Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d1c70b-5717-41da-bcfd-60a92ead3af6/1/_u-XLlu2tt8FUhC0sD8HdImK7LM.mft
File:                     _u-XLlu2tt8FUhC0sD8HdImK7LM.mft (raw, json)
Hash identifier:          OvDX3DFp+eT/bg1obnKEi+J8kM/UKU6aTSR1mMWtS1A=
Subject key identifier:   31:1D:B3:89:DC:CD:93:AC:0C:41:26:15:A5:55:CF:BB:02:40:39:48
Authority key identifier: FE:EF:97:2E:5B:B6:B6:DF:05:52:10:B4:B0:3F:07:74:89:8A:EC:B3
Certificate issuer:       /CN=feef972e5bb6b6df055210b4b03f0774898aecb3
Certificate serial:       01901C6AD5E7092062C9DE3CBEC3088934C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_u-XLlu2tt8FUhC0sD8HdImK7LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d1c70b-5717-41da-bcfd-60a92ead3af6/1/_u-XLlu2tt8FUhC0sD8HdImK7LM.mft
Manifest number:          BF
Signing time:             Sat 15 Jun 2024 15:01:21 +0000
Manifest this update:     Sat 15 Jun 2024 15:01:21 +0000
Manifest next update:     Sun 16 Jun 2024 15:01:21 +0000
Files and hashes:         1: _u-XLlu2tt8FUhC0sD8HdImK7LM.crl (hash: Gs9HJtcBmRahuxewm/hqhe0i7PxOE0zg04WcXQG56Js=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d1c70b-5717-41da-bcfd-60a92ead3af6/1/_u-XLlu2tt8FUhC0sD8HdImK7LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d1c70b-5717-41da-bcfd-60a92ead3af6/1/_u-XLlu2tt8FUhC0sD8HdImK7LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_u-XLlu2tt8FUhC0sD8HdImK7LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:d5:e7:09:20:62:c9:de:3c:be:c3:08:89:34:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feef972e5bb6b6df055210b4b03f0774898aecb3
        Validity
            Not Before: Jun 15 15:01:21 2024 GMT
            Not After : Jun 16 15:01:21 2024 GMT
        Subject: CN=311db389dccd93ac0c412615a555cfbb02403948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7a:a0:fe:57:62:9c:2b:49:04:96:29:01:e0:
                    a1:cc:7b:18:19:0c:f5:c1:8d:68:ae:b4:f9:50:60:
                    44:36:8c:7d:aa:d5:08:8c:94:15:e4:81:88:90:db:
                    34:ef:ed:82:61:1b:12:4d:95:8a:52:d4:ad:d7:e1:
                    0c:f0:dc:66:d4:c3:37:67:8e:e0:3b:85:49:fa:ec:
                    65:ac:4e:92:dc:68:89:7b:8c:63:03:d0:61:fe:fb:
                    59:f8:23:0e:83:4c:d7:d4:79:97:b5:33:49:32:14:
                    eb:9a:45:83:02:14:b4:56:22:28:9e:c1:75:78:74:
                    e8:fc:17:4a:c5:6e:39:4e:ab:73:f8:59:b3:76:2b:
                    b4:2e:58:9f:e4:13:b4:c7:97:0e:47:ec:a2:89:b0:
                    89:d5:be:97:47:d3:84:c5:ce:39:1b:f9:a6:41:95:
                    24:48:9e:bc:7a:93:4c:4a:83:ec:4c:d1:8c:18:27:
                    87:d5:17:6a:b1:a2:65:24:b9:18:d3:1c:b6:e9:d2:
                    1b:ef:93:be:1b:ec:5c:05:e8:4d:09:25:52:d2:72:
                    65:b2:12:6d:e4:d4:06:c8:62:64:6c:6c:a9:a4:9b:
                    1d:ce:ff:6d:99:2a:69:4c:b0:66:c1:1e:73:bc:dc:
                    f6:25:53:e3:99:4d:34:1b:68:16:eb:fb:a6:c5:69:
                    f1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1D:B3:89:DC:CD:93:AC:0C:41:26:15:A5:55:CF:BB:02:40:39:48
            X509v3 Authority Key Identifier:
                keyid:FE:EF:97:2E:5B:B6:B6:DF:05:52:10:B4:B0:3F:07:74:89:8A:EC:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u-XLlu2tt8FUhC0sD8HdImK7LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d1c70b-5717-41da-bcfd-60a92ead3af6/1/_u-XLlu2tt8FUhC0sD8HdImK7LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d1c70b-5717-41da-bcfd-60a92ead3af6/1/_u-XLlu2tt8FUhC0sD8HdImK7LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:14:df:b5:c8:80:4c:56:ac:5e:d2:e2:bb:f0:3d:84:80:d8:
         30:88:19:d8:72:a6:d4:95:12:d7:de:64:16:17:86:75:f1:d3:
         94:ab:24:46:98:b9:0b:06:80:3f:db:51:41:65:32:ba:64:b6:
         4c:5f:44:2c:7a:ab:7a:1d:30:39:54:18:87:03:ca:5a:a6:14:
         03:80:dd:f7:61:ec:9b:eb:16:14:6a:fd:2e:07:81:30:6c:1b:
         3a:5c:0d:22:77:c8:fc:1f:49:b4:24:d5:87:9b:11:80:9f:c7:
         9d:32:d5:4e:5e:2d:7f:93:17:67:4c:29:06:aa:f8:4b:d6:03:
         c9:f4:1f:70:36:93:52:01:60:c7:6f:37:32:13:1c:95:5b:c5:
         9e:ec:8a:e9:58:f0:4f:97:51:44:f2:69:bf:88:86:7f:0f:e5:
         a0:7b:65:df:32:36:70:f6:dc:22:5f:89:eb:29:18:ff:5f:fd:
         32:c9:4c:74:79:7b:90:1c:19:53:cf:53:f5:d7:ef:cb:7e:01:
         15:e2:0f:02:14:ab:b1:24:04:6d:d9:48:15:c8:83:3d:a4:88:
         21:27:b3:cf:74:2f:a9:09:15:1f:d7:65:b9:c1:3c:e1:43:51:
         03:78:34:e7:b9:a8:a1:30:0d:43:54:5a:dd:ff:d1:86:a3:6f:
         0f:88:83:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----