Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
File:                     Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft (raw, json)
Hash identifier:          6NAUswLQf18H83vDzj+O6jdrJUQKtL2p/vN6OD21EMA=
Subject key identifier:   D8:15:94:79:66:47:B7:95:18:21:B9:E9:89:00:C2:FB:DA:31:65:FA
Authority key identifier: 3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
Certificate issuer:       /CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Certificate serial:       018F87B659205FE591E8385C91308D1DAEF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 18:00:25 +0000
Manifest this update:     Fri 17 May 2024 18:00:25 +0000
Manifest next update:     Sat 18 May 2024 18:00:25 +0000
Files and hashes:         1: FN-ooGgo_cWlqDGcmUxe_fzJTNg.roa (hash: QVXO7TH9CpRv77aVzKkYO2BYguK1Y1AirUWw68ge9K4=)
                          2: N0XENMnUNzbtikrQgbnR5NrDb7M.roa (hash: XEd7H+aQrC+5yywtPGGxqxhd+hIzlyfLPqlTpqFkl1g=)
                          3: Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl (hash: 1FHX6TJMchdY54oiD78H6uImDb2Bur4BShK/04NObL8=)
                          4: nKQGr73w9ppYLG4l4EO6wkGKaRo.roa (hash: 4BYT+FnHiI3l3GmvSc+Rg/SJxVJbQhQ+9xDEcSrnp6s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:59:20:5f:e5:91:e8:38:5c:91:30:8d:1d:ae:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
        Validity
            Not Before: May 17 18:00:25 2024 GMT
            Not After : May 18 18:00:25 2024 GMT
        Subject: CN=d81594796647b7951821b9e98900c2fbda3165fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fb:ad:df:23:b8:95:28:e3:d9:ba:9a:8a:bf:
                    d2:7c:41:0b:06:12:6c:b3:20:bb:36:81:9e:b7:26:
                    56:c8:f3:7c:84:92:65:ce:b7:ab:d6:b3:91:fe:e0:
                    76:ea:de:52:df:f3:ce:a2:aa:38:aa:82:b4:6c:11:
                    aa:b5:b1:f8:2a:fc:d7:53:05:16:b0:59:ff:a7:cb:
                    57:36:69:43:cb:89:32:e8:1b:b9:6c:e3:e8:c8:53:
                    de:ff:4f:1f:39:ab:80:f8:8b:4c:1e:bf:c1:a9:32:
                    20:30:f0:28:d0:e4:7b:4b:fc:d4:0e:21:0b:21:10:
                    8e:79:ca:f1:d4:4f:da:56:69:79:42:ec:f2:2e:62:
                    70:44:14:96:2c:f7:5d:fe:b5:6a:67:cd:3c:dc:1e:
                    44:39:e3:ed:14:21:67:ee:4d:d5:9c:c2:25:3e:17:
                    58:92:b5:97:2a:b5:93:bb:44:89:92:70:c2:a9:5b:
                    1a:af:4c:6c:0d:15:b5:37:2d:0c:0f:f6:f7:bb:b1:
                    f6:d1:da:bd:ed:39:3b:49:1b:0e:1f:ac:c4:0a:2b:
                    63:ca:ee:e2:5e:f9:23:1e:2c:3a:ec:98:3f:a1:5c:
                    a6:b5:9e:f1:0d:08:2f:48:57:32:93:34:3b:88:fc:
                    f6:6c:a2:62:16:3a:c8:0c:b3:1c:23:e8:a5:a4:ec:
                    57:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:15:94:79:66:47:B7:95:18:21:B9:E9:89:00:C2:FB:DA:31:65:FA
            X509v3 Authority Key Identifier:
                keyid:3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:6f:17:b3:f6:e8:cc:5c:c7:67:96:56:62:40:16:4c:75:39:
         69:e6:03:a7:c2:d8:4f:ad:ce:e3:e7:09:35:ac:46:59:10:c5:
         34:6d:27:19:23:19:49:b3:7a:78:d4:2f:94:e1:4a:28:68:5a:
         83:db:1b:74:95:fa:ef:18:dc:cb:fc:c7:f2:53:ad:ff:f7:bc:
         b5:b9:1d:7d:a0:6a:4f:ba:ba:23:e4:46:b6:f6:d3:c7:9f:50:
         02:39:74:19:56:93:0a:bb:c4:75:74:ed:9b:4e:26:fc:7e:8e:
         c7:0f:93:f5:17:b5:03:69:95:a8:e4:2b:42:f7:bc:35:57:93:
         04:10:ca:f5:c3:bd:73:6e:95:ee:ab:10:81:27:9b:61:4a:10:
         20:cf:cc:19:31:4b:3b:50:bc:9d:42:39:55:6c:6b:1d:67:c9:
         5e:47:46:bc:ce:40:6a:50:1c:5a:e3:50:e1:5a:3b:ad:92:96:
         38:c0:1d:36:50:a5:da:50:9d:98:b9:47:19:df:a1:a0:7a:31:
         2e:0f:05:ed:f7:5f:b1:b7:c8:bd:7e:51:1c:61:09:b1:04:2e:
         00:47:97:96:4e:25:f2:69:b5:bd:c0:0b:86:6f:9a:7d:0b:db:
         c8:f8:bd:0e:b1:df:c4:de:0b:e9:9e:dd:d4:51:26:c9:29:bf:
         73:ff:1c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----