Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
File:                     tFBkwayGkOLHepWaUCVG6YvNNyc.mft (raw, json)
Hash identifier:          d/gb5zw7jhOMy1SJt/41fVCQZnFyRwK9F4mKStSRtMI=
Subject key identifier:   28:53:A9:D1:E4:D2:81:FE:39:46:BE:0B:9F:28:37:5F:63:CF:DA:01
Authority key identifier: B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
Certificate issuer:       /CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Certificate serial:       018F98055DB1A541787D18B398AC065DAC10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
Manifest number:          0800
Signing time:             Mon 20 May 2024 22:00:39 +0000
Manifest this update:     Mon 20 May 2024 22:00:39 +0000
Manifest next update:     Tue 21 May 2024 22:00:39 +0000
Files and hashes:         1: BzLjXsnMfUBd5Z8Ry7AwTqvJTAw.roa (hash: TpDAOYAo7qbovuzChrxjUHUWaiThS4nkuYD1U3mD4Xg=)
                          2: tFBkwayGkOLHepWaUCVG6YvNNyc.crl (hash: MfVHEJUrR+zlbTxaUDXa9UTrJ9BqLiDXr1isGtoVTR8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 22:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:05:5d:b1:a5:41:78:7d:18:b3:98:ac:06:5d:ac:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b45064c1ac8690e2c77a959a502546e98bcd3727
        Validity
            Not Before: May 20 22:00:39 2024 GMT
            Not After : May 21 22:00:39 2024 GMT
        Subject: CN=2853a9d1e4d281fe3946be0b9f28375f63cfda01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d1:48:76:4d:e2:21:6c:a4:84:e8:c0:de:9e:
                    9c:3d:94:96:26:43:75:ed:5e:a7:b3:1c:76:68:a5:
                    fa:5c:ba:cf:98:79:a8:b1:fd:ec:2c:74:81:45:a0:
                    12:89:a7:32:52:fc:80:73:ca:ed:48:17:52:d0:ad:
                    74:c7:93:a5:02:a9:01:74:c7:f4:fa:0f:8d:f1:4b:
                    df:8f:04:d4:2a:60:67:5d:a2:7b:9f:68:41:ce:b6:
                    41:e8:8d:ca:87:47:db:28:69:ea:5f:53:a2:e7:6a:
                    5a:7b:1c:44:a4:cf:30:17:f9:64:2c:a1:fd:f9:63:
                    3e:1b:21:0d:07:bb:0c:8b:9a:70:82:4c:c7:29:3b:
                    f4:95:39:b3:e7:b7:dd:5c:5e:2e:f1:b1:ca:35:ba:
                    e7:47:3e:aa:ea:f3:e7:4b:fe:bf:3e:74:44:53:b4:
                    be:33:6d:97:7e:ec:b1:54:fb:dd:91:68:0f:47:b3:
                    9d:0a:f3:38:20:a1:f6:da:eb:4c:aa:f9:f6:6d:b6:
                    4b:1d:60:9c:0c:a5:a4:97:54:4f:98:e9:6d:2d:01:
                    8e:df:8b:3e:cf:fc:c9:fa:57:f7:34:1e:80:fb:47:
                    98:43:7f:53:67:c3:0b:64:c0:6c:69:12:a0:7d:f8:
                    7b:98:81:0d:71:ac:cb:56:73:47:ea:f8:4b:3a:c9:
                    c0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:53:A9:D1:E4:D2:81:FE:39:46:BE:0B:9F:28:37:5F:63:CF:DA:01
            X509v3 Authority Key Identifier:
                keyid:B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:8d:64:d0:ad:b8:a2:f6:95:ee:86:50:83:25:59:5a:0b:77:
         7b:63:68:6c:97:06:0b:73:d3:f0:c7:9c:6f:c3:4c:09:91:9f:
         36:6c:98:09:d5:1e:53:a9:66:2d:19:82:87:8d:41:db:ab:46:
         65:e8:11:66:e5:70:55:08:88:fa:b3:ec:d8:0a:28:29:4f:0b:
         b4:b3:a3:bd:b7:b4:49:42:ab:04:a5:41:65:a5:37:c6:7a:87:
         81:bc:a9:02:44:44:b0:3f:5f:a4:99:b9:66:e7:35:fb:5f:5a:
         b3:88:06:52:84:70:f2:2d:97:df:e6:66:d3:d9:fd:25:1b:81:
         48:ca:85:0f:3a:5c:cc:e9:a7:24:37:3e:43:57:0b:c3:92:f1:
         d3:93:42:03:ac:80:87:10:cb:3b:d1:da:09:dd:d2:4d:88:b1:
         a4:b4:e5:33:e3:74:8c:98:d7:d3:79:3f:36:6e:b4:d8:6a:28:
         ac:d5:c8:67:88:ce:d9:d2:1f:56:dc:91:f1:34:fc:2e:75:ce:
         79:11:bc:ad:7b:af:9b:e6:18:95:00:50:63:91:76:73:4e:62:
         b4:52:01:c0:0e:2f:6e:31:c4:a5:7d:fa:3a:ae:ca:c7:ae:0f:
         7c:fd:1a:55:3f:e1:6e:58:09:de:55:2b:a2:63:42:c2:62:c4:
         48:39:27:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----