Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
File:                     5zqbo56LjiuL9OiCUq-_3czN0aE.mft (raw, json)
Hash identifier:          +Nq2kQ3fUld8ZAwH3b1WVPHFWbnEk8YIwE6aq+SWyQs=
Subject key identifier:   20:B4:1B:82:0A:09:6C:A0:DF:2B:63:6E:23:86:47:63:59:4B:04:E7
Authority key identifier: E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1
Certificate issuer:       /CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
Certificate serial:       01901BFF6ABDBF1F874F132E191E5ABB1D02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
Manifest number:          0AEC
Signing time:             Sat 15 Jun 2024 13:04:01 +0000
Manifest this update:     Sat 15 Jun 2024 13:04:01 +0000
Manifest next update:     Sun 16 Jun 2024 13:04:01 +0000
Files and hashes:         1: 5zqbo56LjiuL9OiCUq-_3czN0aE.crl (hash: H0slLIUoGlzBIPg8fB152BHXW0DyLZ5x0SkMuMEuxys=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:ff:6a:bd:bf:1f:87:4f:13:2e:19:1e:5a:bb:1d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
        Validity
            Not Before: Jun 15 13:04:01 2024 GMT
            Not After : Jun 16 13:04:01 2024 GMT
        Subject: CN=20b41b820a096ca0df2b636e23864763594b04e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:3f:77:68:47:20:c0:11:a1:de:f3:f3:ae:
                    6e:10:e8:ce:cb:0a:42:9c:8f:7e:c8:a8:35:48:63:
                    7e:b1:3a:0c:0b:51:ea:33:7a:00:92:60:bf:a1:a0:
                    1b:9c:c4:07:85:f4:19:30:78:02:29:5f:82:4d:f5:
                    10:3b:91:44:e7:bb:88:ec:3f:0f:81:9f:33:69:51:
                    fa:0c:79:a0:5e:1e:5c:bf:83:d9:a4:96:01:af:7a:
                    7c:06:57:d2:6e:17:13:01:54:2b:3a:59:59:93:fe:
                    91:98:c1:53:a7:a3:34:b9:ef:3c:a1:3c:ac:ac:78:
                    9a:7d:8f:07:08:5f:52:46:96:16:06:cb:43:d4:0a:
                    da:4a:d9:67:19:7a:c8:2d:51:8f:07:5d:19:b6:d8:
                    74:dd:33:7e:25:ae:5a:00:b7:7e:70:47:40:0b:94:
                    b8:48:58:18:d4:18:3e:be:34:09:7f:de:84:c4:d0:
                    97:11:1f:58:06:33:0f:32:78:f9:7f:02:5f:8a:c4:
                    68:d9:77:28:95:64:0f:0e:2d:bd:5a:39:e1:a3:91:
                    cf:f8:8d:62:0f:17:93:fd:51:e9:ce:9e:03:63:dc:
                    fb:95:f8:be:32:c5:87:37:ab:4b:3d:32:bf:d2:3d:
                    32:ce:88:a7:ca:5d:cc:c4:ac:bd:af:c0:7f:f3:24:
                    ac:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B4:1B:82:0A:09:6C:A0:DF:2B:63:6E:23:86:47:63:59:4B:04:E7
            X509v3 Authority Key Identifier:
                keyid:E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:22:34:3a:46:6a:10:1a:94:13:fa:72:d8:b1:45:36:f3:7d:
         65:f3:cc:e7:bc:c5:ea:2b:7e:61:2f:99:82:36:a8:0e:ef:92:
         79:34:d5:5c:26:03:9a:12:2e:18:d6:30:bf:bc:10:a9:7b:92:
         06:1e:02:04:6e:4c:f9:22:16:3f:89:09:23:33:0e:85:c8:12:
         06:7c:23:1d:7b:4a:0e:ad:cf:12:4f:11:82:71:d1:af:ee:fa:
         3c:79:a9:17:cd:8f:b1:bb:f9:90:ce:23:5c:a4:b1:71:ac:88:
         a5:85:7c:20:a6:d9:9f:54:d8:11:f9:ac:70:4a:d4:d1:82:2f:
         d7:67:61:91:72:9e:2d:68:ca:da:ba:6b:f8:33:0e:8d:d6:a7:
         6a:8e:98:71:12:95:ae:86:39:4a:af:ea:60:89:5c:e9:b4:67:
         0e:b5:c6:5a:17:d1:4a:2b:9a:b3:3a:64:a0:71:9b:a5:4d:0e:
         c9:e7:cd:22:17:ff:30:c5:d7:c0:62:26:b4:ec:00:ff:1f:c6:
         73:bb:2a:eb:c1:be:c1:6a:9c:de:89:c2:40:ec:44:b4:b7:85:
         1d:08:90:ac:01:fe:9a:35:b1:39:d6:25:29:c0:95:83:1e:6a:
         90:f5:55:d1:f9:93:c4:1f:c8:55:40:db:95:c9:47:88:e2:3a:
         5b:7e:06:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----