Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
File:                     5yaSa26JcM-E1rR1b6nFYhEgBTc.mft (raw, json)
Hash identifier:          B0Vjc55KtDrLpu7y/eyhow+jo9st2Gns6LM93ONGCrU=
Subject key identifier:   EA:BC:5F:FB:15:FB:3E:F4:5E:04:DC:62:BA:BE:82:FD:0E:A7:BF:D2
Authority key identifier: E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37
Certificate issuer:       /CN=e726926b6e8970cf84d6b4756fa9c56211200537
Certificate serial:       018F20EF5551038E1A54679EC43B75BF4240
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
Manifest number:          0A41
Signing time:             Sat 27 Apr 2024 19:01:46 +0000
Manifest this update:     Sat 27 Apr 2024 19:01:46 +0000
Manifest next update:     Sun 28 Apr 2024 19:01:46 +0000
Files and hashes:         1: 5yaSa26JcM-E1rR1b6nFYhEgBTc.crl (hash: EajiDN56mAiqJjfhX3a6YqIo6AxfAMJa6V0uPM+W43c=)
                          2: neH0umyH-IptiGBmGWK9Luftc2o.roa (hash: dZMwpo2iL4UMGoHAKfRKAyccZ+4Ksg+fQLSZgtZu1pE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:20:ef:55:51:03:8e:1a:54:67:9e:c4:3b:75:bf:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e726926b6e8970cf84d6b4756fa9c56211200537
        Validity
            Not Before: Apr 27 19:01:46 2024 GMT
            Not After : Apr 28 19:01:46 2024 GMT
        Subject: CN=eabc5ffb15fb3ef45e04dc62babe82fd0ea7bfd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a3:08:42:fb:4f:30:d3:8c:ea:34:4c:18:32:
                    86:cf:55:54:a7:fb:b6:7d:24:61:2d:43:08:3a:03:
                    19:b5:27:24:f6:84:2d:6e:97:5a:d0:2d:c6:06:bc:
                    ac:df:69:fe:ec:c1:20:86:25:2f:c4:bb:a4:df:2e:
                    bb:6a:45:52:8f:df:94:a3:1b:5f:8a:50:f0:6d:38:
                    9d:01:2e:84:ca:4c:c7:2a:ee:7a:30:b0:d0:e7:b1:
                    0a:ec:cb:e6:96:01:9f:c0:66:e1:47:6f:a9:77:5b:
                    c1:8e:87:6a:cb:c6:5b:f4:ce:62:4b:ad:c6:77:86:
                    83:8e:4c:6a:19:df:c5:c7:fa:f6:ae:5e:5c:d6:78:
                    06:7f:7a:8e:bf:2c:f5:99:a6:ff:4a:91:58:75:29:
                    81:dd:a3:40:f3:6c:ec:8f:5c:a5:ad:83:d8:f7:bd:
                    3b:8e:13:3b:de:6f:58:80:92:3b:62:33:4c:6c:e8:
                    1c:f2:c1:77:98:9a:d8:a0:21:66:7a:d4:c4:68:9e:
                    5a:8c:d6:5a:69:2e:df:25:79:29:4f:9a:f6:7a:d5:
                    f8:8e:e2:56:97:0f:19:76:fc:d0:9b:55:c7:41:17:
                    79:a1:a3:52:bf:61:2d:67:6e:e5:c0:73:52:c6:37:
                    68:57:5d:38:55:b3:40:6b:ae:bc:45:d2:13:e1:c2:
                    a1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BC:5F:FB:15:FB:3E:F4:5E:04:DC:62:BA:BE:82:FD:0E:A7:BF:D2
            X509v3 Authority Key Identifier:
                keyid:E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:9b:8a:6c:1a:77:7f:7a:84:92:84:db:8c:75:bb:c9:46:2f:
         03:c3:fb:5b:2d:ec:75:a7:62:16:d9:c3:9d:66:ac:33:3e:64:
         8b:32:16:15:31:55:93:01:10:13:ab:89:9c:63:97:4e:11:23:
         74:69:b4:80:09:4f:61:aa:82:7a:32:e2:55:3b:aa:81:10:2c:
         9f:c8:9b:f3:50:93:bd:17:9c:3d:a1:c5:99:23:3b:b9:85:a9:
         38:19:3c:4d:54:cf:60:97:92:8b:99:00:0a:69:4b:40:83:64:
         72:f3:e4:98:69:19:9f:87:54:48:8a:6c:ff:b8:ff:c0:a9:89:
         a2:73:9e:d8:17:8a:e2:3d:16:d2:83:c6:a9:bd:c4:5a:8d:0e:
         cf:f1:97:8d:26:0f:f0:3b:7a:ac:32:17:18:51:49:8c:1d:2f:
         1e:c0:59:43:7e:51:e1:80:92:ac:26:00:b0:98:f6:37:e3:25:
         bd:db:58:ab:38:be:cb:a9:52:16:10:80:5e:a2:da:fc:a6:ee:
         96:1d:7d:99:4a:a7:1b:b3:b7:84:19:27:de:ca:86:83:f6:0d:
         6c:78:a6:13:9d:40:53:b9:e2:f5:24:5c:d5:cd:2c:13:f4:44:
         bd:67:d6:51:01:68:22:da:7d:91:9a:2f:87:23:1c:3c:65:cd:
         52:d8:4c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----