Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File:                     NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier:          gQmsArZbtDwqy4GNk3Kf6tGiX0FvAma4TOwn2EaU3Kw=
Subject key identifier:   FD:73:67:CB:10:2C:6E:73:15:D9:F0:9F:35:76:C1:D0:C1:43:B1:69
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer:       /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial:       018F874865F6FB007FD4C9CE2DBC4C721CB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:00:19 +0000
Manifest this update:     Fri 17 May 2024 16:00:19 +0000
Manifest next update:     Sat 18 May 2024 16:00:19 +0000
Files and hashes:         1: 1erGehQ9TA5BdDA7fGjvrfNq7jo.roa (hash: WAD7Q1h37E4D7AhYZFQTcDK8DpE03rO23cyJceUccQc=)
                          2: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: 3j/ciFKtK1hYxPOYFYuV1Uo/bSKXcRlvWpVXGF+b7J4=)
                          3: gnKhCSuNZaUmrcG1uGpQzxhx2KQ.roa (hash: iqfN3Q1Un8yeLGIYksVZAh6qUny2xDzK9f7K6RbKoKw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:65:f6:fb:00:7f:d4:c9:ce:2d:bc:4c:72:1c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
        Validity
            Not Before: May 17 16:00:19 2024 GMT
            Not After : May 18 16:00:19 2024 GMT
        Subject: CN=fd7367cb102c6e7315d9f09f3576c1d0c143b169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:38:e0:14:a4:f9:a1:23:74:0c:8e:2a:2c:f5:
                    f7:20:19:e2:6d:54:20:aa:4d:e2:93:73:9c:d9:fd:
                    ee:e2:b2:d5:a5:94:50:23:39:d4:fe:4a:a8:e9:d4:
                    06:20:fc:c7:f8:2d:69:99:93:12:84:19:fb:e0:dc:
                    db:6c:b5:54:8e:0d:e5:a8:6d:4e:e7:f8:1a:63:4f:
                    f8:ec:82:b0:bc:26:5c:e5:03:72:b5:75:2b:66:83:
                    99:78:d0:de:0d:88:e1:b3:16:0c:f8:ae:2a:70:19:
                    e1:8b:b2:fe:69:5b:69:e9:07:7f:a0:7d:72:7a:d6:
                    b8:c1:d0:31:0d:74:96:93:7c:41:20:1d:9c:66:5f:
                    69:66:0e:30:7e:60:ee:ae:ad:07:c4:20:1d:9a:be:
                    89:e9:ed:d9:c8:9a:6e:da:00:6a:40:76:15:e7:71:
                    86:b9:b9:e7:91:25:1a:00:db:af:a5:a0:b5:7e:4d:
                    cf:d9:d0:43:5d:61:2e:e3:f4:03:05:e6:28:0c:c7:
                    14:af:f1:75:06:54:cc:fa:5b:3c:7c:61:d6:89:02:
                    13:12:a8:e9:9c:9d:0c:12:fa:70:27:42:a6:b8:cc:
                    40:25:14:1f:54:d7:16:0b:a8:5a:d0:97:61:16:64:
                    2e:6b:28:c8:a7:9a:0f:51:b5:53:97:b6:ab:d9:74:
                    21:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:73:67:CB:10:2C:6E:73:15:D9:F0:9F:35:76:C1:D0:C1:43:B1:69
            X509v3 Authority Key Identifier:
                keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:36:5b:a1:78:76:41:17:fd:a3:ca:9b:cd:d0:84:c4:f2:8e:
         62:8c:6c:a7:59:92:2c:d4:83:17:c6:3a:c6:7b:e3:c9:da:84:
         d9:a5:6a:3a:e9:01:42:d8:dd:e1:a8:da:30:da:e4:12:0d:06:
         44:c7:9c:06:55:04:f3:62:67:f3:d5:9d:4a:3b:d9:20:b8:4d:
         9e:d5:82:df:d4:92:54:48:e1:85:9e:7d:3a:00:fd:74:3c:39:
         bc:b0:26:eb:4c:64:e7:a4:69:87:ff:d5:46:dc:8a:ab:28:86:
         d5:82:af:b3:5a:4c:d5:a8:e0:70:a6:99:51:87:5d:14:5f:96:
         59:49:a5:42:54:bd:15:b5:a5:d4:cb:e9:a9:57:a6:46:35:1b:
         0b:7f:d1:93:f9:6a:3b:30:b6:a5:da:b3:58:ec:74:31:1d:71:
         97:56:be:b8:fd:66:c3:d0:a5:05:a9:05:3a:5b:c4:69:08:5a:
         20:fa:a8:3b:b2:61:43:9d:c0:46:26:9f:78:62:7e:51:80:3d:
         41:fb:27:7a:d4:0d:33:a5:33:b8:d5:e2:42:72:e3:51:73:d8:
         f9:9e:d9:97:ae:a1:50:98:a9:7c:61:f8:2c:2f:8a:22:1b:b9:
         88:8e:da:ed:b2:1b:a2:a5:54:d2:2b:c5:51:92:e2:83:6d:bc:
         0e:4b:c3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----