Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
File:                     _CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft (raw, json)
Hash identifier:          ycdj9snadehNncCVOO4Ft+jY8OKwQZKStX1oWa0WPGM=
Subject key identifier:   89:3D:6A:15:F2:98:0B:C9:A1:51:E7:6A:67:FF:B9:7D:53:DE:C6:17
Authority key identifier: FC:2A:09:04:45:FA:39:CD:6F:FE:0F:CF:44:A1:44:07:92:49:89:76
Certificate issuer:       /CN=fc2a090445fa39cd6ffe0fcf44a1440792498976
Certificate serial:       019048D4F6F5B2929FDA70E18CF3C02E0A8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
Manifest number:          0D5B
Signing time:             Mon 24 Jun 2024 06:00:34 +0000
Manifest this update:     Mon 24 Jun 2024 06:00:34 +0000
Manifest next update:     Tue 25 Jun 2024 06:00:34 +0000
Files and hashes:         1: _CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl (hash: ZWl2RpDZeK8btB5nMCmfSjUF1P66uwI8bU4nyOFDKAQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:d4:f6:f5:b2:92:9f:da:70:e1:8c:f3:c0:2e:0a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc2a090445fa39cd6ffe0fcf44a1440792498976
        Validity
            Not Before: Jun 24 06:00:34 2024 GMT
            Not After : Jun 25 06:00:34 2024 GMT
        Subject: CN=893d6a15f2980bc9a151e76a67ffb97d53dec617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ca:23:8c:79:54:14:9e:f5:21:e3:0c:12:88:
                    77:5f:cb:fb:4b:20:54:46:b7:dc:96:b9:60:31:2c:
                    b1:cf:9b:2e:6b:d9:7a:f9:f2:ca:83:26:a0:32:cb:
                    f1:22:2e:c6:cd:1d:5b:ef:8d:83:9e:41:87:36:1f:
                    8f:7f:d7:1e:c6:f0:11:7f:c4:ac:62:ed:4f:63:29:
                    e4:44:90:d5:6b:7b:11:af:b1:e4:25:ac:e2:e0:7e:
                    e2:69:c3:dd:ac:27:9a:8f:27:bf:81:fd:2b:a3:93:
                    8b:19:16:b0:70:cc:9d:d3:dd:a6:dd:63:af:c0:dd:
                    48:27:48:59:86:25:5b:08:be:83:47:75:0d:24:0d:
                    25:22:e2:5b:99:be:30:95:1c:13:19:5f:17:d3:f6:
                    7a:d0:2a:07:94:b9:a7:30:30:77:48:11:3e:c8:46:
                    c2:76:a6:6f:da:87:8d:7b:2b:10:61:8d:4b:8f:ac:
                    3b:23:51:98:e9:72:55:a4:4d:3c:4f:65:5b:dc:24:
                    9c:2a:57:71:ff:b1:ec:be:60:69:29:ff:24:72:ec:
                    92:bc:c6:19:4a:af:aa:64:1d:09:a3:67:21:f8:c9:
                    99:00:50:36:d3:07:3b:0d:93:72:6e:06:86:65:3b:
                    5d:4d:59:c9:93:d0:f5:a4:88:6c:31:48:8f:18:06:
                    10:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3D:6A:15:F2:98:0B:C9:A1:51:E7:6A:67:FF:B9:7D:53:DE:C6:17
            X509v3 Authority Key Identifier:
                keyid:FC:2A:09:04:45:FA:39:CD:6F:FE:0F:CF:44:A1:44:07:92:49:89:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:11:3e:4c:b2:98:81:4c:4d:49:1e:0f:2b:ff:e9:ed:5a:45:
         61:f7:d0:c6:60:5a:2a:e9:3e:31:e0:7d:15:b5:7a:8a:b3:24:
         61:8a:7a:04:56:13:b6:1f:da:92:6f:16:dd:f7:41:c1:9f:6d:
         18:37:d3:e0:f8:a6:a7:ea:f6:f1:7a:6d:de:b5:a6:c0:7b:f5:
         25:af:7b:43:74:03:24:1c:86:6f:aa:78:f2:32:64:df:0e:95:
         82:f4:b4:85:04:8c:da:ef:0c:f8:95:0a:b1:a9:48:8f:13:7e:
         13:27:30:d3:ef:67:a0:86:25:68:14:2f:5a:db:65:67:30:a4:
         7e:c1:29:16:f7:2f:6b:5a:26:ea:1b:44:5f:dd:19:10:2d:ff:
         15:12:98:07:c2:36:94:01:3a:d2:79:f7:32:af:13:e6:e2:27:
         06:43:3d:e0:a8:4d:a9:f9:83:27:6c:7b:1f:a1:4d:df:fc:a8:
         ac:b6:4b:7c:44:d6:e4:8a:0f:1d:0e:43:44:d1:2d:ef:ac:25:
         a6:73:99:fb:34:7a:ad:a5:16:1b:06:33:73:fd:56:29:fd:12:
         18:80:5c:24:bd:0c:cf:f2:48:f8:95:3a:98:27:bc:16:47:4e:
         26:e4:ac:21:b1:11:5b:86:c0:37:b1:52:50:f5:9e:b9:60:7a:
         84:71:e5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----