Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft
File:                     ROzsULCd1G04TQgbUH0juv71HJw.mft (raw, json)
Hash identifier:          YgRiCOEhww2ZzTAEm+E6ovrrQagFZ2XV+8+izakQVqw=
Subject key identifier:   FA:53:5A:AF:C1:E0:71:FE:6B:A8:23:7D:71:E5:34:E1:28:D5:7C:1C
Authority key identifier: 44:EC:EC:50:B0:9D:D4:6D:38:4D:08:1B:50:7D:23:BA:FE:F5:1C:9C
Certificate issuer:       /CN=44ecec50b09dd46d384d081b507d23bafef51c9c
Certificate serial:       018F87ED71899A67C5CCF5A9F561D460E809
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ROzsULCd1G04TQgbUH0juv71HJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 19:00:36 +0000
Manifest this update:     Fri 17 May 2024 19:00:36 +0000
Manifest next update:     Sat 18 May 2024 19:00:36 +0000
Files and hashes:         1: ROzsULCd1G04TQgbUH0juv71HJw.crl (hash: Q0FzPAF76ve0X+6lu4C/QRCbI9lhv4/GJYtBtS6vlOo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ROzsULCd1G04TQgbUH0juv71HJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:71:89:9a:67:c5:cc:f5:a9:f5:61:d4:60:e8:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44ecec50b09dd46d384d081b507d23bafef51c9c
        Validity
            Not Before: May 17 19:00:36 2024 GMT
            Not After : May 18 19:00:36 2024 GMT
        Subject: CN=fa535aafc1e071fe6ba8237d71e534e128d57c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:62:ca:a5:b7:ce:f3:19:21:05:ef:d6:c8:e6:
                    66:e3:32:a5:9f:51:eb:f6:e6:76:b3:c4:4a:7a:51:
                    8c:0d:0b:00:8e:1e:dc:21:97:44:a3:73:77:11:78:
                    35:0f:66:2a:7c:d3:90:be:28:9d:79:4c:00:08:d5:
                    9b:07:02:2c:3b:b0:8f:10:3e:4a:44:89:66:cf:c0:
                    c4:cd:4e:a7:6a:1c:e9:8d:64:da:5a:02:93:3a:99:
                    9e:66:3d:da:b5:0f:96:02:5f:27:be:7d:fa:dd:a8:
                    81:2d:fd:70:db:d8:67:c2:f9:a8:88:17:9b:0c:cd:
                    2d:8b:43:77:25:78:74:5c:4c:cf:ba:7e:d3:3c:86:
                    ea:c5:45:7a:4b:db:f3:f3:55:aa:21:36:a7:7d:c6:
                    f9:b8:b2:d4:66:3e:f7:d7:a1:ae:e7:57:2a:13:da:
                    02:3d:e8:f7:42:19:06:f3:30:be:75:60:01:67:42:
                    0f:ab:0b:a4:56:09:34:69:3b:04:6a:2d:fa:f9:12:
                    ed:1e:3a:05:45:aa:97:ec:fc:fd:a9:6a:28:d5:bb:
                    8e:ab:30:52:ea:02:bc:06:ff:78:c8:d2:9a:86:5e:
                    d9:52:8a:d6:da:87:91:9a:b2:c4:3a:77:f9:3f:bc:
                    03:dc:f2:a1:5a:81:1c:2c:78:85:e5:4d:72:ba:01:
                    46:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:53:5A:AF:C1:E0:71:FE:6B:A8:23:7D:71:E5:34:E1:28:D5:7C:1C
            X509v3 Authority Key Identifier:
                keyid:44:EC:EC:50:B0:9D:D4:6D:38:4D:08:1B:50:7D:23:BA:FE:F5:1C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROzsULCd1G04TQgbUH0juv71HJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e0:cb:64:ba:f4:e7:0f:d7:de:f0:87:30:1c:98:ac:c9:d1:
         10:d8:85:fa:40:a1:c8:d4:a9:ed:dc:59:4a:45:50:1f:1d:a2:
         71:65:bf:e4:40:f3:2d:3f:52:90:f8:81:c9:3c:e0:6e:3c:2d:
         4c:01:4f:69:f1:1c:04:ac:b8:cd:8a:20:5d:64:1c:6a:92:6e:
         fe:9e:b5:b3:f6:3f:12:cb:40:95:81:40:47:11:1c:1e:43:88:
         ca:61:ed:3d:85:82:f0:69:03:ac:1e:52:4d:4d:4b:51:53:0b:
         48:b9:0d:fe:50:be:01:df:8d:8d:b2:1b:5f:7c:5d:ce:68:42:
         2b:9f:45:d5:12:d0:92:e1:0f:73:c1:47:4e:f3:2d:b1:bf:75:
         d1:a5:f0:48:7c:8f:6a:5e:f2:a1:e4:a1:8a:ee:ff:9a:ea:13:
         e5:e2:15:50:0e:b0:62:ac:47:3a:33:7e:17:c8:48:fe:fa:01:
         ab:66:f9:5c:92:d2:5f:88:b6:89:36:91:83:f8:63:e1:c3:17:
         13:57:06:1e:13:94:9d:40:84:8f:0e:cb:2c:05:91:88:c8:00:
         2c:63:41:b8:80:20:78:fe:98:d8:ad:e4:6a:db:44:50:e9:fe:
         7c:38:46:05:10:99:91:a2:a4:f2:60:6f:34:0f:7f:7b:40:fc:
         8a:6d:1f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----