Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
File:                     ZdnpJm7sq8D9SmB36wuo-p873ic.mft (raw, json)
Hash identifier:          y8bimsLJFG65oICm4GLatK8VyjTEYn2KA6xx4lagUjk=
Subject key identifier:   55:C5:D7:90:7F:A6:F9:50:BB:02:D1:EC:B5:AA:0D:8F:89:67:76:F9
Authority key identifier: 65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
Certificate issuer:       /CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Certificate serial:       018879A6C966C90C05B5C8ABA2842A157A30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
Manifest number:          0DBB
Signing time:             Fri 02 Jun 2023 01:09:13 +0000
Manifest this update:     Fri 02 Jun 2023 01:09:13 +0000
Manifest next update:     Sat 03 Jun 2023 01:09:13 +0000
Files and hashes:         1: TyHp8SrpP1kbbFiP8GchOUXgDtE.roa (hash: ozsiLymPogqXWmfKh13XAW5OQtn/LHDTTrMlcBSE6Jo=)
                          2: ZdnpJm7sq8D9SmB36wuo-p873ic.crl (hash: 5nPOfh3rnwUiXAFQDT5OFh2bDqC/KdMT73YV9Jl1YVg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Jun 2023 22:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:79:a6:c9:66:c9:0c:05:b5:c8:ab:a2:84:2a:15:7a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
        Validity
            Not Before: Jun  2 01:09:13 2023 GMT
            Not After : Jun  3 01:09:13 2023 GMT
        Subject: CN=55c5d7907fa6f950bb02d1ecb5aa0d8f896776f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d4:00:71:09:56:29:a2:3a:fb:4f:40:24:03:
                    d5:73:e4:6b:bb:a1:cb:a3:7c:c2:70:30:40:a2:33:
                    e8:ee:92:d4:6f:5c:77:08:a5:21:bf:15:93:52:d9:
                    b0:27:be:46:e6:71:20:33:ea:a8:76:ca:32:c0:b5:
                    c4:9a:97:46:e0:49:d8:b3:9d:a7:b4:29:03:0c:2f:
                    07:69:e6:60:dc:78:81:43:30:eb:d6:35:05:2e:64:
                    44:72:a4:34:65:33:50:81:f8:95:09:24:c8:a8:1f:
                    fa:3d:3e:c7:91:07:e2:08:7f:d8:1e:0f:55:82:74:
                    ce:b7:5b:f8:9d:e1:24:f4:fa:91:53:da:93:7f:f7:
                    47:c2:a3:73:de:d3:ae:f8:c3:dd:2d:84:60:ad:19:
                    3c:89:cc:34:52:46:27:44:9d:3d:af:17:12:89:89:
                    62:2c:c5:50:ec:3d:08:76:4a:26:34:25:40:c8:d0:
                    80:f7:db:24:09:a7:eb:88:f8:ee:e1:bb:fd:82:ae:
                    19:d3:be:50:92:22:63:3f:4a:a0:af:d8:19:23:46:
                    71:ab:20:4f:fd:2a:90:09:37:ca:51:77:d1:a7:ba:
                    17:b5:a7:6b:0a:f7:e1:c0:c6:14:e1:57:f5:1a:bf:
                    53:cc:29:30:1e:72:87:57:b5:4a:69:8f:11:c1:28:
                    4e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C5:D7:90:7F:A6:F9:50:BB:02:D1:EC:B5:AA:0D:8F:89:67:76:F9
            X509v3 Authority Key Identifier:
                keyid:65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:5d:a1:66:c1:24:95:40:67:f0:d4:2c:b6:c5:35:d9:66:c8:
         5f:f8:a0:4a:50:30:3e:ba:4d:d4:39:f9:97:03:a1:18:c3:04:
         0a:42:45:b2:0a:01:e3:bb:59:8e:88:dc:6d:51:cb:14:7c:08:
         51:a2:c7:67:12:77:22:6b:88:8e:79:60:0e:f2:52:81:bb:65:
         bb:03:a5:23:31:24:ef:69:3b:e1:15:9e:79:32:29:2e:39:8a:
         04:36:9c:c2:26:89:50:a2:c7:7a:da:1c:6e:06:df:f8:e0:11:
         c7:5d:71:53:45:15:46:d6:60:8d:b2:79:cc:d4:28:ea:b2:70:
         7a:c6:22:c8:5c:14:be:e6:e5:05:e9:27:8e:57:a6:ad:88:60:
         1e:72:f3:f4:05:bd:87:76:b4:69:78:b6:8b:e8:2f:52:e5:95:
         b5:fa:1f:ed:fc:c5:bb:5d:60:f7:f0:a9:77:61:1a:f5:e3:37:
         9f:22:d9:cf:50:bb:5e:04:3b:36:90:0f:9a:17:c9:46:c9:6b:
         95:fd:a9:f5:6e:bc:c6:0d:3b:4d:78:10:11:2b:f1:ea:e7:e3:
         24:fb:6a:b9:ca:07:8a:8c:05:7f:47:c4:52:61:74:46:f7:63:
         45:5d:42:49:07:a6:66:ab:7d:0f:31:fe:f2:c0:79:41:5a:66:
         ab:de:91:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 2 01:43:04 2023 by rpki-client on console-ams.rpki-client.org