Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
File:                     tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft (raw, json)
Hash identifier:          OlCklzFkSmz136RF9A5288PP7woUUskBtxe4rrmqwBE=
Subject key identifier:   BC:9D:F8:FF:0A:33:38:80:0C:D1:68:2D:8E:A1:90:F9:87:B1:94:D1
Authority key identifier: B4:83:BC:0A:71:A5:2D:0C:F3:98:95:22:36:75:75:95:9E:BD:CE:F5
Certificate issuer:       /CN=b483bc0a71a52d0cf3989522367575959ebdcef5
Certificate serial:       01901C6AE037B99898ADBF92770123AB94BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
Manifest number:          1153
Signing time:             Sat 15 Jun 2024 15:01:24 +0000
Manifest this update:     Sat 15 Jun 2024 15:01:24 +0000
Manifest next update:     Sun 16 Jun 2024 15:01:24 +0000
Files and hashes:         1: tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl (hash: wL7cSsPBcsd1/AZiikqYk6sZvT7yBkOHuKKeIx1Y9D4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:e0:37:b9:98:98:ad:bf:92:77:01:23:ab:94:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b483bc0a71a52d0cf3989522367575959ebdcef5
        Validity
            Not Before: Jun 15 15:01:24 2024 GMT
            Not After : Jun 16 15:01:24 2024 GMT
        Subject: CN=bc9df8ff0a3338800cd1682d8ea190f987b194d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9a:68:05:ab:ad:bc:c9:7e:9d:19:30:83:45:
                    d2:21:17:84:f4:a7:8c:92:b3:5e:ca:9e:92:6c:54:
                    6b:61:70:d2:02:2d:d0:a6:59:53:fc:46:5d:ea:17:
                    e4:f2:d6:36:e6:3d:07:af:7e:91:6e:3f:73:9d:95:
                    b5:bc:52:a0:06:ba:25:2a:97:4f:ac:de:93:d7:e8:
                    a9:21:57:94:92:79:55:69:f4:38:e2:84:16:3f:2c:
                    4f:cc:a2:c8:2c:b9:a7:64:57:93:de:2f:c6:35:5d:
                    45:71:81:7c:47:de:1c:41:06:c3:cd:a0:95:8a:a2:
                    46:03:3d:da:f3:2b:3d:0f:c9:63:44:2d:85:b8:a1:
                    8b:f7:99:9b:de:3a:50:24:cd:a4:1b:f8:96:b9:22:
                    99:f4:1d:10:06:a7:9f:7e:e2:0b:39:91:fa:b9:34:
                    b7:ad:44:cf:9a:22:87:86:e4:ac:ed:2d:11:68:c5:
                    31:40:40:fb:fa:19:9b:e5:cf:01:91:44:1d:93:88:
                    7b:fb:80:7e:ad:78:f3:b3:94:d9:d6:89:52:75:85:
                    0a:f1:cb:08:91:10:58:28:17:51:e1:8b:98:52:67:
                    ab:8f:34:49:9e:02:5d:03:f0:90:c7:e7:8c:dc:22:
                    cf:14:31:1c:45:7a:0e:06:e9:0d:b1:b3:e6:6b:2e:
                    dd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9D:F8:FF:0A:33:38:80:0C:D1:68:2D:8E:A1:90:F9:87:B1:94:D1
            X509v3 Authority Key Identifier:
                keyid:B4:83:BC:0A:71:A5:2D:0C:F3:98:95:22:36:75:75:95:9E:BD:CE:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e9:30:90:d0:f0:92:79:10:d5:de:a9:d7:e2:70:5c:0a:26:
         e8:c9:0d:cc:33:08:90:a3:de:d8:18:9e:c8:2e:14:60:70:0d:
         02:71:ac:cb:71:39:f6:83:40:2a:59:93:d8:c8:39:1d:ab:b5:
         9d:20:4c:b7:d1:70:e3:d4:e4:0a:ba:79:c9:84:09:b3:19:78:
         44:ef:81:34:43:1e:c0:7e:32:70:5c:4f:b8:41:65:d7:cf:95:
         7b:f1:49:b4:12:a4:cb:9d:be:9c:3d:81:45:d2:8b:19:3a:5f:
         e4:32:7a:3a:46:a7:0a:6c:65:47:6c:3f:69:32:ca:74:eb:13:
         23:f3:b4:d6:68:a6:31:c2:26:cf:16:b8:f8:00:5e:94:1f:39:
         6f:dc:90:f9:5c:c3:f8:9f:50:5a:49:91:f4:71:21:32:ba:41:
         f4:6b:7f:20:7f:76:d3:d8:dd:76:62:fe:44:03:6d:ff:8c:32:
         31:07:25:ed:f8:00:05:ac:99:4a:55:d0:be:ab:fe:b7:7c:06:
         c7:ee:46:d4:08:56:5e:81:a6:dd:40:a1:0f:ad:b6:3b:70:d1:
         75:c4:c8:fd:50:7e:72:36:4a:07:9a:94:8e:5e:eb:3d:ae:64:
         aa:2a:10:b6:26:84:51:4b:e4:cd:ab:f6:8a:86:f0:d2:a0:37:
         0a:26:93:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----