Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.mft
File:                     IYCTB4hvuv261Th2Eu_-dxOHowA.mft (raw, json)
Hash identifier:          rdG74j7cVQd0hLx39rLkG+GCyIYCf3b9Lq4fugJKLDk=
Subject key identifier:   E3:01:A9:17:F1:42:C4:C4:21:A2:92:E2:0F:81:0F:95:7B:EE:DD:AA
Authority key identifier: 21:80:93:07:88:6F:BA:FD:BA:D5:38:76:12:EF:FE:77:13:87:A3:00
Certificate issuer:       /CN=21809307886fbafdbad5387612effe771387a300
Certificate serial:       01901DEBCD979E17E6BDEE27163372B5846A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYCTB4hvuv261Th2Eu_-dxOHowA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.mft
Manifest number:          030A
Signing time:             Sat 15 Jun 2024 22:01:51 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:51 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:51 +0000
Files and hashes:         1: IYCTB4hvuv261Th2Eu_-dxOHowA.crl (hash: 7SirRGOrq6ZJrLFaj3xZa80zgcuX9PgXW5qegr9wiDQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYCTB4hvuv261Th2Eu_-dxOHowA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:cd:97:9e:17:e6:bd:ee:27:16:33:72:b5:84:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21809307886fbafdbad5387612effe771387a300
        Validity
            Not Before: Jun 15 22:01:51 2024 GMT
            Not After : Jun 16 22:01:51 2024 GMT
        Subject: CN=e301a917f142c4c421a292e20f810f957beeddaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:22:8a:39:bf:1e:42:44:9c:e5:0e:f1:91:3c:
                    8f:7b:d3:f3:7d:3e:93:41:1c:46:3b:eb:d3:b0:11:
                    8b:e3:d3:a5:21:d9:af:07:fa:f9:25:22:99:6d:79:
                    98:69:3a:a5:a8:f5:e3:cf:29:89:66:01:ef:4d:eb:
                    a3:e1:e2:6e:51:19:84:58:f3:9c:36:b0:68:4c:76:
                    f1:2d:25:81:1d:2f:26:6c:a3:b9:b3:15:07:b7:6e:
                    2e:10:27:d7:85:9e:2f:71:0f:20:a0:c4:7f:4d:d4:
                    ff:c2:21:cb:64:0f:4b:43:88:f4:ee:24:ea:1a:84:
                    91:3c:2d:96:bf:23:62:b7:d6:67:13:dd:6a:0c:98:
                    7d:c4:b0:a6:b0:6e:75:0b:5a:c4:d4:34:74:62:b3:
                    f8:aa:eb:b9:f2:6e:2a:7d:e7:98:37:3f:f0:eb:ed:
                    49:94:7e:95:4d:23:d7:72:4f:50:be:1e:6a:21:72:
                    43:6c:fb:0d:4d:f5:80:6b:15:4c:fa:9e:08:c8:82:
                    b9:b2:f2:e6:30:05:f4:b0:f5:37:c6:85:4f:c0:25:
                    5d:9b:98:6c:08:91:64:e6:85:eb:0b:ee:f1:08:1e:
                    2e:c5:48:85:ef:c6:46:05:86:e7:2c:46:86:a2:3b:
                    c4:9c:ed:79:3c:b4:3a:42:de:ff:b6:e5:74:8d:a0:
                    32:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:01:A9:17:F1:42:C4:C4:21:A2:92:E2:0F:81:0F:95:7B:EE:DD:AA
            X509v3 Authority Key Identifier:
                keyid:21:80:93:07:88:6F:BA:FD:BA:D5:38:76:12:EF:FE:77:13:87:A3:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYCTB4hvuv261Th2Eu_-dxOHowA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:56:b4:dc:05:07:91:b4:23:5d:49:68:dc:86:08:f6:59:1b:
         f5:fb:c2:9c:8b:9a:49:09:57:2f:b7:10:00:94:7e:a4:c4:0d:
         e7:e2:eb:b9:3e:99:22:ba:fb:f1:84:2a:ce:4d:85:1e:9d:ad:
         62:8b:42:52:8f:60:36:b0:bc:11:23:8e:e9:d5:a0:c8:5d:14:
         c9:3e:fb:3b:63:62:a9:3c:33:cc:f3:e5:74:71:de:15:03:e4:
         7b:2c:1d:3a:d4:6c:38:5c:72:be:30:a3:64:ef:be:c6:9c:d0:
         d1:9b:4e:df:df:1e:d0:86:c2:46:8b:f4:a8:2b:62:53:cb:53:
         b5:62:61:9a:d2:be:f4:ef:32:55:c9:35:56:4c:03:8c:97:ed:
         6d:2d:ad:8a:c3:1f:9b:7c:18:fb:21:ce:af:94:97:f4:f8:c8:
         88:50:86:4e:76:49:4a:db:0f:cf:f6:0a:b7:03:70:da:e0:bb:
         e0:a4:fd:bf:1e:4f:91:b3:c0:ba:61:6a:66:0d:6f:75:d1:d6:
         ca:84:3e:4e:2f:e0:3b:85:c8:8f:2c:64:d3:b0:f9:7e:c5:5c:
         e2:72:ef:1e:51:88:4b:71:eb:ac:7a:66:31:9c:f5:e5:55:7c:
         54:f2:a2:f6:cf:f8:e2:b8:90:ae:46:94:3f:29:14:fd:57:46:
         de:da:f9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----