Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/209e87-4bd9-4950-8cd2-a2b6142250e4/1/V9eK2oQ2U2uAaZOpAh12WPFNuIM.mft
File:                     V9eK2oQ2U2uAaZOpAh12WPFNuIM.mft (raw, json)
Hash identifier:          pPRc0GWA9BdxcelFA8jID+RwjthMc11mV7oi8R4D3w8=
Subject key identifier:   15:45:C5:A0:40:9E:87:D0:E3:90:72:D4:FE:2D:3A:4A:D6:87:E0:4C
Authority key identifier: 57:D7:8A:DA:84:36:53:6B:80:69:93:A9:02:1D:76:58:F1:4D:B8:83
Certificate issuer:       /CN=57d78ada8436536b806993a9021d7658f14db883
Certificate serial:       018F87B67ACA53777A2BF7BEA807A6599159
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9eK2oQ2U2uAaZOpAh12WPFNuIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/209e87-4bd9-4950-8cd2-a2b6142250e4/1/V9eK2oQ2U2uAaZOpAh12WPFNuIM.mft
Manifest number:          04BC
Signing time:             Fri 17 May 2024 18:00:34 +0000
Manifest this update:     Fri 17 May 2024 18:00:34 +0000
Manifest next update:     Sat 18 May 2024 18:00:34 +0000
Files and hashes:         1: V9eK2oQ2U2uAaZOpAh12WPFNuIM.crl (hash: S5LM5PPPHM78ECp/Qri1TRwK9pHY51Qi0ShAQn4hWvo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/209e87-4bd9-4950-8cd2-a2b6142250e4/1/V9eK2oQ2U2uAaZOpAh12WPFNuIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/209e87-4bd9-4950-8cd2-a2b6142250e4/1/V9eK2oQ2U2uAaZOpAh12WPFNuIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9eK2oQ2U2uAaZOpAh12WPFNuIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:7a:ca:53:77:7a:2b:f7:be:a8:07:a6:59:91:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d78ada8436536b806993a9021d7658f14db883
        Validity
            Not Before: May 17 18:00:34 2024 GMT
            Not After : May 18 18:00:34 2024 GMT
        Subject: CN=1545c5a0409e87d0e39072d4fe2d3a4ad687e04c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:03:82:f8:8f:6f:af:0c:8b:21:9e:99:1a:e1:
                    c0:9a:ff:ea:48:9e:4e:7d:e8:89:41:40:c0:8d:fe:
                    b2:5b:53:df:b9:1b:c2:01:76:5d:e2:f0:93:ec:3a:
                    a9:9b:a0:37:f6:2b:35:13:25:c9:1a:dc:4c:dd:80:
                    3f:2e:85:f8:24:cd:95:42:0c:6c:1d:69:6b:12:e1:
                    76:f3:7a:11:2f:0c:02:04:f2:b2:6a:a2:a8:44:98:
                    e2:e9:2f:e1:14:5c:3e:56:49:b4:1d:05:45:da:ae:
                    44:54:65:79:23:2c:c8:79:54:0d:22:27:22:cb:4e:
                    c3:8c:53:79:40:41:40:89:c2:86:19:19:22:74:e3:
                    a7:eb:b3:22:c3:ba:c2:39:2a:a7:f1:e7:8e:39:d4:
                    39:1b:3e:9f:27:f1:07:e0:6c:9d:e9:60:3a:be:72:
                    a6:73:39:a4:c6:d5:91:7f:b6:32:3f:b7:66:5c:8c:
                    d3:26:49:30:8b:df:2d:68:ed:cd:ea:36:ec:f2:4f:
                    5c:b3:3e:8a:0e:24:fb:fd:18:16:d5:48:e6:b9:3e:
                    cf:19:eb:28:79:35:fb:38:ba:de:50:a2:58:e7:41:
                    d1:ed:57:8e:70:0c:d4:94:3e:c9:fc:b9:f2:bc:cc:
                    d9:92:22:b9:26:74:2f:b8:57:82:bd:a2:aa:c1:a9:
                    3f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:45:C5:A0:40:9E:87:D0:E3:90:72:D4:FE:2D:3A:4A:D6:87:E0:4C
            X509v3 Authority Key Identifier:
                keyid:57:D7:8A:DA:84:36:53:6B:80:69:93:A9:02:1D:76:58:F1:4D:B8:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9eK2oQ2U2uAaZOpAh12WPFNuIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/209e87-4bd9-4950-8cd2-a2b6142250e4/1/V9eK2oQ2U2uAaZOpAh12WPFNuIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/209e87-4bd9-4950-8cd2-a2b6142250e4/1/V9eK2oQ2U2uAaZOpAh12WPFNuIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:84:92:da:2e:90:e3:72:95:72:51:5f:9e:63:80:32:68:a2:
         24:aa:8e:52:6b:14:7d:fe:fd:1f:99:6c:e4:e7:f7:83:55:d1:
         26:3a:a8:53:c0:c1:73:8a:a4:47:9b:c2:9f:17:f6:62:d8:78:
         52:0a:34:f8:6a:ec:71:fb:94:c2:81:5e:97:c8:8a:88:31:0b:
         f4:5d:9a:98:c8:94:88:5c:93:3e:83:51:46:12:cc:52:01:cf:
         16:c1:fb:5c:b4:38:14:b4:b9:7e:04:96:07:a5:9d:69:6d:78:
         17:73:57:ae:ed:92:2f:c1:43:0a:3b:d0:4e:f9:b7:89:92:ab:
         9a:b9:cd:e0:85:0a:f0:39:15:d8:09:8c:53:9d:96:bb:e6:bf:
         33:08:a4:8a:b8:3f:25:f6:86:36:81:11:b2:ff:c3:fb:c9:59:
         7c:71:4e:1c:04:2f:36:3f:c2:3a:66:5b:c8:c8:bf:3b:18:b3:
         6a:cd:39:ef:5c:f6:e0:92:14:bb:c6:be:d5:29:6e:aa:47:7d:
         bf:01:19:5c:29:a5:36:7b:2f:3f:3b:da:0f:ca:9e:9d:67:ce:
         dc:3f:ee:63:78:89:97:60:f0:9f:1a:46:6b:83:21:0f:03:f3:
         42:54:18:04:e3:93:ae:71:ab:04:2c:b7:ff:2b:0e:cf:f9:65:
         16:57:7b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----