Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
File:                     T4zW4dX8wEW55lmcDK6hfUdoX5U.mft (raw, json)
Hash identifier:          vEwtZLq3OqnDuWUOdumw4l9/616+7mh4ZPtTk4Xpo20=
Subject key identifier:   B1:E2:05:14:F0:E2:64:2D:8D:40:4D:B2:32:52:16:25:76:8F:B9:BF
Authority key identifier: 4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
Certificate issuer:       /CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Certificate serial:       01901DEB59E0A73B3EBACD40EBE4B457C8D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
Manifest number:          0D07
Signing time:             Sat 15 Jun 2024 22:01:21 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:21 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:21 +0000
Files and hashes:         1: T4zW4dX8wEW55lmcDK6hfUdoX5U.crl (hash: tJbgI7xY4+d+0eIeYE7C/oyjVeCT9F1Dwp4GpsZ5jFc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:59:e0:a7:3b:3e:ba:cd:40:eb:e4:b4:57:c8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
        Validity
            Not Before: Jun 15 22:01:21 2024 GMT
            Not After : Jun 16 22:01:21 2024 GMT
        Subject: CN=b1e20514f0e2642d8d404db232521625768fb9bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4c:3b:af:5d:1b:dc:39:1d:43:ca:d9:a8:74:
                    f6:e1:93:3e:5b:d2:33:45:48:81:bb:11:1e:03:22:
                    30:9f:e0:ec:0a:d1:61:3c:fa:ba:23:31:77:7b:3f:
                    f1:ba:dd:29:03:2d:77:30:0f:e3:f0:01:e3:16:46:
                    2d:21:1e:75:98:b4:75:67:dd:f2:b6:e9:a0:2e:55:
                    9d:73:0d:2d:21:84:17:47:83:cc:52:a5:b8:ea:91:
                    20:b5:e4:ee:33:5e:18:e4:09:a1:ee:6d:f5:a8:85:
                    e8:38:6e:05:c3:a9:44:a5:64:d1:f7:6f:b3:32:01:
                    5d:b5:3e:bd:4d:6a:45:0f:87:c1:e2:45:e4:60:37:
                    ba:33:cb:ab:36:b3:0f:23:fd:6d:46:98:b1:70:77:
                    9f:3c:77:77:3a:20:55:89:3c:09:a4:05:58:1c:c2:
                    3f:4f:5e:76:c6:ee:17:d9:d8:9f:dc:6e:fe:eb:be:
                    42:43:c2:c3:9d:a5:b9:ca:16:18:dc:d2:90:c1:35:
                    95:64:0a:d1:90:9b:97:dc:f1:98:65:e5:74:66:42:
                    51:28:b2:1d:81:0c:34:2e:d7:2b:4c:c6:68:b4:5f:
                    92:5f:ee:88:51:c0:89:3a:bc:01:30:ba:2d:20:a7:
                    ac:e2:62:2e:a6:10:8f:c8:69:ff:86:7d:c7:cb:d5:
                    d7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E2:05:14:F0:E2:64:2D:8D:40:4D:B2:32:52:16:25:76:8F:B9:BF
            X509v3 Authority Key Identifier:
                keyid:4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:e3:27:9d:18:9d:3f:2d:b8:0a:9e:63:d0:02:87:8c:5f:42:
         30:60:a0:20:a4:63:77:95:eb:26:61:ec:e8:7b:45:26:c5:7f:
         f7:7b:f1:68:0d:a3:b2:b2:cd:73:ae:56:02:e7:24:d5:1f:68:
         af:c2:d8:eb:d7:d3:ef:c2:53:8d:ff:ee:6f:b1:3c:64:0a:69:
         66:f1:a7:73:58:72:ca:f8:ce:b9:97:4d:2c:12:0f:ba:8f:38:
         0e:c8:8f:0f:56:c4:9d:29:39:b8:8f:90:c7:04:4a:51:86:10:
         a0:96:6b:40:94:29:7b:49:66:6b:03:bf:e2:a8:e8:51:e6:fd:
         81:9c:c0:8e:ad:62:01:0c:77:71:41:aa:dc:a0:8e:e4:e1:ab:
         9d:c3:38:6d:a5:c6:bb:9c:f7:d0:5d:4d:a2:ab:fc:6f:6b:47:
         24:f3:fa:66:5b:9d:83:76:88:70:56:7b:5a:83:2b:95:fb:2b:
         42:b9:3a:15:bd:94:9d:21:5a:71:af:57:30:2e:b9:f4:c8:fd:
         81:9f:47:e6:94:ef:a9:54:fb:6c:31:99:f9:09:61:6d:3d:29:
         43:ce:e2:f4:59:de:09:fd:f8:58:e1:73:49:ce:fe:e9:a7:af:
         82:e0:72:02:c3:53:f3:1d:4c:62:a4:ff:04:26:b7:62:b6:55:
         b2:86:6b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----