Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.mft
File:                     SXoXzvuUeLbK6PZdWfsepdB2LWg.mft (raw, json)
Hash identifier:          E9PQsGgsE4L3WVSFZZBoH4vwJ/7uLvAf5aDokxYstB8=
Subject key identifier:   3B:E7:C7:E8:4A:E2:F7:C9:F7:5B:37:C1:FD:84:C4:B6:F3:DB:60:85
Authority key identifier: 49:7A:17:CE:FB:94:78:B6:CA:E8:F6:5D:59:FB:1E:A5:D0:76:2D:68
Certificate issuer:       /CN=497a17cefb9478b6cae8f65d59fb1ea5d0762d68
Certificate serial:       01901BFE072669DBE58D347E5C3CFBEF0154
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SXoXzvuUeLbK6PZdWfsepdB2LWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.mft
Manifest number:          0600
Signing time:             Sat 15 Jun 2024 13:02:30 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:30 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:30 +0000
Files and hashes:         1: SXoXzvuUeLbK6PZdWfsepdB2LWg.crl (hash: auSKqMIbXW6DqS8fbG0Le2mfYSc0AWrJLqph3AoIjsE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SXoXzvuUeLbK6PZdWfsepdB2LWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:07:26:69:db:e5:8d:34:7e:5c:3c:fb:ef:01:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=497a17cefb9478b6cae8f65d59fb1ea5d0762d68
        Validity
            Not Before: Jun 15 13:02:30 2024 GMT
            Not After : Jun 16 13:02:30 2024 GMT
        Subject: CN=3be7c7e84ae2f7c9f75b37c1fd84c4b6f3db6085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0a:6c:47:e4:a4:d6:c2:d9:32:fd:79:02:84:
                    15:c5:f5:fb:47:17:20:56:e3:3e:cf:18:b1:94:c2:
                    ca:e5:9f:8b:d0:0c:7a:dc:9d:b5:02:2d:d9:68:93:
                    d7:17:08:f7:b9:79:90:1f:13:cb:99:7b:e3:b4:4e:
                    1d:26:bd:ea:a5:73:27:91:14:bf:6f:5c:fa:8f:2e:
                    3c:a0:0f:97:f9:dd:7c:31:9b:1e:04:4c:e6:12:05:
                    2b:01:ce:af:eb:04:3a:0c:20:1b:b5:21:3a:ab:15:
                    f2:9b:cb:b7:12:a1:5c:77:c0:49:75:ae:a6:17:5f:
                    d3:5f:bf:cc:08:74:37:00:7a:7c:4d:fc:19:09:ad:
                    37:d9:a9:31:60:47:ad:bc:50:91:64:7a:6f:05:f1:
                    55:fe:1a:e7:f6:54:ae:19:5f:1e:b6:0c:79:dc:35:
                    01:af:1d:bb:38:6e:20:2a:fe:b5:cc:ed:80:01:ff:
                    6b:01:4c:61:49:fd:75:5a:8c:a9:c1:2b:33:52:8c:
                    8e:5e:20:63:37:c5:4e:26:ad:f4:e3:4d:64:71:9b:
                    88:08:0a:9e:5d:60:c4:72:25:84:0a:21:f8:3b:dd:
                    c7:d3:e7:14:46:ce:8a:df:41:45:e1:76:2f:f2:5c:
                    21:3e:ef:d3:03:7d:7e:30:a3:4c:d4:cc:e7:b8:3c:
                    df:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E7:C7:E8:4A:E2:F7:C9:F7:5B:37:C1:FD:84:C4:B6:F3:DB:60:85
            X509v3 Authority Key Identifier:
                keyid:49:7A:17:CE:FB:94:78:B6:CA:E8:F6:5D:59:FB:1E:A5:D0:76:2D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXoXzvuUeLbK6PZdWfsepdB2LWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c2:77:ab:18:2a:01:2e:6f:81:a9:44:c1:f7:4b:88:e2:d9:
         9f:6c:2e:b3:6e:95:df:e9:dc:8b:8e:9d:0f:25:8e:dc:e3:4e:
         fa:6c:5b:a6:21:47:9f:93:05:ed:d7:78:04:e4:11:41:74:83:
         d8:71:ab:29:78:8b:47:1a:05:16:31:89:0f:09:7d:59:d0:ff:
         89:e3:60:d8:0c:87:91:cb:28:95:e3:d9:49:21:1e:16:58:ac:
         fc:8c:ae:c5:58:be:9b:5f:bb:12:e7:78:8e:05:ad:0d:2e:aa:
         cb:fe:65:1c:d4:33:d0:d6:c9:ca:2d:27:70:c3:0d:91:6d:7e:
         a8:86:1c:e4:c4:2c:13:0f:aa:b3:ad:ba:68:fa:ff:7c:07:ff:
         6a:14:13:3d:77:14:5e:20:bc:09:ef:35:0b:5a:78:ae:97:52:
         04:20:b3:b3:de:ed:db:4e:dd:00:6e:3e:8c:5e:ac:5a:64:4b:
         1d:dd:4c:dd:f7:5a:df:23:10:97:2b:1a:b8:23:7c:56:33:2b:
         06:00:ad:e5:6e:9e:69:c2:c3:9f:23:bc:08:e2:2c:e4:14:64:
         6a:2f:31:72:e7:6b:41:d2:eb:25:e1:af:0c:3c:ef:ce:0d:d7:
         1e:9f:6a:c9:56:71:83:9b:a8:64:f9:08:ae:a3:7e:17:35:cc:
         d0:58:94:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----