Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2ac633-40ec-4027-af2d-0f899e0c20cd/1/HQw5Ht1cvuGhTgqz-T2DT65RHk0.mft
File:                     HQw5Ht1cvuGhTgqz-T2DT65RHk0.mft (raw, json)
Hash identifier:          7dtzsd37yzbvvNK52d/a4KuMHqt8r3g3sNtP2ybg5r8=
Subject key identifier:   2E:52:23:E0:FE:9B:AC:7E:19:B1:6D:E3:59:57:CD:12:84:44:85:20
Authority key identifier: 1D:0C:39:1E:DD:5C:BE:E1:A1:4E:0A:B3:F9:3D:83:4F:AE:51:1E:4D
Certificate issuer:       /CN=1d0c391edd5cbee1a14e0ab3f93d834fae511e4d
Certificate serial:       01901E8FC52A6822E818E42B56038AD99821
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQw5Ht1cvuGhTgqz-T2DT65RHk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/2ac633-40ec-4027-af2d-0f899e0c20cd/1/HQw5Ht1cvuGhTgqz-T2DT65RHk0.mft
Manifest number:          0F13
Signing time:             Sun 16 Jun 2024 01:00:56 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:56 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:56 +0000
Files and hashes:         1: HQw5Ht1cvuGhTgqz-T2DT65RHk0.crl (hash: SFsjBK8WwEnFxSrtQpYY5WDGBmaLjqn7sdpb0bwb794=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/2ac633-40ec-4027-af2d-0f899e0c20cd/1/HQw5Ht1cvuGhTgqz-T2DT65RHk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/2ac633-40ec-4027-af2d-0f899e0c20cd/1/HQw5Ht1cvuGhTgqz-T2DT65RHk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HQw5Ht1cvuGhTgqz-T2DT65RHk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:c5:2a:68:22:e8:18:e4:2b:56:03:8a:d9:98:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d0c391edd5cbee1a14e0ab3f93d834fae511e4d
        Validity
            Not Before: Jun 16 01:00:56 2024 GMT
            Not After : Jun 17 01:00:56 2024 GMT
        Subject: CN=2e5223e0fe9bac7e19b16de35957cd1284448520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:3c:4d:f3:e8:5d:d8:bc:b0:09:f0:6d:ea:85:
                    06:1c:2b:26:6c:ad:f5:27:ab:dd:a8:1b:4c:1e:28:
                    02:ed:62:71:2a:e6:58:87:95:32:31:60:22:f0:6b:
                    87:ae:7c:9b:82:55:86:0f:1a:3c:95:8c:24:07:5a:
                    7d:a7:11:56:7f:4e:e4:c9:38:22:21:5e:e6:82:a3:
                    cb:7f:5a:cd:20:47:4e:7a:fa:45:24:f6:b6:e3:34:
                    0f:22:af:76:4c:0f:4d:d2:b3:74:e2:68:c3:1f:d1:
                    65:46:b6:aa:3c:9a:1f:ea:af:cd:84:5d:20:1d:83:
                    39:6e:6d:7d:59:46:37:43:43:ef:27:56:58:2a:2f:
                    fd:04:66:14:ce:9d:c3:89:ad:9a:59:f9:5e:53:88:
                    61:ae:ad:16:cb:4b:e4:f8:ff:e6:d1:47:04:5d:43:
                    e2:5a:48:d5:1b:d1:e1:71:6a:a7:95:64:75:9a:3e:
                    f0:00:c4:b8:37:33:d6:4d:d1:9a:20:49:29:0b:06:
                    89:f0:fe:9e:66:7c:d1:a5:37:93:41:c6:ab:01:ce:
                    36:d7:b0:fb:37:df:b1:45:d7:84:43:af:08:f7:28:
                    be:32:19:da:8e:de:53:cc:37:d5:9d:be:7b:0d:12:
                    62:62:4b:f0:45:8f:0a:87:b7:43:09:60:dd:95:f2:
                    88:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:52:23:E0:FE:9B:AC:7E:19:B1:6D:E3:59:57:CD:12:84:44:85:20
            X509v3 Authority Key Identifier:
                keyid:1D:0C:39:1E:DD:5C:BE:E1:A1:4E:0A:B3:F9:3D:83:4F:AE:51:1E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQw5Ht1cvuGhTgqz-T2DT65RHk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2ac633-40ec-4027-af2d-0f899e0c20cd/1/HQw5Ht1cvuGhTgqz-T2DT65RHk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2ac633-40ec-4027-af2d-0f899e0c20cd/1/HQw5Ht1cvuGhTgqz-T2DT65RHk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:5e:cb:cc:31:30:a1:95:1d:ce:c5:0d:cc:2a:5c:97:dd:e4:
         a4:15:78:78:fe:76:3b:f0:95:77:8a:86:4d:b0:9a:63:7f:ca:
         0c:97:22:33:a9:5c:fd:02:92:b4:a0:c4:43:e9:c7:88:e1:cb:
         ce:54:33:ce:a3:7d:48:91:82:d6:17:98:ce:bf:71:b7:d7:61:
         f6:06:55:10:0a:6e:37:9d:01:a6:96:79:e9:ef:d4:66:01:9b:
         74:4e:39:15:d1:35:03:d4:e4:5c:33:df:10:7a:d4:ab:3f:14:
         01:31:d5:89:43:fe:05:82:f2:58:89:77:01:0d:d8:a5:70:d9:
         d5:e9:3a:5f:ed:15:2e:e7:29:31:02:12:0b:e9:36:4a:dc:38:
         14:67:11:22:79:ce:e6:f8:21:1b:4b:1c:37:e2:0f:51:74:42:
         c6:83:1f:6a:8e:e4:7f:a5:94:68:64:bb:b5:ec:a0:bb:d1:15:
         21:bb:f5:6d:78:5b:50:f4:d3:0f:de:84:b1:9c:24:df:3d:c8:
         53:01:01:09:66:8f:02:08:51:38:00:ee:eb:68:96:98:38:ca:
         77:5b:f8:25:e7:21:5c:d9:f3:46:ff:b8:43:36:dc:7b:55:25:
         1f:a8:07:e0:d3:75:96:8d:89:81:86:2f:66:b2:c5:01:11:0b:
         d6:69:0a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----