Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
File:                     2sMmMqqRVCU8bc0jMemtaSC2vcw.mft (raw, json)
Hash identifier:          f0ya9zIejDt8NZrTgp7j+wqoNUqgD6/VkBhpYou+6lw=
Subject key identifier:   EC:4F:8C:14:BD:EE:C6:8A:23:17:55:7A:E5:72:72:B2:D3:9C:0F:6C
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Certificate issuer:       /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial:       018F0CC28FD56CCCD9E6C8B9BD4A1A5EB59F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
Manifest number:          08CC
Signing time:             Tue 23 Apr 2024 21:00:28 +0000
Manifest this update:     Tue 23 Apr 2024 21:00:28 +0000
Manifest next update:     Wed 24 Apr 2024 21:00:28 +0000
Files and hashes:         1: 2sMmMqqRVCU8bc0jMemtaSC2vcw.crl (hash: 96VpjgM0sI9HeFx66avn+Ta73PVr2ZHHd01mpgRpGL8=)
                          2: H9fBzHPKvVb-FEpssoCBeNcGHao.roa (hash: T0sJ7yqgc9erKLgKasAa/VII2Ns4JIL+dpLCZ6vrIGA=)
                          3: Hc00QB9ZFYtwEkk5NnXx9IepCB0.roa (hash: V8Y2fxm3AU34LGpPMsbDZ2y0Pf+EVVpyEaf/Ez+ICuY=)
                          4: qEdWz2VClhT65VZD4qW7_cHoiPo.roa (hash: lUZ7qOoYiE0vTUwntk/m2r6BrQU754mOSdQ7x3lpFXU=)
                          5: vOEM8kUpzLxopD4TyIsB3N_Y010.roa (hash: OAdILdvcEpTr1UueFf/ZDCzT+gCrJkrZoluYVIFmenU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Apr 2024 17:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:0c:c2:8f:d5:6c:cc:d9:e6:c8:b9:bd:4a:1a:5e:b5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
        Validity
            Not Before: Apr 23 21:00:28 2024 GMT
            Not After : Apr 24 21:00:28 2024 GMT
        Subject: CN=ec4f8c14bdeec68a2317557ae57272b2d39c0f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2b:dd:78:2d:b9:e4:a4:21:e1:d6:48:31:50:
                    19:4d:c1:43:41:bd:4a:2a:62:e3:83:6f:9a:e4:4a:
                    74:be:bf:40:f4:e4:d2:5b:df:e3:e0:ba:ac:01:61:
                    7b:03:c8:4a:e0:f7:63:6a:6f:27:9a:7c:c7:e8:a7:
                    c6:d3:3f:b0:ce:e2:0a:1f:9a:d5:bf:e0:40:a4:22:
                    29:ab:e6:dd:72:74:c3:11:0e:a6:1d:93:5a:9b:28:
                    28:a1:a6:22:f2:ab:9a:f3:66:b0:49:be:26:07:8e:
                    78:73:51:70:59:74:5c:e3:df:e3:df:79:c8:3f:1a:
                    94:20:99:f1:d7:0d:c3:9d:80:65:4f:cc:17:37:a6:
                    29:a3:9a:f3:59:30:a2:bc:3a:12:69:9d:2d:e1:2a:
                    b4:2a:44:55:7c:a9:c8:6e:50:85:8d:1d:20:d8:98:
                    c2:b6:d3:49:6e:99:27:88:be:8a:74:ab:b0:82:a8:
                    71:4d:7b:a1:87:33:c9:26:ad:30:31:66:83:e7:56:
                    40:88:4f:92:4d:e5:9e:a9:50:9b:ad:0d:12:6b:e5:
                    7d:d7:94:5f:2c:a4:bd:d9:d8:54:f0:df:9f:00:27:
                    c7:ed:fb:e8:74:a4:45:40:53:76:e0:a2:77:7e:d9:
                    c9:68:c9:ee:c7:35:ce:eb:c3:8a:a9:bb:8e:be:23:
                    d4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4F:8C:14:BD:EE:C6:8A:23:17:55:7A:E5:72:72:B2:D3:9C:0F:6C
            X509v3 Authority Key Identifier:
                keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d6:21:1a:88:ca:e8:85:a8:d1:e3:fb:51:e8:35:5a:e8:39:
         aa:0c:32:4d:fa:df:26:9b:69:89:3d:e5:39:af:ec:36:58:06:
         b8:f0:90:68:2f:00:3a:78:10:d7:22:2d:c6:e1:c6:97:ad:64:
         d4:2a:f6:cb:34:84:50:7e:3d:01:c3:58:22:01:99:31:bd:b5:
         ef:d9:fa:d9:b8:7d:38:ce:81:72:68:04:4c:b3:dc:18:c6:10:
         86:00:f5:0f:d0:cd:f4:04:5e:9f:32:3a:77:d5:f8:a8:50:79:
         8f:32:dc:24:ea:04:89:a7:4f:56:74:37:9b:dc:b3:58:2c:e4:
         83:05:2c:b8:76:21:23:73:91:a5:eb:d1:a5:63:03:74:df:57:
         05:50:7f:58:0e:d0:ee:08:a8:5d:a8:d0:9e:8c:b3:e0:91:11:
         63:5f:c7:4d:2a:4e:ee:5d:11:a1:91:12:a7:15:0b:f7:36:6d:
         ff:95:1b:9e:d5:36:e3:bd:bc:e2:d3:85:a9:13:0d:92:c8:8f:
         70:a6:46:52:2a:cc:af:cd:23:1f:fa:32:fa:aa:6f:91:b4:71:
         ce:04:f3:ff:7f:cf:54:ee:c0:0d:a8:54:07:d6:65:3c:6b:19:
         7b:6c:92:5a:69:75:06:67:ef:0b:d5:46:0a:9a:de:ee:37:b4:
         33:8e:35:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----