Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
File:                     8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft (raw, json)
Hash identifier:          J+6MtJVqd44IpjUOjlIF7zwc5BYUGn2njyfeIsfxPjw=
Subject key identifier:   DB:04:F2:51:D9:D5:9A:03:4C:45:BA:62:A3:87:EB:4C:AE:8E:FB:0D
Authority key identifier: F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0
Certificate issuer:       /CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0
Certificate serial:       0190384F48DA554534AF24F7A8E2830CF181
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
Manifest number:          11D1
Signing time:             Fri 21 Jun 2024 01:00:38 +0000
Manifest this update:     Fri 21 Jun 2024 01:00:38 +0000
Manifest next update:     Sat 22 Jun 2024 01:00:38 +0000
Files and hashes:         1: 8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl (hash: 0GFq+4qJQoSEyqxvzbIFsDg+ngCCMjmgLD9LlSiY+l0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:38:4f:48:da:55:45:34:af:24:f7:a8:e2:83:0c:f1:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0
        Validity
            Not Before: Jun 21 01:00:38 2024 GMT
            Not After : Jun 22 01:00:38 2024 GMT
        Subject: CN=db04f251d9d59a034c45ba62a387eb4cae8efb0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:07:c7:eb:f3:62:47:6a:dd:6b:f8:81:de:08:
                    b9:9c:47:54:48:fb:a9:ec:f6:c7:32:28:ca:0b:d3:
                    97:7c:4f:08:3b:5f:98:9b:21:01:87:65:66:02:7a:
                    59:7a:26:96:de:a5:96:d8:95:b4:5f:06:7b:ad:20:
                    72:fc:71:91:76:54:fb:3e:53:fd:f2:47:53:f5:c3:
                    7e:b9:e6:98:45:81:15:2f:94:82:6c:da:a8:66:ab:
                    56:d7:87:4e:bb:df:11:18:ad:51:a6:1b:56:24:0b:
                    a6:f3:e7:bd:c1:ed:93:02:4f:22:01:84:aa:16:df:
                    98:1c:19:8a:54:14:c0:e4:dd:ee:9a:88:3f:f2:cd:
                    ee:df:e8:07:c8:53:39:f8:1b:59:12:b8:bc:54:57:
                    88:aa:9d:b7:15:6b:d9:2a:fa:64:43:5d:bf:47:f5:
                    bb:46:7e:2c:ca:42:63:67:e5:a1:32:6d:18:2c:e1:
                    dc:eb:69:78:97:0e:e0:78:fe:46:cb:93:88:c6:38:
                    62:95:6e:60:f5:e7:f3:4f:ea:7f:21:2d:5f:b5:c2:
                    a2:c0:cb:f5:14:f9:c6:78:80:f1:c4:6b:1c:c7:2f:
                    c4:6b:bb:44:97:01:0d:3f:40:99:f8:f5:bf:14:e5:
                    71:8e:f5:01:ed:a2:55:c2:e8:5b:9a:9d:01:09:78:
                    ad:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:04:F2:51:D9:D5:9A:03:4C:45:BA:62:A3:87:EB:4C:AE:8E:FB:0D
            X509v3 Authority Key Identifier:
                keyid:F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:48:12:cd:37:54:54:6c:3d:fe:ef:c0:fb:cc:4b:14:83:0c:
         71:0c:27:9f:50:e8:f7:54:a0:5f:8b:63:a4:fb:47:37:ad:99:
         ea:5e:d9:b7:7c:0c:53:6e:ec:9e:21:e3:80:78:b5:20:9c:12:
         fb:19:d5:d4:46:17:73:01:74:ab:b8:66:0c:51:29:ed:73:d0:
         ff:45:84:c7:ed:74:d3:53:bd:d4:9b:a1:96:d2:9b:b6:28:7a:
         ab:a4:6c:f7:0c:4d:79:0e:3d:bd:f5:38:a9:26:7f:16:1a:d4:
         7d:6b:22:a3:69:50:29:ae:7f:62:db:ca:cf:f1:2b:25:ad:a4:
         97:27:e3:9d:49:0e:71:64:a0:4f:b9:8d:65:91:f4:e4:79:2f:
         1e:df:c4:8d:8a:ba:f1:1b:4c:61:5a:f9:56:69:12:77:08:16:
         a1:55:cc:07:3f:05:ee:7d:24:c7:2f:c2:4f:f1:58:9a:5f:44:
         de:e6:5e:4f:49:e4:7a:8c:1e:6f:71:2b:6a:a7:51:84:19:4c:
         96:52:dd:ae:76:39:be:da:bf:e3:b8:af:c5:c0:a2:1d:9f:9e:
         40:5a:32:8b:a0:cf:e1:b6:5c:d3:44:46:18:fe:c3:7c:c5:e5:
         dc:34:28:22:9a:39:11:ac:5b:6e:94:40:e6:2f:2a:ce:d3:a5:
         cf:fd:b6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----