Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
File:                     g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft (raw, json)
Hash identifier:          A50DLsx8CxaHZLjLaUzo9mLZcfsE9y3W3E9e9D+X7N0=
Subject key identifier:   1E:ED:9C:2C:11:80:8F:07:90:30:89:8C:EC:93:3D:53:45:6E:3A:44
Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
Certificate issuer:       /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Certificate serial:       018F836C7DCDAEB66C837CD283F1AA678682
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
Manifest number:          07E4
Signing time:             Thu 16 May 2024 22:01:16 +0000
Manifest this update:     Thu 16 May 2024 22:01:16 +0000
Manifest next update:     Fri 17 May 2024 22:01:16 +0000
Files and hashes:         1: CyGeMoZciLKlkc2HNPKyQGNU1ns.roa (hash: wBL6J4wUTEIkc06sqP4Z1SjSZ1bsxRh1idJaUOO5VFQ=)
                          2: g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl (hash: or23pNo23+XSfao8tgROcClEjR3xw3Ns2A9NM0ILOBQ=)
                          3: pdA9ShOyymqlaxxMo3S6JxTrs10.roa (hash: Pf7D3WV+AWuMYiE9pP+JqGLPMqduS0YXbYwutRFc/e8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 14:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6c:7d:cd:ae:b6:6c:83:7c:d2:83:f1:aa:67:86:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
        Validity
            Not Before: May 16 22:01:16 2024 GMT
            Not After : May 17 22:01:16 2024 GMT
        Subject: CN=1eed9c2c11808f079030898cec933d53456e3a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:28:71:b7:99:b5:6b:8b:a0:3a:4b:69:fe:88:
                    cb:c7:d2:97:fa:1c:03:cc:a8:18:bb:b9:5a:ac:7f:
                    d5:9f:28:da:d2:5e:e3:b3:39:b0:bd:55:dd:a1:b9:
                    6e:d6:12:95:19:ba:71:c0:3d:20:7f:a4:1e:48:27:
                    de:22:27:b4:a9:6d:aa:7e:84:20:62:65:b7:7b:41:
                    59:5b:94:c8:b5:e1:7d:fc:e7:df:fa:d6:f1:9b:1e:
                    b3:4f:a5:ad:08:81:5b:9a:62:60:ba:6d:08:97:4c:
                    37:63:5e:55:37:97:c5:3f:ab:63:e5:75:2b:a4:65:
                    eb:5a:99:a8:8c:b5:fe:e4:09:66:2c:aa:29:c3:b8:
                    61:e8:73:de:8d:84:11:8d:65:13:51:2e:80:9a:ae:
                    62:c8:71:c8:d4:9a:fb:45:5f:a0:6d:40:1a:0d:79:
                    e8:52:63:29:b7:8c:36:76:9a:88:a6:ec:ba:83:e2:
                    4f:8c:70:89:71:f5:90:41:9b:85:83:24:71:c0:76:
                    bc:9a:a9:bc:e5:9f:7d:40:2e:7b:b4:de:c0:e0:d9:
                    e8:b8:91:3c:90:c0:82:0d:b0:9d:24:cf:2a:63:ca:
                    35:ff:f2:6a:6e:b3:4e:f3:78:0a:fd:4b:da:fb:77:
                    9f:43:76:9a:32:ab:91:55:0b:ed:71:31:3e:74:20:
                    83:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:ED:9C:2C:11:80:8F:07:90:30:89:8C:EC:93:3D:53:45:6E:3A:44
            X509v3 Authority Key Identifier:
                keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:59:e5:1a:55:cc:3b:34:28:a5:c8:d7:9f:8e:9d:44:fa:e4:
         f2:06:3b:d2:f1:38:f1:57:22:92:1b:a6:29:9d:32:e4:eb:a4:
         e9:e3:b1:a8:e1:8d:99:46:a6:5b:dd:a3:45:2e:55:b4:6d:f3:
         da:05:b4:a0:cd:f8:47:5b:b5:18:c5:46:ee:e5:8c:90:6c:9b:
         e2:eb:1b:dd:66:cc:1c:bc:a5:8f:a0:b4:c4:4c:3a:d2:0c:95:
         80:cf:87:28:96:fd:9f:f9:6a:f9:35:7b:5d:d0:ae:bf:63:6f:
         d3:04:9c:81:fb:cf:8c:4b:d9:b5:b7:77:b9:55:73:75:da:68:
         d6:c5:5f:c6:2c:d0:a3:f6:b3:26:39:56:01:d5:b1:40:ce:41:
         ba:bf:93:5c:98:56:b3:54:8c:2b:39:71:4b:73:40:72:c0:d2:
         e3:e8:d1:2a:d8:55:36:df:61:08:5b:bd:a0:ba:b0:aa:27:f8:
         8c:ff:1b:9d:8d:13:51:48:8d:0f:12:7d:fc:ae:3d:74:5a:3b:
         32:1f:b6:0c:52:1e:6d:b9:4d:71:5b:68:72:11:66:57:e5:d3:
         0a:76:74:4e:32:a9:b9:e7:28:4c:0c:f7:0e:cf:b6:bf:b2:67:
         2f:46:49:17:2e:bd:00:09:41:2a:54:36:ef:59:40:e5:fc:bc:
         42:5c:3d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----