Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
File:                     _DWHfMA4v_25e7PW6iFqtSs6BYI.mft (raw, json)
Hash identifier:          CIS+sG21Ywg1SYFPc1tiHPuWXuSOXnlE/CpfxcV42/g=
Subject key identifier:   4D:A0:A6:FE:B1:3B:97:57:D3:4C:1B:27:E6:FC:7E:37:96:02:9E:3A
Authority key identifier: FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
Certificate issuer:       /CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Certificate serial:       018F70C13E6D7877E54E4270C4831B97F748
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
Manifest number:          0FB1
Signing time:             Mon 13 May 2024 07:01:03 +0000
Manifest this update:     Mon 13 May 2024 07:01:03 +0000
Manifest next update:     Tue 14 May 2024 07:01:03 +0000
Files and hashes:         1: 7NLzNd7VAHpF_LUGczbdV1o89Bc.roa (hash: lRnm224ebSQOALZs3nZNSswWVhA89UXDB8Hk/PkvjzY=)
                          2: 8_Q3urb3_vINrZzt_yStB1q0wYg.roa (hash: oYQze0O+6GrQMlGiV0wFPpnrcz3bRioguzvpSyv7sTg=)
                          3: AOLRllHRMhyPZoIyb7sUmex1QAo.roa (hash: 4gU9z1npy1vCD/aVhcvAWcgfmudVui0C/DFfpf4uSn8=)
                          4: _DWHfMA4v_25e7PW6iFqtSs6BYI.crl (hash: SS1PFGbljutxQhBoop+FOfyFb8cKZ/BDFVf6J+q6WAw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:70:c1:3e:6d:78:77:e5:4e:42:70:c4:83:1b:97:f7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
        Validity
            Not Before: May 13 07:01:03 2024 GMT
            Not After : May 14 07:01:03 2024 GMT
        Subject: CN=4da0a6feb13b9757d34c1b27e6fc7e3796029e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:04:e5:87:23:9f:ee:fb:a3:bb:1f:13:6e:dd:
                    83:d6:7b:32:f5:ea:d8:ce:8a:2f:00:97:32:63:b6:
                    1e:ce:ad:b0:e8:74:5b:73:aa:18:bc:a4:aa:d0:6f:
                    a2:9e:71:5d:7c:b1:d2:db:0b:d7:9c:4e:80:f3:41:
                    15:7c:1a:16:07:ed:b3:c0:95:70:d2:28:f0:7a:b1:
                    1a:74:f2:30:9b:5e:7a:06:32:76:98:72:35:d2:db:
                    85:ed:68:dd:3d:e5:40:f7:7d:eb:9b:f9:77:c8:02:
                    fe:6c:4b:a3:ce:ff:4f:ba:7e:d0:19:e6:eb:16:97:
                    7d:43:ce:85:32:e1:c8:0e:92:b2:a8:33:62:0a:13:
                    4b:db:ba:bc:d8:3b:7c:0b:02:99:b9:6a:4d:be:a1:
                    29:68:18:2f:68:37:58:40:1e:b0:3e:a3:28:2c:28:
                    7b:57:cb:56:82:3a:2b:79:68:bd:d5:04:f0:c9:de:
                    36:87:56:85:41:3a:4b:1a:e3:fd:13:81:38:75:33:
                    b1:83:02:60:c0:61:86:00:2d:f0:8a:42:5b:20:b3:
                    71:45:fe:16:98:65:82:78:ed:2e:53:e3:ee:fd:87:
                    48:52:aa:6d:3e:20:d0:1b:07:73:77:34:b8:77:80:
                    5e:dd:3a:44:8d:7b:a3:0b:4d:cf:11:db:93:e8:7e:
                    b3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A0:A6:FE:B1:3B:97:57:D3:4C:1B:27:E6:FC:7E:37:96:02:9E:3A
            X509v3 Authority Key Identifier:
                keyid:FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:cb:47:3b:d2:1f:68:5c:65:1a:3a:b5:10:a0:e1:7b:e7:2e:
         e8:c8:55:fe:71:e3:77:be:52:e9:6e:93:cc:c3:48:a8:a4:77:
         bc:1d:ba:97:18:28:78:2d:de:81:a5:55:fb:ad:65:2f:96:59:
         e0:0d:7b:b0:1b:78:57:64:2b:d9:25:f9:e3:73:c7:03:fe:e2:
         68:53:c6:de:a1:be:cd:af:51:ed:30:a9:9f:b1:0f:99:e5:ac:
         53:0a:56:8f:4c:77:b7:bb:d2:f5:16:86:d4:27:e8:5c:c9:0c:
         10:e4:d9:f2:22:0b:4a:6c:9c:da:10:e1:54:d7:6f:b0:c2:5f:
         19:84:26:23:84:ff:79:f5:df:97:eb:71:22:7a:ac:5c:91:89:
         3a:05:55:cb:28:4f:cc:ac:ae:e6:4d:86:13:9f:03:7b:59:47:
         89:04:94:5e:86:8b:2c:ea:cd:59:69:d6:77:82:ca:9b:13:9b:
         c9:29:e3:d9:02:c1:c1:94:cf:bf:7b:9f:d6:75:1f:71:3b:4c:
         02:66:b4:8b:8b:b9:50:75:f6:49:46:27:3e:d6:92:e8:1d:57:
         04:1c:c1:fb:e5:b9:c2:bc:ae:7f:9e:98:4e:79:1e:45:1a:43:
         55:46:5d:00:85:76:e5:ce:9e:b9:60:60:08:b7:24:67:86:86:
         18:be:4d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----