Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
File:                     G8qoP8mkEL2z4P0thIcgE0dxvs8.mft (raw, json)
Hash identifier:          2HGMcQxR0K0VCSdtFKDTMUfQArtbxRdR1nqsdkgdn+A=
Subject key identifier:   E0:E1:11:4E:CA:74:2A:99:D3:D4:7E:F4:F0:6C:FE:25:0E:FC:B6:6E
Authority key identifier: 1B:CA:A8:3F:C9:A4:10:BD:B3:E0:FD:2D:84:87:20:13:47:71:BE:CF
Certificate issuer:       /CN=1bcaa83fc9a410bdb3e0fd2d848720134771becf
Certificate serial:       01901CD8A0B9FC40FA417F1C2E1CC78EBF5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
Manifest number:          1153
Signing time:             Sat 15 Jun 2024 17:01:17 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:17 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:17 +0000
Files and hashes:         1: G8qoP8mkEL2z4P0thIcgE0dxvs8.crl (hash: xBbZwnUJRV0EZfM4gL5V9bs7hbSiL5DbG/l0MlBUzYI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:a0:b9:fc:40:fa:41:7f:1c:2e:1c:c7:8e:bf:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bcaa83fc9a410bdb3e0fd2d848720134771becf
        Validity
            Not Before: Jun 15 17:01:17 2024 GMT
            Not After : Jun 16 17:01:17 2024 GMT
        Subject: CN=e0e1114eca742a99d3d47ef4f06cfe250efcb66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:36:49:49:cd:cc:7b:25:b0:25:43:6e:b8:99:
                    6c:c7:63:90:16:f7:05:80:ac:c3:a7:c8:7a:0b:40:
                    69:cc:b0:de:93:46:ff:a6:98:5e:55:98:ac:1b:cb:
                    3a:94:f9:df:0e:15:4d:6e:59:0b:bd:e2:25:2d:35:
                    c1:bf:75:02:0a:a7:fb:f2:cd:eb:de:15:1e:f5:83:
                    8d:69:35:6d:57:ed:8f:b3:f0:88:2b:93:77:9e:26:
                    05:1c:6e:3d:ed:64:fc:7c:a4:a0:35:25:ae:14:3f:
                    14:19:46:3a:f5:23:42:1e:4d:7f:c0:13:8d:39:2f:
                    aa:20:bf:21:ef:86:67:f0:2c:ac:03:28:8f:e4:98:
                    c0:43:21:49:d6:21:ff:a9:71:37:f3:fe:ef:2d:70:
                    2d:be:c4:76:64:08:25:78:2b:ca:3d:18:14:51:04:
                    4a:3f:04:df:41:23:e6:c7:1d:d4:2b:f1:55:fd:60:
                    85:e2:19:cb:39:5e:4c:62:f0:25:18:61:a1:76:9e:
                    04:1a:bc:45:e0:a5:1a:d4:2d:39:7b:67:84:c2:84:
                    2f:76:f7:a3:d5:ec:59:3b:e7:15:1a:fd:fc:fc:4c:
                    13:3d:46:af:dd:4d:5e:b7:be:12:5d:90:14:a2:4e:
                    ed:f4:02:b7:95:f8:b0:e6:1b:e3:23:67:11:1b:bb:
                    0b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E1:11:4E:CA:74:2A:99:D3:D4:7E:F4:F0:6C:FE:25:0E:FC:B6:6E
            X509v3 Authority Key Identifier:
                keyid:1B:CA:A8:3F:C9:A4:10:BD:B3:E0:FD:2D:84:87:20:13:47:71:BE:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:4d:f1:2e:4a:5d:32:5c:23:1c:63:d7:98:ec:9e:16:62:1b:
         a7:99:ea:54:55:95:65:c7:27:4f:a7:d8:af:f0:a1:d0:05:cf:
         64:bc:71:aa:84:1d:d8:83:35:50:34:ef:cb:54:35:ec:2a:ea:
         51:03:10:40:84:e9:b9:61:2b:f2:33:41:2c:33:c7:4e:2e:ec:
         9a:85:ce:d0:58:9d:f9:e8:23:74:55:b5:ba:2f:ca:52:9f:de:
         50:ed:7f:ca:ee:8a:48:6d:2a:29:05:d6:d8:9e:76:90:4b:69:
         db:de:ab:18:d9:41:94:13:41:27:1c:76:12:6a:f1:02:c2:13:
         c3:e8:45:1b:75:77:ea:1e:54:e3:ac:90:74:d2:36:f5:96:ec:
         eb:cb:e5:b1:d5:3a:b4:36:ec:b1:5a:d8:b5:84:4b:34:9b:17:
         c3:74:b4:80:37:66:bc:05:c5:e2:bf:0a:d4:a9:b6:c7:4d:af:
         4f:63:3e:72:ad:de:48:ec:6c:bd:f4:43:8e:68:f3:3e:bf:1a:
         62:95:f0:a8:27:7c:be:97:ef:a5:14:44:41:ec:7b:d0:67:4f:
         db:06:36:2d:bf:2b:c1:cf:55:3a:35:fa:d0:1f:35:eb:5b:cb:
         75:92:11:3f:55:7a:71:ca:0a:ad:42:53:c6:06:4c:79:72:ba:
         c9:9e:27:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----