Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
File:                     MAsvRrpXChZ3v9WExygirZ2f5bA.mft (raw, json)
Hash identifier:          id41dW03lxFkIPVVsE8paKq4ycH9dtUGsWUy/BI4UZ0=
Subject key identifier:   FF:65:5A:91:EB:6F:69:79:CC:16:37:7B:76:22:13:05:26:B2:27:3C
Authority key identifier: 30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
Certificate issuer:       /CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Certificate serial:       018F9D2B8781708E626100E695FABBC37278
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
Manifest number:          1184
Signing time:             Tue 21 May 2024 22:00:26 +0000
Manifest this update:     Tue 21 May 2024 22:00:26 +0000
Manifest next update:     Wed 22 May 2024 22:00:26 +0000
Files and hashes:         1: 1-aRMzvhakBUCQimU7ay_AqiRys0.roa (hash: xHGsOVfd+RyVY2I8q2a7YEi/E84QG7i6jaaR/x4FaPs=)
                          2: MAsvRrpXChZ3v9WExygirZ2f5bA.crl (hash: cZAZ0IG1tTqiHqyy3/PzzUND9U29WD9tRj+sJ6LQUKE=)
                          3: l9gxncVlmnY8PVougVsH0WDqj8k.roa (hash: z7IWGyDIolsh5DFVxbhsBI8iTKWJoVKuc4Tfv8Ki+nI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 14:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9d:2b:87:81:70:8e:62:61:00:e6:95:fa:bb:c3:72:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
        Validity
            Not Before: May 21 22:00:26 2024 GMT
            Not After : May 22 22:00:26 2024 GMT
        Subject: CN=ff655a91eb6f6979cc16377b7622130526b2273c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:11:bc:e5:3d:c5:58:12:de:08:82:fa:60:06:
                    a3:4a:30:9a:b0:6e:4b:23:5d:42:d9:35:eb:c6:e1:
                    1d:02:a3:11:58:26:7e:50:03:b2:8e:93:c1:7a:4b:
                    26:a2:2c:ba:23:45:6c:b3:7f:c7:c4:f0:a6:38:93:
                    72:c1:39:dc:a5:42:23:17:6f:ad:2d:da:42:70:8c:
                    98:9b:76:b8:21:f5:ef:55:c6:c0:86:d0:c6:28:bf:
                    e3:7b:1e:f4:16:90:f8:bc:dd:99:f3:19:79:42:1e:
                    e3:02:f3:b7:d5:d3:55:19:6c:79:45:09:ca:13:29:
                    a5:59:33:46:bc:01:f8:10:45:52:54:33:9b:cb:8a:
                    ef:7c:2b:1e:06:81:bd:a5:ef:01:68:c6:ce:22:41:
                    35:e5:df:1d:84:c5:bb:aa:68:7c:f2:0f:3e:f8:85:
                    c9:3f:16:e9:6f:30:20:96:6e:3e:65:35:0e:03:4a:
                    a1:34:64:56:4d:05:49:4d:ea:ac:0b:da:50:54:67:
                    75:50:cd:06:9d:e0:44:7a:bf:77:85:47:0c:b4:84:
                    c5:6d:48:1b:c2:42:08:2d:6d:de:c3:80:e5:f2:81:
                    7b:fc:7b:76:87:b7:45:a7:40:d3:ed:bb:e0:41:f0:
                    95:32:bd:ad:24:7c:20:9b:b9:23:d9:23:27:ff:fb:
                    d7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:65:5A:91:EB:6F:69:79:CC:16:37:7B:76:22:13:05:26:B2:27:3C
            X509v3 Authority Key Identifier:
                keyid:30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:b1:d7:d4:8f:59:ea:82:77:37:2c:c8:a1:5e:75:f4:6b:e5:
         78:ee:f0:09:45:a6:62:d5:98:e5:99:e7:be:b5:87:69:7a:83:
         fe:8d:92:02:bb:bb:41:8b:62:47:bf:8f:fd:14:e4:68:e3:b3:
         98:a5:d2:83:40:ee:46:a5:23:72:55:d2:95:12:8f:2a:ee:1f:
         98:90:48:2c:9e:f0:5c:36:a7:96:70:3f:41:33:fa:0f:99:a1:
         11:06:e4:d0:9a:c2:f0:c5:9e:d4:ca:72:b6:37:88:e6:3f:2b:
         84:dd:04:30:89:4d:7e:53:fc:19:7a:7c:13:16:7d:43:2b:03:
         91:03:a8:4f:01:ea:8c:f5:0b:d2:0f:3b:01:ce:f7:25:97:4c:
         61:63:c3:6d:8d:a5:74:c2:65:86:f7:f2:42:4c:8a:a7:42:4e:
         30:7a:c4:85:96:d3:78:2f:98:bd:87:e1:68:28:62:d0:31:54:
         0c:e5:24:bf:90:51:31:c9:67:99:ae:5a:8e:33:32:8b:21:bb:
         87:7c:fb:e4:97:df:42:77:fd:1e:f6:ed:d7:bf:3f:b2:fa:e9:
         a4:64:fb:2d:31:36:38:4b:bc:92:81:fb:94:a5:0e:95:37:27:
         e8:f6:4c:2f:ea:39:6d:da:20:c4:5e:6f:a5:f9:7c:21:b3:b7:
         06:a4:9d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----