Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
File:                     bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft (raw, json)
Hash identifier:          wqLbflh63qqRN8FxrhtpDbg7aI5r1oAszmG/fmyk+Ro=
Subject key identifier:   81:96:BC:7A:EA:9B:53:23:8E:80:B6:59:17:15:AA:92:26:4F:51:DB
Authority key identifier: 6D:15:78:A2:E6:23:73:6A:06:A5:E1:9D:91:BD:09:62:0D:06:AD:94
Certificate issuer:       /CN=6d1578a2e623736a06a5e19d91bd09620d06ad94
Certificate serial:       01901DEAE35D4198863BE0CBBDF18F1D6EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
Manifest number:          0462
Signing time:             Sat 15 Jun 2024 22:00:51 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:51 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:51 +0000
Files and hashes:         1: bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl (hash: Me3fto/HHyGRj06RFgSeOE5znfdmPl8R0katPIhV+jg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:e3:5d:41:98:86:3b:e0:cb:bd:f1:8f:1d:6e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d1578a2e623736a06a5e19d91bd09620d06ad94
        Validity
            Not Before: Jun 15 22:00:51 2024 GMT
            Not After : Jun 16 22:00:51 2024 GMT
        Subject: CN=8196bc7aea9b53238e80b6591715aa92264f51db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:21:42:31:9d:0b:df:cf:8e:bb:b2:6a:b9:97:
                    af:48:4d:6a:26:2b:75:0f:3a:bd:10:96:56:ba:3a:
                    5d:03:6f:aa:fd:14:1e:ab:2f:1f:42:73:37:ed:89:
                    db:f0:d4:04:30:a9:f1:bf:ed:b4:24:7b:3f:ed:71:
                    99:59:1d:93:2b:16:98:df:9a:62:ef:a5:d2:d5:5d:
                    8f:5e:7c:2c:97:c6:0e:67:26:83:4e:0c:23:8b:df:
                    f4:15:24:d8:05:fa:b3:26:76:b0:93:d2:be:94:30:
                    81:ee:95:2c:4b:87:5e:3f:fa:f5:8a:e1:99:fc:38:
                    ae:47:76:6d:bf:47:d5:66:37:f7:58:c2:38:bd:69:
                    7a:7d:16:ad:2b:3c:73:e7:f0:b4:ca:6a:a8:26:6a:
                    df:c1:7e:41:28:fc:28:e7:ff:36:df:ff:98:38:5c:
                    75:72:99:f0:9b:8e:3a:54:ea:cd:a7:f8:b5:95:f7:
                    ab:33:d0:52:8f:58:3e:0a:5a:2e:1a:f8:e6:f2:78:
                    50:e9:b7:28:6c:fb:db:99:09:52:ff:1f:5c:40:68:
                    ae:15:f4:59:e9:e5:97:27:21:4e:aa:66:ff:e2:2a:
                    e4:ae:b8:cf:c1:bd:1e:a0:aa:28:34:74:d9:63:f6:
                    cd:ac:1c:9c:27:f5:0b:6f:7e:fa:d6:a3:2b:1f:88:
                    f3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:96:BC:7A:EA:9B:53:23:8E:80:B6:59:17:15:AA:92:26:4F:51:DB
            X509v3 Authority Key Identifier:
                keyid:6D:15:78:A2:E6:23:73:6A:06:A5:E1:9D:91:BD:09:62:0D:06:AD:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:32:1d:c6:3c:5c:32:65:c0:52:af:66:78:f6:f6:be:11:de:
         f1:a8:85:49:d5:cf:28:e6:26:78:f9:fb:38:e2:3c:8c:f3:d4:
         26:84:9f:e9:89:e8:e6:a7:f3:2d:29:f6:cf:d3:6c:17:43:de:
         6c:92:26:44:35:44:82:8e:7a:a7:ae:16:a6:81:a5:c3:ca:31:
         b2:a4:8a:44:71:b4:c3:1c:f3:88:00:8f:e8:ce:0e:e4:48:43:
         25:3f:69:25:48:bc:d3:09:6c:7a:c5:41:9c:7c:f8:2e:f6:dd:
         64:ea:94:0e:a1:c6:22:b2:8c:64:e0:56:5c:30:f4:38:56:61:
         d9:74:3d:7d:e0:f3:2c:70:da:17:4a:31:8e:cc:19:78:46:2f:
         cb:9d:67:31:57:bb:ed:c9:fd:a6:a5:e1:17:8c:d2:bd:73:f4:
         eb:0b:bb:c4:74:00:4d:6d:24:6a:61:20:6d:af:f7:96:0c:a2:
         3a:46:d7:e9:ce:81:87:cf:56:09:83:f4:2a:9f:0e:49:85:46:
         3d:43:ef:8d:e0:47:65:7c:08:db:70:a8:5c:bf:c7:4c:f7:97:
         87:62:9e:dd:e6:90:ac:3a:4e:f9:05:47:f5:85:b4:88:38:e5:
         99:e4:d0:ed:20:5d:0d:a8:2b:19:a9:80:e6:bf:43:7e:7a:cb:
         14:a6:22:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----