Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
File:                     ETTh19f5WQbDqD6TDZdIccx0TL4.mft (raw, json)
Hash identifier:          fsFOW7ZYUdegs4HcuWHW3v9ZgI4qeMU6fVppI/0JCzg=
Subject key identifier:   38:4E:7A:69:B1:A9:D5:DD:9A:C2:60:93:7C:22:6D:4E:34:21:54:99
Authority key identifier: 11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
Certificate issuer:       /CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Certificate serial:       018F4B6D553E30A782BA940CE61BD53ECE9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
Manifest number:          10E8
Signing time:             Mon 06 May 2024 01:03:27 +0000
Manifest this update:     Mon 06 May 2024 01:03:27 +0000
Manifest next update:     Tue 07 May 2024 01:03:27 +0000
Files and hashes:         1: ETTh19f5WQbDqD6TDZdIccx0TL4.crl (hash: cWJ8GKUC/34uGLxNJr+hId32GKANe7eUlkt5yaAhbe0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6d:55:3e:30:a7:82:ba:94:0c:e6:1b:d5:3e:ce:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
        Validity
            Not Before: May  6 01:03:27 2024 GMT
            Not After : May  7 01:03:27 2024 GMT
        Subject: CN=384e7a69b1a9d5dd9ac260937c226d4e34215499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bf:cf:cd:1c:15:85:36:12:98:c5:70:be:27:
                    68:90:f6:ba:a3:e7:cf:81:56:98:71:dc:38:3c:6c:
                    4f:82:7a:17:a9:f4:76:7b:79:bd:28:a6:e5:9f:7c:
                    2a:a2:eb:b1:a2:5c:e1:ef:77:6f:1a:e6:63:a1:f4:
                    a2:70:1e:54:fc:99:89:4f:d9:ce:8a:c6:cc:1c:c2:
                    cd:fc:18:43:e2:c7:a8:3d:eb:13:70:3c:e6:b7:b7:
                    e8:7f:bc:15:47:e8:83:26:1d:ee:fb:14:a0:95:31:
                    a2:ea:0c:01:5e:ca:22:99:f2:74:02:1e:c3:48:f4:
                    b8:5f:ce:0d:a5:44:56:fa:c4:6d:03:a5:99:28:2e:
                    10:29:d2:02:2d:2b:6d:43:fe:d1:be:13:09:e6:12:
                    6f:72:c4:a9:a6:cd:20:84:1f:f8:5b:a8:dc:57:a4:
                    56:b1:39:db:a0:2a:ba:1f:51:e2:c4:25:e0:dd:ba:
                    e2:1e:b6:9e:e7:73:7d:d5:81:cd:d2:f6:44:3d:f3:
                    c7:35:5c:e3:f4:99:76:13:93:54:7a:cd:72:6d:44:
                    fd:c9:75:f7:23:d3:6d:45:c2:0a:98:a3:65:81:f6:
                    82:17:64:fd:de:6d:19:19:d7:08:89:b8:e3:ed:66:
                    ff:9c:3b:84:6a:1a:f4:07:97:30:ec:c2:b6:7f:c6:
                    f7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4E:7A:69:B1:A9:D5:DD:9A:C2:60:93:7C:22:6D:4E:34:21:54:99
            X509v3 Authority Key Identifier:
                keyid:11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:85:9d:e4:b6:ec:61:33:ef:e7:e9:a9:d7:d9:53:1e:d9:d8:
         0e:e6:f6:14:fa:d7:eb:66:91:67:59:30:db:9f:68:4f:17:19:
         1e:8f:e4:71:db:6e:1f:cb:f9:c9:11:e4:87:26:0c:80:2c:23:
         3e:ad:93:e2:56:88:ba:74:f0:30:1d:b6:90:0b:3e:39:99:d6:
         89:95:14:47:6b:2b:b3:82:8f:03:c3:fe:5e:f0:a0:ff:33:46:
         11:a1:f7:61:c6:a1:eb:fa:ee:c5:b1:0e:8c:fb:07:da:fb:ab:
         67:29:ec:1a:67:42:eb:6f:9e:ec:37:49:22:f2:32:39:33:d5:
         7c:04:87:30:10:84:ae:5b:95:9a:54:60:3f:ef:af:c3:2f:e9:
         fe:d4:53:ee:d7:71:9d:bd:ed:e3:04:99:07:0f:c6:4b:e1:8c:
         4d:c4:6d:52:c9:e4:74:e6:a9:d7:8b:b1:b5:a3:8f:f8:d9:7b:
         2d:87:f7:f9:b2:56:a7:64:dc:72:77:91:b2:b1:70:1e:c4:30:
         ea:90:7c:2f:e5:7b:5c:dd:60:2e:ee:a8:f0:2e:a4:51:11:44:
         0f:c3:30:35:80:3a:23:88:0c:8b:6b:62:74:ee:4a:39:8c:9f:
         cd:38:11:e5:13:aa:e8:05:a2:83:b7:63:2e:7f:66:74:4a:e5:
         ad:2b:c9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----