Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
File:                     U3YJ5EhhINufF7bT10v4VfJxV18.mft (raw, json)
Hash identifier:          jK6JU5/ZWXoLWMHi13HwzeEz+6M8g1RWDknZTzXt4NA=
Subject key identifier:   F6:74:3B:FC:4B:CD:6D:3A:5E:10:39:69:51:C7:B2:73:F4:0F:3A:72
Authority key identifier: 53:76:09:E4:48:61:20:DB:9F:17:B6:D3:D7:4B:F8:55:F2:71:57:5F
Certificate issuer:       /CN=537609e4486120db9f17b6d3d74bf855f271575f
Certificate serial:       01901BFE9EADBEE9A98D8B24C1B36BC62727
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
Manifest number:          0843
Signing time:             Sat 15 Jun 2024 13:03:09 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:09 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:09 +0000
Files and hashes:         1: U3YJ5EhhINufF7bT10v4VfJxV18.crl (hash: SEkJBtzuEuIiPONOyvADHRX6PWB24kgZu+NugWOHbII=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:9e:ad:be:e9:a9:8d:8b:24:c1:b3:6b:c6:27:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=537609e4486120db9f17b6d3d74bf855f271575f
        Validity
            Not Before: Jun 15 13:03:09 2024 GMT
            Not After : Jun 16 13:03:09 2024 GMT
        Subject: CN=f6743bfc4bcd6d3a5e10396951c7b273f40f3a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:af:b7:60:25:15:9a:7a:26:46:4a:94:16:0a:
                    e5:17:56:34:a5:53:86:b2:c8:d1:35:5e:3a:b9:e7:
                    bb:19:ce:97:43:d8:0c:71:83:7c:38:35:c6:74:5a:
                    ee:bf:58:20:9d:48:52:de:54:d3:88:86:7e:19:a7:
                    0b:9b:02:f4:70:2a:8c:2d:47:eb:25:b6:1c:2c:0b:
                    f3:ae:9a:f2:31:8b:8a:e4:3c:48:cc:e3:c8:5d:46:
                    fd:a3:88:f7:9e:1c:76:5a:4f:3d:df:f7:df:8e:0a:
                    c1:63:fa:0a:d4:e7:9e:36:6c:65:5a:f8:4a:4f:26:
                    57:b0:58:e9:b3:5a:be:90:57:c8:12:0f:8a:49:98:
                    9b:d0:5f:e5:50:03:a0:3b:fd:ba:83:81:71:dc:07:
                    f3:44:6e:0b:3e:c0:22:d2:11:ed:46:5c:47:14:5b:
                    fb:bb:c8:cb:b6:73:19:db:21:74:19:09:c6:95:9b:
                    91:0b:25:21:12:a9:f0:68:a0:90:c0:fa:9b:3e:b8:
                    ab:0e:2a:06:c0:74:90:c6:89:22:f8:49:31:2b:bd:
                    9a:c0:07:ef:25:61:a3:9b:87:ef:b5:c3:74:3a:2e:
                    53:1e:6d:85:5f:7f:b2:2a:ad:35:7d:0d:e6:a6:95:
                    7e:08:a1:2d:b0:bd:ba:94:e9:29:f2:90:70:4f:19:
                    51:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:74:3B:FC:4B:CD:6D:3A:5E:10:39:69:51:C7:B2:73:F4:0F:3A:72
            X509v3 Authority Key Identifier:
                keyid:53:76:09:E4:48:61:20:DB:9F:17:B6:D3:D7:4B:F8:55:F2:71:57:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:5b:49:7f:94:1f:2e:7b:dd:54:67:ad:ff:10:60:df:68:f8:
         61:94:01:75:44:28:0e:89:1b:8e:8c:eb:c8:9e:14:cc:7a:92:
         d1:d6:0b:61:d6:12:5a:8a:04:67:86:97:29:95:45:ed:f0:ae:
         1e:46:29:12:f4:0c:66:e3:02:44:2b:4a:c9:55:2a:49:92:c3:
         33:cd:61:4f:63:4e:ce:b7:b9:23:ec:4b:3f:38:1e:83:29:7a:
         be:22:a0:97:a7:b5:ef:51:b1:d6:9a:46:5d:57:d6:b1:50:ff:
         df:71:0d:fa:0f:ae:a2:dd:d2:06:78:b1:9e:fd:d4:ae:45:9e:
         2c:3b:03:44:a3:01:26:7a:f1:7d:74:8b:9a:ce:da:4d:03:18:
         02:a6:60:d9:49:4d:f1:46:56:62:f4:31:5a:2d:85:b9:3d:92:
         4a:19:7b:27:86:68:6c:7e:d8:b7:be:53:f3:05:ee:f9:4b:4e:
         cc:17:7d:68:bf:09:b4:da:ea:29:ea:c6:ca:8b:a0:a1:46:de:
         69:4e:8d:a1:c8:7b:ff:71:63:de:5b:f3:1d:a6:9d:88:9c:ac:
         a8:e6:82:e4:0c:99:a6:5d:9b:22:2f:db:34:ce:6f:f0:ae:fc:
         f2:a9:df:55:f4:81:65:dc:00:d0:66:c8:2a:8b:51:20:56:68:
         0d:6d:cf:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----