Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
File:                     t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft (raw, json)
Hash identifier:          hsZJi027kqh7kWB5YBcTRROJERrBhqlNMnG33N68Ahk=
Subject key identifier:   D5:86:27:CF:62:19:3A:FD:E1:A9:C3:AA:59:93:A8:69:43:DD:5C:94
Authority key identifier: B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC
Certificate issuer:       /CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec
Certificate serial:       018F8748D9604CC10AC62C85A322AB89377C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
Manifest number:          051D
Signing time:             Fri 17 May 2024 16:00:49 +0000
Manifest this update:     Fri 17 May 2024 16:00:49 +0000
Manifest next update:     Sat 18 May 2024 16:00:49 +0000
Files and hashes:         1: t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl (hash: gnalGUWcupx9qflQJ8PBbgmLNmxp8MiPyZuXevx1P8A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:d9:60:4c:c1:0a:c6:2c:85:a3:22:ab:89:37:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec
        Validity
            Not Before: May 17 16:00:49 2024 GMT
            Not After : May 18 16:00:49 2024 GMT
        Subject: CN=d58627cf62193afde1a9c3aa5993a86943dd5c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:29:2c:39:81:d2:24:f3:40:b2:88:a4:9f:7f:
                    82:a7:1a:15:e3:c3:10:f1:1b:7d:51:a7:91:3a:ce:
                    d7:bb:5c:08:2d:63:69:d8:73:6f:f8:11:8c:69:4b:
                    69:f8:b6:4e:39:f6:8e:64:cc:2e:61:7a:e6:df:8f:
                    24:5c:ad:ec:ff:25:19:07:56:9a:4c:9d:b9:b0:1b:
                    d6:03:d7:54:5c:45:9c:8b:44:fc:f2:4e:d4:8c:2a:
                    4d:e5:47:64:71:8b:5f:3f:f0:54:c5:fd:8f:3d:64:
                    0f:b9:58:fe:63:39:46:22:07:97:17:e6:8e:40:2f:
                    f9:9d:2c:d5:ea:cd:5f:eb:f0:5e:fc:0c:bd:de:ea:
                    be:f6:09:21:7f:4e:4e:db:e1:c6:e8:28:24:df:40:
                    26:04:95:69:54:25:2b:0f:06:66:fe:bb:a2:5f:27:
                    0b:c6:f0:83:ed:c0:09:c3:fb:fc:36:51:70:65:b2:
                    64:0b:9d:b5:d2:8e:46:5c:af:72:03:81:19:e7:9c:
                    e7:6d:49:d6:ad:9d:33:57:c0:9f:c9:bb:a0:83:9c:
                    18:a4:c0:fd:64:63:ee:21:ee:fa:5f:04:01:16:78:
                    8a:cf:2c:01:da:4c:2b:e2:33:31:3b:57:ea:11:32:
                    86:56:90:db:54:ae:e3:f9:aa:f0:f7:99:6f:c0:5a:
                    78:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:86:27:CF:62:19:3A:FD:E1:A9:C3:AA:59:93:A8:69:43:DD:5C:94
            X509v3 Authority Key Identifier:
                keyid:B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:78:b7:bd:2e:f6:01:3d:05:ce:90:44:be:93:36:eb:a9:05:
         7d:4e:f8:ce:59:ba:28:5f:75:84:a9:43:45:e5:6c:4e:89:4e:
         b7:b1:44:34:54:5a:a1:7d:27:4d:c2:38:6f:b3:a1:94:d8:2a:
         13:cd:47:76:c6:5a:0c:67:9d:0f:b8:dd:c7:0c:2d:3a:03:a8:
         eb:1c:08:5d:da:e3:76:88:62:79:2d:8a:50:fd:b6:92:1d:4e:
         f5:01:b7:5e:7a:bc:5b:42:55:60:8a:7f:98:c6:a1:59:5b:a5:
         4b:2b:2f:a2:8c:33:3d:b1:3c:1b:a1:3b:d2:a7:29:79:c4:f7:
         0e:c3:3f:7f:98:3a:f1:85:ac:79:8c:88:eb:b0:75:1e:94:1f:
         23:74:8e:a4:fb:b7:35:d7:26:ce:5b:20:9e:87:b0:65:ca:78:
         5f:91:b5:07:4b:d1:45:0b:65:4d:24:5f:29:ce:71:1e:79:bf:
         dc:58:e0:40:d5:6b:f6:dc:de:56:83:c2:9a:32:ba:64:a2:82:
         ef:30:e5:ef:33:36:50:a1:c1:08:18:60:7e:a3:d1:6b:53:e5:
         2b:e3:d1:80:54:f9:bb:0e:14:e3:3e:5e:e3:f6:c0:37:c0:38:
         78:e4:02:6b:e0:f6:19:b3:e4:cb:0c:c0:f8:5e:55:e3:f2:2f:
         3e:78:c1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----