Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
File:                     XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft (raw, json)
Hash identifier:          t8Uw4r+8z4o5fn9zEmkre8PBUYtP5mQC848qPAxFzdE=
Subject key identifier:   2F:3C:F0:EC:91:59:E1:39:AD:C9:99:60:E7:FD:CF:0C:3C:87:E3:33
Authority key identifier: 5D:B7:92:75:65:9D:D9:61:C7:42:BF:21:D8:DC:A1:84:A4:43:0D:85
Certificate issuer:       /CN=5db79275659dd961c742bf21d8dca184a4430d85
Certificate serial:       01903519651C47A656AC037DE7B41AA9D260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
Manifest number:          084E
Signing time:             Thu 20 Jun 2024 10:02:54 +0000
Manifest this update:     Thu 20 Jun 2024 10:02:54 +0000
Manifest next update:     Fri 21 Jun 2024 10:02:54 +0000
Files and hashes:         1: XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl (hash: VQpdKhgHUPGR+EoYR18MQ1EkvQ33/NH3GAN2RA9yXGo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 10:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:35:19:65:1c:47:a6:56:ac:03:7d:e7:b4:1a:a9:d2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5db79275659dd961c742bf21d8dca184a4430d85
        Validity
            Not Before: Jun 20 10:02:54 2024 GMT
            Not After : Jun 21 10:02:54 2024 GMT
        Subject: CN=2f3cf0ec9159e139adc99960e7fdcf0c3c87e333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4c:63:61:ff:69:e4:71:01:07:18:ac:2e:94:
                    24:09:5a:15:bf:32:c1:6c:86:59:f4:17:62:3c:c6:
                    bb:23:db:bd:2c:89:d4:60:86:81:dd:52:e9:fd:69:
                    db:6f:b9:be:96:a0:15:83:f2:99:fc:87:eb:c9:77:
                    17:5f:d3:51:2a:7f:57:0e:27:6f:82:bf:de:df:da:
                    93:42:4f:ed:b1:6d:3d:1a:0a:d5:64:6b:70:19:da:
                    18:db:1f:88:2e:34:bf:80:f5:d5:ba:88:34:f4:8a:
                    4b:87:14:62:25:9f:04:cd:f9:3d:a3:e1:ba:e1:fa:
                    e4:63:b2:4a:93:22:24:a0:8a:4c:6e:b9:94:fe:c4:
                    23:01:f8:71:23:ef:b2:29:68:22:d5:ac:4c:6e:af:
                    75:97:6f:66:04:94:1a:32:9c:66:20:17:ee:fc:4a:
                    d5:bf:7b:ec:1d:cb:61:09:a1:f9:ed:15:ee:57:f7:
                    be:d1:bb:f1:ef:3f:de:73:4c:f5:01:16:9c:59:ec:
                    f8:90:68:cd:c8:23:df:60:fa:4d:f2:ad:ef:26:8e:
                    8f:da:6d:f1:ea:b9:e8:74:3c:84:b7:39:8c:8e:03:
                    d0:59:72:9f:cc:17:b2:c3:c7:66:e5:e6:0b:41:61:
                    c4:ed:29:60:8b:4f:62:dd:73:78:d0:e9:76:e0:4f:
                    8f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:3C:F0:EC:91:59:E1:39:AD:C9:99:60:E7:FD:CF:0C:3C:87:E3:33
            X509v3 Authority Key Identifier:
                keyid:5D:B7:92:75:65:9D:D9:61:C7:42:BF:21:D8:DC:A1:84:A4:43:0D:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:30:d0:1a:97:fc:17:13:33:bf:68:93:96:a5:93:aa:c3:00:
         70:e4:f7:1a:ab:f2:09:3e:bf:78:d5:1c:6a:a4:dd:cf:53:08:
         4e:1b:ca:03:91:6d:7c:ae:42:2e:08:9d:2d:94:2a:61:be:b3:
         ad:d6:e2:11:e5:f4:ba:61:07:44:1e:f9:5a:7f:3c:74:25:62:
         e7:d5:e3:96:36:0d:c4:51:11:c7:57:22:97:e5:8e:e3:dd:8c:
         52:32:ca:23:dd:02:e1:fc:24:c7:93:33:52:21:6c:27:1f:73:
         f4:f1:06:12:af:14:53:a6:dc:14:a2:f3:f5:76:47:3f:5c:39:
         ed:3f:ec:d5:27:ed:92:30:4a:5a:c3:a4:92:0b:5c:35:14:36:
         7c:42:b4:69:39:62:07:83:cb:65:87:0e:01:a9:6f:63:e2:84:
         d7:2f:0b:93:dc:9e:38:49:2a:40:0e:2f:fc:a8:21:9f:df:f8:
         32:a6:7e:1d:68:b3:18:11:ca:df:c2:68:35:fc:21:1b:59:2c:
         db:5e:28:c4:7e:4a:d3:d0:91:e1:c1:85:8c:e0:fd:20:d2:ff:
         25:a9:c1:fd:71:03:2d:0b:97:66:cf:c0:67:e3:57:3b:96:78:
         df:8d:14:03:50:d0:06:13:a5:5e:78:99:f4:fe:09:54:56:a5:
         c3:f6:8a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----