Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
File:                     cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft (raw, json)
Hash identifier:          ITwaCcQNK7gPp/pyRW2N5MriVlyE1FLoCA20vq9H+IE=
Subject key identifier:   32:48:89:B7:1E:8C:EC:7A:B1:D9:E8:15:C0:32:92:4C:4D:45:EF:C3
Authority key identifier: 72:6F:94:48:A9:10:D2:57:41:57:A3:04:03:F4:6C:11:72:AE:ED:B6
Certificate issuer:       /CN=726f9448a910d2574157a30403f46c1172aeedb6
Certificate serial:       01901D460894B0DD0F98270708A54708C17A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 19:00:47 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:47 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:47 +0000
Files and hashes:         1: cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl (hash: XefhrTRs2Cw3SD6Qr8uUD6AKFCGkODCnuFF2uad9Jh8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:08:94:b0:dd:0f:98:27:07:08:a5:47:08:c1:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=726f9448a910d2574157a30403f46c1172aeedb6
        Validity
            Not Before: Jun 15 19:00:47 2024 GMT
            Not After : Jun 16 19:00:47 2024 GMT
        Subject: CN=324889b71e8cec7ab1d9e815c032924c4d45efc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:61:0f:39:e0:09:1a:09:29:9a:e8:81:22:f5:
                    ac:65:6a:cb:a7:c0:8d:ba:a8:3f:3c:f2:55:d8:e8:
                    b9:4f:81:6b:21:29:97:13:44:32:05:63:23:b6:81:
                    50:e9:5d:9c:6f:d6:f4:e1:38:be:11:c3:fe:9a:b3:
                    a0:b9:54:bf:97:35:45:c6:75:e5:63:ec:18:44:f8:
                    3d:75:f8:08:7b:06:c5:1a:0f:a9:07:3c:8b:d5:83:
                    8b:76:26:95:15:50:70:6e:38:34:ae:c3:2b:df:7e:
                    7e:d9:f1:75:a8:f9:b0:27:85:ab:57:50:7d:45:e8:
                    7a:f3:8f:89:95:d6:ee:57:67:18:77:6c:32:1c:98:
                    19:50:3d:36:ba:b2:04:75:c4:af:61:6b:00:d9:8b:
                    46:34:ab:ec:07:72:71:84:d3:49:64:8f:01:05:30:
                    57:fb:75:c5:99:05:ec:87:aa:92:d1:1a:56:c5:1a:
                    6a:dd:5f:df:ec:c0:99:8c:d6:b8:33:f4:39:5b:74:
                    fe:b9:be:c1:3a:2e:00:d7:d1:31:8a:ec:95:04:59:
                    86:4f:27:ea:d6:02:b2:1a:ce:09:c6:fa:f6:cf:67:
                    a7:6e:1e:96:88:92:75:ed:c3:92:35:8f:21:6f:fc:
                    99:8a:21:f9:3a:cc:14:2e:c4:34:34:e6:0b:77:ac:
                    2b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:48:89:B7:1E:8C:EC:7A:B1:D9:E8:15:C0:32:92:4C:4D:45:EF:C3
            X509v3 Authority Key Identifier:
                keyid:72:6F:94:48:A9:10:D2:57:41:57:A3:04:03:F4:6C:11:72:AE:ED:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:1b:c2:68:86:fd:8e:71:9e:6c:33:16:3c:9a:01:e1:87:a6:
         c8:72:3a:b4:86:68:19:52:ed:16:80:cb:ca:33:46:a4:32:52:
         a9:5b:36:6c:1a:1e:5f:0e:28:a1:7d:13:f0:6c:f2:c1:3f:30:
         54:e6:95:2e:c2:96:e7:51:53:2d:d9:8f:d4:d9:7c:a8:f5:0e:
         84:71:e5:31:56:43:98:d2:fc:8b:50:73:7b:4a:b6:e2:2f:5d:
         b8:03:aa:37:6f:64:40:fa:cd:b9:cd:a4:8e:60:4f:fe:93:c0:
         81:53:8d:b8:48:7c:74:9d:9c:e4:6f:e3:28:89:ba:bc:13:98:
         3c:95:eb:61:de:d9:5d:b9:c6:96:93:4e:ef:36:64:64:0d:e6:
         77:39:6d:1a:bf:48:96:2e:a2:dd:24:b0:c1:36:4a:55:5a:5e:
         e1:7c:74:4f:04:4a:1c:a7:1b:a7:5b:0d:f3:61:90:09:8d:c9:
         6a:b8:5b:c3:14:f6:45:51:dd:91:66:d5:6a:84:d7:ee:36:09:
         d0:4b:a3:78:15:83:e2:20:64:d1:73:0a:6b:9b:2f:fc:33:27:
         db:3b:c8:d1:2c:9a:77:e1:c6:d3:51:4d:75:01:ba:40:07:c4:
         5f:47:38:f6:b4:b4:a5:47:bb:98:22:fa:5e:5f:72:bd:5b:53:
         b9:f0:68:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----