Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
File:                     xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft (raw, json)
Hash identifier:          Wn+OE5JJNCXgxIIUSjIMFIC9GtGeSqCY+GVKJsN06K4=
Subject key identifier:   3F:64:B4:07:70:D6:88:00:2F:CE:99:1B:FC:2A:4E:DB:EE:D4:B9:AC
Authority key identifier: C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
Certificate issuer:       /CN=c5f2203bc0286702345ac465500b4488c031c6b5
Certificate serial:       018F87488E716E8CA831CAB46CFBDD58294E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 16:00:30 +0000
Manifest this update:     Fri 17 May 2024 16:00:30 +0000
Manifest next update:     Sat 18 May 2024 16:00:30 +0000
Files and hashes:         1: xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl (hash: S+6l15zzoj3uGk5IteYKs7EILI3KHoyto5ouDoi7rG4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:8e:71:6e:8c:a8:31:ca:b4:6c:fb:dd:58:29:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5f2203bc0286702345ac465500b4488c031c6b5
        Validity
            Not Before: May 17 16:00:30 2024 GMT
            Not After : May 18 16:00:30 2024 GMT
        Subject: CN=3f64b40770d688002fce991bfc2a4edbeed4b9ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:57:bf:01:92:c7:dd:8e:ce:a9:f1:2a:06:ff:
                    62:ca:94:e1:82:9f:a1:03:13:ec:0e:24:f9:86:ee:
                    f6:1d:02:9e:71:31:9c:26:63:e1:36:de:58:4e:a9:
                    8b:8d:22:29:55:c4:4d:da:05:a8:0f:db:50:ab:12:
                    12:a5:ad:2f:3e:66:f7:37:9c:c2:0c:62:b7:5a:2d:
                    59:17:18:0d:7d:69:2c:df:18:a0:4b:9e:31:1a:4f:
                    77:b7:83:9a:0f:32:0e:24:d2:9c:46:bf:94:23:9f:
                    3b:2a:b1:05:2a:2a:24:80:a1:7c:5c:68:40:f6:67:
                    3e:a5:08:c7:ca:cc:69:73:8d:1c:41:1f:2c:32:8c:
                    0a:89:7a:b5:84:40:d6:87:3b:6f:f6:5f:a8:f6:b6:
                    6d:fe:56:1f:9a:98:d4:88:f8:86:68:e5:fe:ba:e4:
                    5a:b8:92:93:2a:99:b8:c0:32:9d:f9:f2:c4:9e:53:
                    1a:de:65:87:5e:8c:77:95:7f:dc:08:dc:45:b8:b6:
                    81:4d:4c:7f:b9:4c:e6:7c:ce:74:52:1d:94:3b:3e:
                    bc:0f:ab:c3:d7:28:22:8d:6c:d1:1e:f9:82:ce:96:
                    33:8c:d2:53:19:36:cd:cb:5f:ca:42:c4:b6:c3:ba:
                    b0:45:4e:c2:98:e0:13:92:3f:06:05:cd:09:31:61:
                    ad:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:64:B4:07:70:D6:88:00:2F:CE:99:1B:FC:2A:4E:DB:EE:D4:B9:AC
            X509v3 Authority Key Identifier:
                keyid:C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:a7:d4:81:d2:a2:30:7a:a7:9e:af:cf:a1:9a:aa:09:e4:fd:
         8c:8c:b4:f7:93:28:61:d9:f3:8c:3a:6a:e6:83:7a:52:86:51:
         ac:c7:c1:1c:7e:f3:ab:81:e2:aa:e4:c3:d9:92:b1:95:30:f2:
         69:34:54:f9:1f:f1:01:ce:41:52:71:c6:f3:1f:27:b6:2e:75:
         32:d2:32:77:13:dd:fe:f5:26:78:ac:f3:ff:a3:8d:2b:fe:13:
         ef:95:b9:bc:e4:25:54:6f:49:1c:09:21:23:fa:c9:41:ea:92:
         16:41:74:82:e6:78:82:f2:e8:81:ab:8d:a2:1e:d7:ef:ba:88:
         79:fd:da:ed:dc:4c:8c:18:8e:f6:c8:55:ff:71:bd:f9:0c:e9:
         13:e3:71:17:1b:53:0d:1a:8a:26:13:13:0f:26:00:90:c7:68:
         8a:a3:b1:d2:b9:ee:f4:54:15:68:ce:b7:2b:86:f5:90:3f:f2:
         1e:79:7c:b3:a5:1c:55:d8:f7:a4:3a:c2:0f:8f:49:3b:d9:a2:
         8b:51:5c:f4:0f:99:ac:2d:7c:7a:cf:74:d8:64:5c:b3:e0:0a:
         f6:89:df:a6:09:1a:64:87:57:0b:32:4b:fe:32:3b:6e:d9:f6:
         62:0f:48:77:36:95:3e:38:82:30:80:c5:cb:1a:de:d4:9b:bb:
         90:a3:b6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----