Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.mft
File:                     X06OdhPaoX6FqhB4yOwlXPGNQio.mft (raw, json)
Hash identifier:          6NqawgCCXnQ62ukxxWI9bQBFPk3k54BdN3BXUgOuZiE=
Subject key identifier:   D2:0B:33:C1:52:56:D1:49:3D:A6:32:5A:F1:5B:9F:A0:CC:FB:DB:8A
Authority key identifier: 5F:4E:8E:76:13:DA:A1:7E:85:AA:10:78:C8:EC:25:5C:F1:8D:42:2A
Certificate issuer:       /CN=5f4e8e7613daa17e85aa1078c8ec255cf18d422a
Certificate serial:       018F8938B2A45EA34DCDE6FABBD3078017FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X06OdhPaoX6FqhB4yOwlXPGNQio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.mft
Manifest number:          08A4
Signing time:             Sat 18 May 2024 01:02:25 +0000
Manifest this update:     Sat 18 May 2024 01:02:25 +0000
Manifest next update:     Sun 19 May 2024 01:02:25 +0000
Files and hashes:         1: X06OdhPaoX6FqhB4yOwlXPGNQio.crl (hash: lCDJgvICtpXlU2V9H7iyuXkKGRZhTJThkZ2gMtmNZYc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X06OdhPaoX6FqhB4yOwlXPGNQio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:b2:a4:5e:a3:4d:cd:e6:fa:bb:d3:07:80:17:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f4e8e7613daa17e85aa1078c8ec255cf18d422a
        Validity
            Not Before: May 18 01:02:25 2024 GMT
            Not After : May 19 01:02:25 2024 GMT
        Subject: CN=d20b33c15256d1493da6325af15b9fa0ccfbdb8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8a:14:ce:79:9d:ef:3b:01:11:c8:90:e4:b0:
                    b7:d0:9d:79:41:74:76:fb:fa:c7:ee:13:a4:76:2c:
                    58:bd:97:ef:da:69:f2:ce:c1:dc:7f:af:1a:81:77:
                    a0:68:6e:a5:b8:0e:11:fc:31:21:06:df:3b:22:84:
                    36:1c:df:33:21:14:07:6c:f9:c9:92:52:90:42:3e:
                    f5:aa:b6:7a:60:0b:f5:33:02:f4:1e:30:50:c2:64:
                    72:d5:b4:06:aa:05:b7:ae:9a:60:86:91:2d:e5:5b:
                    e8:98:03:e8:5a:b2:af:51:10:46:08:e9:d9:50:1d:
                    87:71:75:9e:3b:96:39:e9:ae:67:2a:03:ad:94:8a:
                    97:41:06:d0:f3:f1:18:91:78:26:c0:0d:d5:85:88:
                    77:ce:fd:c3:83:e6:ec:cb:c9:77:86:ef:7f:bd:c4:
                    d8:b6:a0:7d:50:69:d3:4f:6a:e2:3b:68:a5:d8:bd:
                    e6:74:2e:00:c6:a8:f7:3e:2f:94:1b:fb:94:99:07:
                    06:de:bb:19:8e:77:86:62:91:d4:c5:d1:d8:8b:bb:
                    e8:3f:88:98:e6:ca:6b:80:e4:ee:0a:da:74:c4:51:
                    18:4a:f5:6e:55:a5:f6:ab:cc:9a:93:4b:de:17:35:
                    92:eb:63:a4:48:96:40:4b:d6:c8:ee:ea:0a:99:fc:
                    a0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0B:33:C1:52:56:D1:49:3D:A6:32:5A:F1:5B:9F:A0:CC:FB:DB:8A
            X509v3 Authority Key Identifier:
                keyid:5F:4E:8E:76:13:DA:A1:7E:85:AA:10:78:C8:EC:25:5C:F1:8D:42:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X06OdhPaoX6FqhB4yOwlXPGNQio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:65:4c:c5:1c:2c:47:d3:b8:17:1d:9d:1a:b2:c2:37:23:2a:
         ff:72:7f:26:66:c6:4e:7b:30:12:db:a5:1f:df:b5:05:65:c8:
         bf:9e:f1:d9:1e:d3:b0:2d:1a:e0:e0:da:9c:45:65:09:f0:65:
         48:e0:05:8b:3e:89:85:e9:48:15:5b:2b:47:b7:92:fa:14:03:
         60:1b:c7:d8:42:ec:4d:9d:a2:63:7a:26:e4:b9:05:b6:2b:a9:
         15:92:c5:b3:7a:14:65:a9:d1:67:89:72:c9:59:a6:21:0e:da:
         8f:c5:db:ed:7e:64:4f:ff:1f:dd:9e:de:a7:e5:8d:c3:37:a6:
         07:1e:03:09:05:be:7d:13:d6:6e:ae:5a:e6:70:dd:a1:88:01:
         aa:e6:dd:aa:90:87:bf:90:51:0c:c9:16:6a:c0:09:d6:3c:99:
         f0:82:c5:af:9d:59:b7:36:4a:29:9c:fe:fa:02:62:bc:38:c9:
         5c:59:c6:05:47:e0:10:f4:73:ee:aa:3c:e0:99:52:3d:e0:7d:
         5c:f0:13:67:41:d7:c4:a4:9c:03:c4:fe:b3:4e:f5:72:cd:5c:
         53:7d:55:da:20:ce:e9:a6:77:d3:98:0b:8b:cf:6f:cc:90:cc:
         ae:8b:ee:8d:23:1e:0d:42:3d:f4:d7:9e:d3:23:2e:ff:70:08:
         5c:91:c2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----