842a6e2c50c0e2c0f5db891dd2d9656fafd
Certificate serial:       018F83A275EFEFB7DBA22D266055B5C4D7EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KeUoQqbixQwOLA9duJHdLZZW-v0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/258df2-b8ff-4bda-a200-fbb2e14cbb75/1/KeUoQqbixQwOLA9duJHdLZZW-v0.mft
Manifest number:          87
Signing time:             Thu 16 May 2024 23:00:13 +0000
Manifest this update:     Thu 16 May 2024 23:00:13 +0000
Manifest next update:     Fri 17 May 2024 23:00:13 +0000
Files and hashes:         1: 02UNUsIQyfpAbMMmvTUZ33TeAmw.roa (hash: RXwzkMXiWEIN9cpmS0j+E/p8BQSPaf5OEf8dEqFXk58=)
                          2: KeUoQqbixQwOLA9duJHdLZZW-v0.crl (hash: HEWaNJYmefEWfWaryefQP8dGvs9B0DXcM/qO3smIfqM=)
                          3: M0jPGazvff9Ux3NIuCmO24EtQXA.roa (hash: td5TKaMyv4i6JkPKN5xIyTcHESx+WHZpKCjwvcocQj0=)
                          4: tnkdqfzvl9cIEK3LRFyQyZn83Z0.roa (hash: LxAAM0FivlGbdfmDD/Jv/CGMf/d6mOeXCB6StNV1L6E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/258df2-b8ff-4bda-a200-fbb2e14cbb75/1/KeUoQqbixQwOLA9duJHdLZZW-v0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/258df2-b8ff-4bda-a200-fbb2e14cbb75/1/KeUoQqbixQwOLA9duJHdLZZW-v0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KeUoQqbixQwOLA9duJHdLZZW-v0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:a2:75:ef:ef:b7:db:a2:2d:26:60:55:b5:c4:d7:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29e52842a6e2c50c0e2c0f5db891dd2d9656fafd
        Validity
            Not Before: May 16 23:00:13 2024 GMT
            Not After : May 17 23:00:13 2024 GMT
        Subject: CN=85f7fa6925347adf099866a1bd76a5157a66fa8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ca:61:49:46:81:b1:b6:13:06:3c:81:59:3e:
                    1d:e5:62:fd:71:0c:86:e7:f8:bc:f7:f9:28:b0:f1:
                    70:ae:33:a9:2a:51:8e:7b:18:07:68:ba:d3:16:5f:
                    a9:26:0e:37:61:6c:5d:47:07:04:71:5c:de:67:96:
                    78:c1:9e:aa:b9:12:64:66:47:e2:90:29:9a:40:ab:
                    dc:48:64:fe:a4:c3:8f:3c:68:1f:e5:00:27:fc:b8:
                    5d:0e:f3:38:9a:6d:55:9a:d4:07:35:2d:a3:0c:dc:
                    45:6f:92:15:9e:03:4b:d4:62:7e:29:c7:27:2e:5a:
                    de:b5:08:34:f3:97:6a:05:b5:e2:05:ea:88:75:77:
                    3a:65:09:5f:67:61:64:dc:4e:ff:17:ed:80:09:e7:
                    e9:ff:90:78:88:e0:c7:32:b1:84:23:3a:2a:ff:44:
                    8f:db:15:bd:56:af:9f:fe:a2:b2:a9:36:ef:86:86:
                    94:2b:7c:53:d1:07:4c:37:47:07:8a:e0:80:ab:35:
                    a3:67:35:78:70:f1:9b:38:c4:a2:01:7c:e8:23:58:
                    fa:0f:67:a6:e0:05:55:30:7e:64:11:a2:30:ff:cd:
                    bb:e8:8e:46:78:b8:59:48:b2:88:37:52:5f:00:cf:
                    99:4d:0f:a4:f5:c3:26:79:a8:b9:60:6b:8f:95:f1:
                    67:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F7:FA:69:25:34:7A:DF:09:98:66:A1:BD:76:A5:15:7A:66:FA:8B
            X509v3 Authority Key Identifier:
                keyid:29:E5:28:42:A6:E2:C5:0C:0E:2C:0F:5D:B8:91:DD:2D:96:56:FA:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeUoQqbixQwOLA9duJHdLZZW-v0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/258df2-b8ff-4bda-a200-fbb2e14cbb75/1/KeUoQqbixQwOLA9duJHdLZZW-v0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/258df2-b8ff-4bda-a200-fbb2e14cbb75/1/KeUoQqbixQwOLA9duJHdLZZW-v0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:65:31:a1:4f:50:1c:56:94:98:0d:a7:73:27:54:b7:e7:60:
         bd:a9:a7:48:0a:f1:d9:3e:20:1e:07:d9:76:07:6f:8d:a4:61:
         b1:b7:03:d0:10:19:54:1e:d3:02:aa:4e:de:ed:64:d1:d6:8b:
         a3:eb:dd:82:4c:46:13:65:dd:a0:b9:fe:e4:cd:e2:e5:79:c7:
         39:78:c2:1e:51:01:dc:75:70:6b:6b:b1:1d:db:14:38:18:28:
         86:9e:85:6a:e2:67:54:e0:ba:ed:2e:02:92:86:d6:6d:44:ec:
         7e:65:d0:ec:69:35:2a:25:09:78:bf:d9:fd:76:81:06:7b:51:
         dd:d0:4d:97:60:03:99:f2:37:f2:53:16:e1:6d:eb:ee:fa:78:
         40:39:0d:4e:69:1b:43:01:56:b1:e7:bb:34:bb:c1:87:ba:09:
         a8:99:5d:d8:a2:0e:c3:74:ed:c4:4f:5d:6c:3e:dd:f1:a5:89:
         99:b9:f6:ce:2f:7c:13:49:99:2d:7e:d0:85:d8:6b:d0:f4:32:
         d0:50:b4:1c:99:49:b7:ab:2c:6a:46:07:c3:2e:2b:8a:7d:96:
         97:14:a1:28:97:d3:4c:a8:b4:91:b7:8c:31:04:a5:5b:18:f1:
         4b:1d:cf:32:a9:f1:ca:53:fa:7e:c4:18:ab:29:5f:da:dc:cb:
         52:b0:59:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----