Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.mft
File:                     NKh-9PEuNt_cafTUydRQ7us_9tU.mft (raw, json)
Hash identifier:          08q7qvzgPpCvvig5U3+ItBKRjP6vhMW+bMBbsQiRsRQ=
Subject key identifier:   9D:B2:04:2D:95:45:56:49:5F:D7:07:27:8A:19:0A:9D:2A:18:62:4A
Authority key identifier: 34:A8:7E:F4:F1:2E:36:DF:DC:69:F4:D4:C9:D4:50:EE:EB:3F:F6:D5
Certificate issuer:       /CN=34a87ef4f12e36dfdc69f4d4c9d450eeeb3ff6d5
Certificate serial:       01901DED40D4756012F8F07842DD19937D83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NKh-9PEuNt_cafTUydRQ7us_9tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.mft
Manifest number:          08BD
Signing time:             Sat 15 Jun 2024 22:03:26 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:26 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:26 +0000
Files and hashes:         1: NKh-9PEuNt_cafTUydRQ7us_9tU.crl (hash: Dsb48KWf70+Ctu5urZEArCIu1E1UkOiqe8yZLHh4dlc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NKh-9PEuNt_cafTUydRQ7us_9tU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:40:d4:75:60:12:f8:f0:78:42:dd:19:93:7d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34a87ef4f12e36dfdc69f4d4c9d450eeeb3ff6d5
        Validity
            Not Before: Jun 15 22:03:26 2024 GMT
            Not After : Jun 16 22:03:26 2024 GMT
        Subject: CN=9db2042d954556495fd707278a190a9d2a18624a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:26:87:08:37:8c:9b:8d:e5:ae:66:c2:ad:e3:
                    76:b8:7d:8e:ab:05:e9:6d:20:e2:d8:c7:f1:d6:d2:
                    c3:b1:43:23:3b:4e:d1:91:e7:fe:61:5c:4e:6b:0f:
                    f7:e8:af:44:8e:de:55:8a:4f:d4:06:1e:83:47:fa:
                    06:e1:6f:61:e7:fe:d8:a4:cc:53:50:f1:54:72:82:
                    9c:05:06:b0:34:d9:94:b0:34:26:de:6f:07:16:f2:
                    2b:2a:4f:2e:a4:7f:fc:3f:7d:f5:35:00:9f:7b:0c:
                    5a:d8:7b:fb:4f:47:d3:3f:4b:b4:f9:e9:ab:ae:3f:
                    85:51:5a:4c:fc:05:1b:f3:a5:37:10:9e:cd:46:28:
                    ab:4a:be:5a:87:f6:9a:27:39:d1:d1:bd:36:41:74:
                    58:04:d8:f4:b2:1b:fa:80:70:82:33:73:7a:75:0c:
                    70:51:72:1b:cc:ea:ac:1e:2b:72:2e:a1:fa:26:04:
                    94:bb:75:96:90:b7:a0:a6:07:a5:39:fe:03:e2:52:
                    f9:7f:a0:d5:89:5b:aa:83:62:53:77:bd:20:d8:b7:
                    75:7e:33:b6:d9:36:81:ec:46:0d:3e:03:d4:98:88:
                    4e:75:ea:53:c7:a4:24:0d:14:94:66:8d:3e:23:40:
                    e4:69:44:44:47:4b:fc:4d:f7:3e:2b:f1:ae:a1:10:
                    12:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B2:04:2D:95:45:56:49:5F:D7:07:27:8A:19:0A:9D:2A:18:62:4A
            X509v3 Authority Key Identifier:
                keyid:34:A8:7E:F4:F1:2E:36:DF:DC:69:F4:D4:C9:D4:50:EE:EB:3F:F6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKh-9PEuNt_cafTUydRQ7us_9tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:b8:52:13:89:59:13:c2:05:c7:16:a0:e6:bb:21:49:d2:26:
         48:ff:48:49:35:9f:55:d1:af:67:57:5b:e1:73:ba:64:0a:18:
         f5:34:62:ed:f1:9c:5b:af:07:4c:b6:37:69:6e:71:ab:8b:a8:
         88:0a:89:5a:df:cb:c4:82:0f:2c:d1:58:8a:5a:ec:b1:ae:49:
         0b:f4:3c:47:44:21:a2:69:28:cd:5b:b8:61:f5:73:3f:72:b6:
         68:57:15:77:eb:76:74:6e:05:7e:ea:ac:ba:d8:b9:1b:5a:e1:
         b6:f0:28:57:88:f7:4f:b4:df:f2:7a:f7:0e:46:39:11:ed:e5:
         6d:d8:26:9f:c3:ee:4e:3f:7c:71:64:41:12:5c:e3:42:83:40:
         10:85:39:7e:81:90:94:b2:0b:fa:79:80:5b:9b:5c:5d:32:cc:
         09:fc:af:e2:9b:85:9f:7a:cd:08:05:17:d2:25:e2:54:d6:38:
         fe:21:16:16:7b:7e:ce:fc:99:8f:0e:81:d0:2b:41:4e:5d:72:
         27:cb:3e:7e:e8:95:8d:72:af:1c:3a:b8:37:19:0b:41:e5:32:
         b1:ec:e6:23:fd:2f:90:34:38:01:35:1e:64:eb:81:20:9f:ce:
         3b:9b:aa:08:5f:e0:7b:45:44:f4:c6:93:ca:2c:86:02:1a:76:
         e6:8f:cb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----