Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
File:                     d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json)
Hash identifier:          0lKzpnjGuuSsOTmNSbr0/jaDuagF/fJwNCwJJgfJkdI=
Subject key identifier:   C2:4E:B6:98:8B:EC:E8:33:E5:B4:FA:CE:7A:1F:4E:9E:A3:9A:BB:E5
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Certificate issuer:       /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial:       018F85FEED1C1CE7E6FFD5BCC201590C94E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
Manifest number:          117D
Signing time:             Fri 17 May 2024 10:00:27 +0000
Manifest this update:     Fri 17 May 2024 10:00:27 +0000
Manifest next update:     Sat 18 May 2024 10:00:27 +0000
Files and hashes:         1: NM10MBaBSFAHVemX2KMm2aMJ7VE.roa (hash: g4Cq2JShey8f6eJ/rgeeZ2wmC2GK3fY8FHhXtiFAGno=)
                          2: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: aDQSSp5mxzFcOeymHadH4V6PajgBrDSxCuw2b1Y4Xe8=)
                          3: rgPGw7n6BG6yjRTkP7iBSCbEToY.roa (hash: CBInPcDHWxg46g867SY/Jc7YxQbyDRMl928e+gRmb4Q=)
                          4: s5_3hV9WXcm1CRJYnyIB_VjZZ7Q.roa (hash: UKS5pZiv42UTkra4mHaSbZRRNU5rIYHxEPknazKSpNY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 10:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:fe:ed:1c:1c:e7:e6:ff:d5:bc:c2:01:59:0c:94:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
        Validity
            Not Before: May 17 10:00:27 2024 GMT
            Not After : May 18 10:00:27 2024 GMT
        Subject: CN=c24eb6988bece833e5b4face7a1f4e9ea39abbe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:65:16:72:ee:49:d8:de:d6:23:2e:52:55:
                    64:7f:31:15:d9:eb:6b:75:0a:ec:aa:a1:e6:cf:b6:
                    f5:e1:70:17:1f:e5:dd:a1:0a:5e:88:9c:fb:b5:13:
                    40:e4:84:ea:99:4b:14:7e:eb:22:36:b4:f4:08:d3:
                    a7:bc:cf:f3:0d:1d:47:76:3d:ea:91:fe:58:66:8d:
                    96:01:49:1f:af:3a:53:06:d5:a0:9d:72:f6:88:d5:
                    65:c5:bc:63:97:de:6e:26:cd:90:e8:b0:55:ee:c7:
                    69:3b:02:b2:ac:25:96:c0:f4:0b:3f:fb:c9:a2:84:
                    b4:ca:94:15:ac:35:07:d5:5e:1c:2c:24:5c:56:6a:
                    f6:80:a7:ae:af:43:ab:9b:87:a5:a8:0e:87:49:d5:
                    c5:20:ab:c0:65:5f:d9:b4:07:73:a2:b2:81:78:12:
                    fc:06:80:51:08:40:3d:f2:b7:0d:29:71:4e:25:d2:
                    b6:2e:81:1d:4b:c9:4a:04:a4:d1:70:79:12:ee:77:
                    71:ab:29:1a:ad:e0:bb:25:69:d1:f7:d7:9d:ef:cb:
                    98:07:06:e4:52:66:26:ea:c6:59:64:eb:ab:48:7b:
                    91:07:a2:fb:5b:16:d4:47:c2:07:75:22:83:d2:ea:
                    69:2d:8c:8c:32:75:70:23:56:aa:b4:e1:49:da:0b:
                    c3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4E:B6:98:8B:EC:E8:33:E5:B4:FA:CE:7A:1F:4E:9E:A3:9A:BB:E5
            X509v3 Authority Key Identifier:
                keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:e0:92:15:d3:db:3b:71:30:4e:e7:1e:d0:85:a7:8a:fd:92:
         b1:29:93:1e:bf:70:8f:81:04:c3:8e:99:45:61:62:b7:e3:6f:
         f8:2c:d3:81:c1:e9:7b:48:a2:04:cf:34:0e:53:7e:f7:e3:c4:
         62:4c:eb:29:e9:35:2b:b7:aa:17:46:39:f5:6c:37:33:ec:6b:
         5f:78:dc:7f:36:42:48:53:93:01:d1:4a:91:5b:de:e0:7b:ad:
         4b:71:58:6e:4a:3a:5c:97:d6:1c:17:72:06:4c:9f:e5:db:58:
         e0:fb:8d:ca:d1:b2:28:c8:be:42:b9:43:c7:f7:2c:fa:7b:ff:
         a7:b0:bc:d5:fd:8e:4b:61:60:65:1b:77:b1:ac:29:97:32:58:
         e6:8d:48:9f:1f:77:f5:03:2f:2f:e4:4a:b7:2a:28:3b:4c:75:
         86:c5:61:3c:d8:73:9a:77:6c:f6:97:9e:0b:32:ee:d1:f1:94:
         98:23:a2:b6:d8:b1:b7:e6:f2:9b:3f:8c:99:e0:8c:74:a8:d3:
         a2:15:4a:ef:06:5c:f9:39:e5:48:84:6f:de:35:15:79:03:db:
         a8:b7:41:3b:72:b1:5e:9e:e6:f6:95:01:46:b7:3a:59:fc:df:
         2d:b9:8f:12:33:6d:11:96:08:f8:86:2e:aa:47:ea:2e:fd:fc:
         f2:4e:fa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----