Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
File:                     SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft (raw, json)
Hash identifier:          bpG+zdhNGGuTuHjaLnaspudjZrsWUNA2gtzzqRehI2A=
Subject key identifier:   75:81:2A:C0:9B:3F:3D:29:9C:DC:15:9C:E1:3A:29:12:32:B8:97:44
Authority key identifier: 49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
Certificate issuer:       /CN=490957f79e6c28146643f49d9fe17fc4f163776c
Certificate serial:       01901BFC9DDAEC758FC6227CEB48EF038AF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
Manifest number:          08A8
Signing time:             Sat 15 Jun 2024 13:00:58 +0000
Manifest this update:     Sat 15 Jun 2024 13:00:58 +0000
Manifest next update:     Sun 16 Jun 2024 13:00:58 +0000
Files and hashes:         1: SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl (hash: KaQi8e9HJawr8c898wBm1cf3CJyICbfwigHbx+8qnwo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:9d:da:ec:75:8f:c6:22:7c:eb:48:ef:03:8a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490957f79e6c28146643f49d9fe17fc4f163776c
        Validity
            Not Before: Jun 15 13:00:58 2024 GMT
            Not After : Jun 16 13:00:58 2024 GMT
        Subject: CN=75812ac09b3f3d299cdc159ce13a291232b89744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0f:eb:5a:be:28:53:13:34:b3:a5:c8:d5:01:
                    dc:01:8d:a5:26:12:cf:7e:5b:bb:75:45:db:4b:b8:
                    1e:68:4a:d3:03:c9:43:84:6d:2b:f7:d6:a2:66:4b:
                    85:33:14:17:9b:09:fb:14:62:e6:7b:13:7e:66:ce:
                    ed:a1:5b:37:ee:55:5c:55:db:53:b1:ab:7b:bf:ef:
                    92:bb:25:47:6a:96:4b:61:62:dc:7c:f8:72:96:0a:
                    6c:74:8b:f7:87:21:8b:23:da:87:f0:60:e4:8c:74:
                    86:86:e3:29:7c:50:bf:ad:32:1d:05:85:ea:02:94:
                    f2:3f:60:99:3a:fa:6a:64:ee:5d:60:f8:ae:c4:3e:
                    b4:0a:a3:9f:d4:08:16:61:6f:80:50:e7:d9:0c:a6:
                    ca:4b:7e:e4:4d:e5:d9:f4:e5:db:86:f1:cc:50:ba:
                    7e:4a:89:4a:06:46:97:fb:85:46:a5:62:83:42:59:
                    91:f4:d4:ec:af:cc:57:8c:4e:d9:6c:16:8e:ef:28:
                    56:d6:77:7f:43:9e:17:cb:23:06:2a:f8:8f:28:e5:
                    8c:40:cf:8d:22:d9:53:3c:8b:60:ca:04:82:46:b7:
                    59:f6:96:22:50:4c:e7:ae:ec:b2:99:ca:7d:80:40:
                    dc:00:68:44:bb:d2:49:75:c1:d8:ad:01:87:c6:68:
                    87:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:81:2A:C0:9B:3F:3D:29:9C:DC:15:9C:E1:3A:29:12:32:B8:97:44
            X509v3 Authority Key Identifier:
                keyid:49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:8c:07:3f:3c:cc:84:41:2a:a6:70:8a:ba:51:7e:4f:4c:cb:
         9b:7c:7d:3a:a6:14:e5:7a:9d:41:07:46:ae:4d:05:84:98:ef:
         e7:5f:26:21:b7:3d:9b:28:0a:55:04:8c:b3:e8:15:af:71:3b:
         95:13:eb:0d:75:b6:3a:6c:05:56:9c:7a:34:8c:10:47:d6:ce:
         cb:78:29:37:79:cf:67:f9:1a:51:31:87:3a:3a:73:c7:d5:26:
         68:e5:a1:a2:98:a9:a1:98:5d:5e:29:e1:fe:94:be:a4:3b:a6:
         db:a1:2e:95:41:d3:ee:9f:d0:dc:38:13:f8:72:53:3f:c8:47:
         f6:c1:fd:13:18:29:b6:b6:8c:35:b9:f8:bd:9e:d9:7a:7f:ce:
         14:7a:57:ac:5e:9d:5f:d3:0d:f7:2a:83:bc:2b:e1:49:f2:91:
         dd:d3:9e:1f:49:70:13:2e:59:14:0d:6c:23:a1:81:ab:58:3d:
         79:90:f7:44:85:4e:09:4f:9a:3f:9d:d6:d0:e0:b5:e9:bd:9d:
         16:d7:8a:78:ce:fb:71:00:38:b5:62:e4:17:0c:88:da:0b:f3:
         f7:0d:96:14:01:04:ff:fe:e6:48:83:55:12:03:d7:f2:81:d2:
         68:4c:b7:07:d8:5b:20:c3:41:eb:64:60:26:f7:d2:89:19:8d:
         7e:56:a5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----