Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
File:                     UYqkmTdA34rTjZLMDBByNObfoFw.mft (raw, json)
Hash identifier:          xwPFltkNoWwAYr9448YQ9UQ1BaVjQ6ovaZdyw4t2aAw=
Subject key identifier:   C3:B8:B9:81:95:24:E3:A3:91:F0:9F:39:C0:F6:CC:BC:27:9C:B2:52
Authority key identifier: 51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
Certificate issuer:       /CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Certificate serial:       018F87B64A13C6AC78808F11D25D4DF00FE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 18:00:21 +0000
Manifest this update:     Fri 17 May 2024 18:00:21 +0000
Manifest next update:     Sat 18 May 2024 18:00:21 +0000
Files and hashes:         1: UYqkmTdA34rTjZLMDBByNObfoFw.crl (hash: yMYpyTQ5g2rlqFsb2EoJCnfN5FgIKCtnmvm5eJQ9VLI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:4a:13:c6:ac:78:80:8f:11:d2:5d:4d:f0:0f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
        Validity
            Not Before: May 17 18:00:21 2024 GMT
            Not After : May 18 18:00:21 2024 GMT
        Subject: CN=c3b8b9819524e3a391f09f39c0f6ccbc279cb252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:da:05:15:a2:7b:3e:51:70:63:db:25:de:da:
                    f2:dd:e6:58:eb:25:00:94:0c:a1:07:95:d7:d3:d5:
                    cd:57:3e:80:af:6a:fa:84:ec:4e:07:c8:f5:a4:34:
                    70:ff:71:08:72:05:03:9d:7a:bf:0e:d0:15:f0:a2:
                    65:bd:f4:cf:d3:ed:e6:8a:99:27:63:15:eb:02:cb:
                    46:63:9c:ca:42:4c:b5:9f:a2:1f:fd:d6:a0:2a:21:
                    63:8b:d2:90:69:ca:82:36:c3:0b:c6:11:06:4b:42:
                    e8:46:4a:53:8b:ec:e2:44:f1:b3:5c:65:7b:b0:bd:
                    2f:d8:c8:13:3a:06:59:e7:68:78:2d:dd:5d:ca:3d:
                    44:c6:7e:3c:13:4d:74:e4:4e:9a:4b:f7:60:80:c0:
                    81:56:58:ca:f6:9f:7f:49:33:6f:d6:c3:00:60:e6:
                    0b:ad:36:20:39:51:65:fa:b4:44:1f:07:c2:02:e4:
                    04:e3:36:7d:cf:7d:2e:7d:b8:e2:ff:aa:c6:fc:97:
                    13:f4:1f:04:22:d7:e4:20:10:f8:52:8a:c2:0e:9b:
                    20:c6:a4:36:f5:c0:ed:a6:43:f8:ae:91:55:f4:9a:
                    ab:2c:a4:a5:c9:c3:86:d3:0f:18:d4:f5:14:aa:be:
                    a7:19:0d:46:83:8a:99:27:de:54:57:68:e2:20:43:
                    54:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B8:B9:81:95:24:E3:A3:91:F0:9F:39:C0:F6:CC:BC:27:9C:B2:52
            X509v3 Authority Key Identifier:
                keyid:51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:cf:3e:df:af:fd:c6:c3:70:fb:8f:53:f1:e0:16:32:de:0d:
         e4:5e:f8:4c:b8:76:12:d8:b2:39:fa:a8:c0:0e:22:2f:d8:72:
         09:15:49:60:35:49:71:5a:52:71:f2:28:0f:d2:30:ff:b1:a2:
         2d:c7:98:77:1a:09:24:2a:28:79:bc:d1:a2:48:b6:91:6f:8f:
         8e:88:21:61:f1:e3:2a:8f:ff:40:22:cf:8e:67:62:62:06:1f:
         cf:b4:34:f4:7c:93:3d:9c:68:5b:52:cb:90:73:a8:86:f3:6c:
         ff:99:08:26:eb:69:e4:1a:f2:d0:b9:df:8c:cd:23:4d:b1:3a:
         be:07:8f:ed:f0:07:2e:6f:57:f4:d8:c5:bd:7b:69:68:65:d6:
         f6:c8:2c:cd:08:ab:e7:25:3f:61:70:34:c1:fc:1d:64:ff:88:
         f5:d8:c0:40:88:37:fb:74:c9:b6:83:38:00:b4:da:3a:8c:fe:
         7e:27:bc:f9:bc:4d:e7:1c:f2:f4:34:ac:20:40:cb:13:46:7d:
         9d:54:dd:45:23:15:e2:fe:2a:9c:62:f5:45:02:8e:29:e8:80:
         ce:0e:c6:a4:f4:35:b7:b5:d9:b2:91:9e:53:92:5c:a3:38:a1:
         93:01:94:1b:9a:19:57:2b:e5:35:87:99:ec:ca:e5:b7:e0:f1:
         2c:19:35:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----