Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/14fa9b-a8d1-4781-8deb-9e464499f4fc/1/23FTu7PqntnOuAPm5_GSqr2a2jQ.mft
File:                     23FTu7PqntnOuAPm5_GSqr2a2jQ.mft (raw, json)
Hash identifier:          ICcjsc/a+clwoFWOVhbsnoIgIxXuP2Lb6OUvcM5w5Os=
Subject key identifier:   8D:0E:CD:63:44:94:17:3F:1D:0B:D2:8B:CF:23:96:87:5D:A7:6F:29
Authority key identifier: DB:71:53:BB:B3:EA:9E:D9:CE:B8:03:E6:E7:F1:92:AA:BD:9A:DA:34
Certificate issuer:       /CN=db7153bbb3ea9ed9ceb803e6e7f192aabd9ada34
Certificate serial:       01901CD8A9F4C08F9A7808C792B2B3F0A142
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/23FTu7PqntnOuAPm5_GSqr2a2jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/14fa9b-a8d1-4781-8deb-9e464499f4fc/1/23FTu7PqntnOuAPm5_GSqr2a2jQ.mft
Manifest number:          0886
Signing time:             Sat 15 Jun 2024 17:01:19 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:19 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:19 +0000
Files and hashes:         1: 23FTu7PqntnOuAPm5_GSqr2a2jQ.crl (hash: GgV2AthhVvb8ppW1XYegmLDVe244ZYPpZHtBsXTsbjM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/14fa9b-a8d1-4781-8deb-9e464499f4fc/1/23FTu7PqntnOuAPm5_GSqr2a2jQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/14fa9b-a8d1-4781-8deb-9e464499f4fc/1/23FTu7PqntnOuAPm5_GSqr2a2jQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/23FTu7PqntnOuAPm5_GSqr2a2jQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:a9:f4:c0:8f:9a:78:08:c7:92:b2:b3:f0:a1:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db7153bbb3ea9ed9ceb803e6e7f192aabd9ada34
        Validity
            Not Before: Jun 15 17:01:19 2024 GMT
            Not After : Jun 16 17:01:19 2024 GMT
        Subject: CN=8d0ecd634494173f1d0bd28bcf2396875da76f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1a:84:9e:da:d9:b8:34:b0:45:df:b3:12:e0:
                    e6:8f:d0:c8:34:dc:e5:6d:cf:74:a6:e3:95:bf:f2:
                    43:20:ea:19:21:ba:4a:11:fd:a2:bf:2d:bc:18:19:
                    f4:9d:ac:0a:67:c5:d1:07:80:8f:7b:23:af:0f:c0:
                    31:e2:0d:b3:08:1d:43:6f:8a:d6:cd:69:34:08:31:
                    a8:0d:40:ce:a5:2a:00:8c:12:7c:ef:3b:9d:6c:25:
                    95:84:aa:93:71:57:6f:21:50:7a:d2:da:06:2f:d2:
                    1c:65:de:b7:7f:14:e3:11:d6:75:e4:38:d4:fe:8c:
                    8c:8d:f0:da:45:e2:83:1c:74:1d:22:9a:f8:c2:50:
                    a6:c3:82:60:ea:34:2d:83:04:e6:4d:59:de:86:e0:
                    d7:46:1d:0b:24:cc:62:af:b2:4d:14:db:8f:ed:5d:
                    e1:2b:15:79:06:6e:1b:9b:ce:5d:bd:6c:e3:8c:ac:
                    6c:9b:4f:e3:85:9d:ea:76:a4:bc:03:ec:93:25:32:
                    c2:ac:57:01:33:71:8b:ce:b5:9f:b2:75:fd:e1:25:
                    80:22:31:7c:0a:91:02:a6:cf:1a:1c:7d:5a:b8:d5:
                    2b:21:1d:df:eb:e4:7d:cd:06:41:9d:8a:df:ef:42:
                    01:cb:65:6b:28:10:ed:33:34:f2:d8:22:e0:8d:6e:
                    a6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0E:CD:63:44:94:17:3F:1D:0B:D2:8B:CF:23:96:87:5D:A7:6F:29
            X509v3 Authority Key Identifier:
                keyid:DB:71:53:BB:B3:EA:9E:D9:CE:B8:03:E6:E7:F1:92:AA:BD:9A:DA:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23FTu7PqntnOuAPm5_GSqr2a2jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/14fa9b-a8d1-4781-8deb-9e464499f4fc/1/23FTu7PqntnOuAPm5_GSqr2a2jQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/14fa9b-a8d1-4781-8deb-9e464499f4fc/1/23FTu7PqntnOuAPm5_GSqr2a2jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:94:94:8b:b8:31:40:3f:49:86:f8:03:b7:a9:16:50:04:c2:
         fa:05:79:a2:dc:98:b2:15:ea:0e:db:8e:6e:09:d0:b0:d9:7e:
         ca:1a:8f:1f:2e:c1:06:bc:f8:bf:de:e4:d4:e6:38:4d:da:49:
         ea:4f:42:6d:22:87:c8:68:2b:05:b4:a2:41:37:76:a8:8a:9e:
         6e:ad:27:eb:c2:ae:17:5e:2c:dc:4a:74:97:78:c5:49:cc:fb:
         85:f0:88:10:2b:f2:70:49:f6:dc:b8:39:62:27:e8:a5:3a:d4:
         97:74:c3:e6:b4:d6:d8:bc:03:43:63:04:77:79:c2:6c:2c:de:
         ac:77:c4:82:da:44:14:31:e3:7a:8e:0d:0a:bf:cb:ad:ea:85:
         08:cf:28:2c:80:e9:b4:a7:29:51:24:75:b7:7b:aa:3c:4a:6b:
         d7:61:b2:5c:44:ec:79:2c:29:ed:d4:21:65:8d:5c:6d:0a:32:
         de:f2:b8:78:28:19:92:33:99:f1:42:b6:73:d8:44:a8:32:2e:
         7d:34:f5:d6:c5:36:61:c0:b7:77:90:f8:d9:4a:3f:a5:56:09:
         41:01:0d:bd:cb:81:a3:b8:c0:71:89:b1:d1:ed:77:76:45:06:
         24:48:b3:92:e9:7b:50:65:f4:4e:df:cc:d6:9e:2a:5b:2b:a0:
         a0:4a:6b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----