Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft
File:                     HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft (raw, json)
Hash identifier:          AiVEvQA/xTeM27n1kQ01Q6MAisE0mOFinVZPsEXWxlQ=
Subject key identifier:   8A:36:79:12:2B:C7:FE:37:D2:19:2B:71:E7:CE:BF:B9:03:1D:CB:2B
Authority key identifier: 1D:C5:D3:BC:C9:1E:4A:31:A2:08:36:1A:F0:A9:3A:62:F6:2D:82:70
Certificate issuer:       /CN=1dc5d3bcc91e4a31a208361af0a93a62f62d8270
Certificate serial:       01901D45E3802511E73AEFE07FCAA7502861
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 19:00:37 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:37 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:37 +0000
Files and hashes:         1: HcXTvMkeSjGiCDYa8Kk6YvYtgnA.crl (hash: lO+8HjAk5jGUAFcD6OCMONcSyFjbdz0BTwf7+J7He5I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:e3:80:25:11:e7:3a:ef:e0:7f:ca:a7:50:28:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dc5d3bcc91e4a31a208361af0a93a62f62d8270
        Validity
            Not Before: Jun 15 19:00:37 2024 GMT
            Not After : Jun 16 19:00:37 2024 GMT
        Subject: CN=8a3679122bc7fe37d2192b71e7cebfb9031dcb2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:00:18:cc:5c:65:5a:53:a3:e3:16:08:85:2b:
                    5e:87:eb:50:c0:de:0b:05:da:42:ed:57:f1:21:cc:
                    d3:f5:47:b2:fc:84:69:2b:57:ed:cc:8a:34:a7:64:
                    5d:13:7b:ac:cd:ed:27:88:45:96:a9:fd:c5:ee:11:
                    fc:80:db:4d:3b:6a:3c:42:38:5c:4f:7e:c4:23:c1:
                    b6:e3:e3:fe:d9:33:39:02:7c:8e:31:5c:25:f3:23:
                    75:e8:9d:83:5e:9a:d1:c8:41:a8:54:ce:65:bc:ed:
                    26:fd:c4:a7:d1:04:aa:88:2e:e9:66:95:8a:0c:48:
                    7c:db:67:ea:c0:b8:c7:b0:ac:72:6b:63:95:3b:54:
                    da:17:8f:92:0d:4a:13:b6:39:2c:65:d4:64:e3:8e:
                    8a:00:d4:5c:80:4c:4a:28:64:93:9d:ac:03:8e:53:
                    32:1e:ff:bb:e7:66:80:25:08:02:90:d4:f5:07:26:
                    0b:23:df:be:45:37:31:89:69:11:66:c1:72:0c:dc:
                    ad:f2:0e:9c:5c:8c:6e:e6:da:42:64:5a:e4:88:36:
                    01:cd:44:07:11:2c:b1:69:75:c2:4b:72:bf:d7:f2:
                    92:6d:f5:10:b6:c5:41:36:e3:2d:de:32:c0:73:b8:
                    f9:34:1a:fb:e3:de:b2:57:2e:0e:02:dd:7d:85:8e:
                    dd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:36:79:12:2B:C7:FE:37:D2:19:2B:71:E7:CE:BF:B9:03:1D:CB:2B
            X509v3 Authority Key Identifier:
                keyid:1D:C5:D3:BC:C9:1E:4A:31:A2:08:36:1A:F0:A9:3A:62:F6:2D:82:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:61:eb:66:22:b9:f1:40:bb:35:6d:b9:99:3a:43:e4:e1:96:
         25:88:38:8b:75:de:76:79:0d:87:96:98:95:47:e6:52:5a:d4:
         ad:d0:de:52:90:6e:ba:bd:0d:33:c1:a6:39:a3:78:b9:5d:d6:
         dc:ba:61:f2:df:bb:8c:e6:77:90:ab:60:29:94:e0:0f:5e:96:
         28:24:e4:46:2a:e7:b5:30:45:44:72:92:6c:01:a0:3f:85:81:
         82:5a:43:b8:c6:d6:0e:5e:77:61:5e:b6:7a:a9:d3:ab:ce:11:
         a2:b0:76:d3:c7:ab:06:2a:b4:4e:23:da:e9:ea:83:7b:82:16:
         1e:d7:49:6e:9a:99:e2:e2:9b:c1:3e:5f:b8:95:56:68:ab:ba:
         9d:26:56:5c:66:7a:7c:68:3a:9d:0d:e8:ca:5e:76:d3:6c:c1:
         a7:87:30:1e:c7:03:88:fe:97:c7:77:b9:06:97:8f:e8:66:dd:
         86:a6:af:8b:3f:8b:76:0f:33:eb:b6:97:c0:9a:c1:f7:2d:49:
         e3:4c:0a:a9:6f:ed:52:21:a2:fc:53:99:40:49:73:20:45:3c:
         8d:69:51:2c:09:e5:fc:b2:db:ad:96:2a:5d:c6:4b:c8:46:dd:
         74:97:ba:33:a1:77:b6:49:1d:c7:ba:37:9a:02:46:9c:46:74:
         41:18:b3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----