Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.mft
File:                     rRIanMsoPqIejQoHCi4LakDph30.mft (raw, json)
Hash identifier:          OKUKYm3n50CJXCWYkDUFjKX89RnrYHaCMto4cW0qb/M=
Subject key identifier:   16:68:1D:64:EC:05:C2:0C:86:27:C3:25:EB:77:09:46:B6:D1:4C:01
Authority key identifier: AD:12:1A:9C:CB:28:3E:A2:1E:8D:0A:07:0A:2E:0B:6A:40:E9:87:7D
Certificate issuer:       /CN=ad121a9ccb283ea21e8d0a070a2e0b6a40e9877d
Certificate serial:       018F87499D007BA4E53B7BD2EA94F1C9A05F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rRIanMsoPqIejQoHCi4LakDph30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 16:01:39 +0000
Manifest this update:     Fri 17 May 2024 16:01:39 +0000
Manifest next update:     Sat 18 May 2024 16:01:39 +0000
Files and hashes:         1: rRIanMsoPqIejQoHCi4LakDph30.crl (hash: byupPrYgrDraLhQdPYTJDzX/VyKCfpLGgE4HA6lcBsU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rRIanMsoPqIejQoHCi4LakDph30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:9d:00:7b:a4:e5:3b:7b:d2:ea:94:f1:c9:a0:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad121a9ccb283ea21e8d0a070a2e0b6a40e9877d
        Validity
            Not Before: May 17 16:01:39 2024 GMT
            Not After : May 18 16:01:39 2024 GMT
        Subject: CN=16681d64ec05c20c8627c325eb770946b6d14c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:30:a5:a8:ee:6f:ab:47:14:d3:78:25:17:04:
                    86:db:e2:36:4e:d1:94:a8:6b:a7:a0:f5:18:ef:54:
                    21:61:64:2d:23:b2:35:c1:27:5b:cb:24:d5:fc:30:
                    0e:83:c3:a8:a0:b2:af:f8:15:c6:d5:f2:83:eb:c3:
                    ed:fb:c4:1e:6a:92:4e:14:0a:4d:41:a9:b4:e8:e7:
                    ee:cb:c5:53:a1:e9:94:79:d5:ee:52:e2:f3:ac:e5:
                    7e:8f:3f:f1:92:b9:44:6d:30:ac:94:30:b4:ec:53:
                    30:d0:39:ac:10:fa:50:f6:19:ab:f4:8c:23:21:74:
                    c0:8d:af:73:09:3f:16:7e:4f:57:e1:60:75:5d:af:
                    f2:76:c0:20:70:27:6c:d7:78:52:16:e6:9c:b6:3f:
                    d8:3a:d1:83:c4:c8:ae:fb:76:38:3c:96:da:09:02:
                    84:9f:48:5d:ad:c7:95:7b:92:fa:4b:66:ae:51:57:
                    ab:80:bb:3b:a1:57:95:71:ba:f8:7a:0f:ca:f0:b0:
                    2b:13:e8:ff:4a:a2:33:d5:3e:a8:eb:7e:ed:f6:da:
                    ca:00:cb:9b:6d:f7:92:1c:99:d8:91:a4:58:80:28:
                    f2:ae:51:82:7f:0c:81:50:c1:2d:88:87:1d:bb:f7:
                    6c:d0:93:25:fb:0e:67:5b:ed:48:ef:d9:96:e0:a4:
                    2f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:68:1D:64:EC:05:C2:0C:86:27:C3:25:EB:77:09:46:B6:D1:4C:01
            X509v3 Authority Key Identifier:
                keyid:AD:12:1A:9C:CB:28:3E:A2:1E:8D:0A:07:0A:2E:0B:6A:40:E9:87:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRIanMsoPqIejQoHCi4LakDph30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:38:e4:db:5d:dc:ba:c2:e5:2b:1d:37:a4:8d:7f:76:41:de:
         ad:ce:c5:23:c4:7e:e9:81:e0:13:51:7b:33:6f:03:bd:9c:ee:
         ae:ee:eb:91:2a:06:b7:03:17:a2:ee:58:ca:0e:94:f3:58:f4:
         24:dc:0a:d5:25:ad:82:73:9f:c9:81:4f:d5:79:57:46:ee:18:
         bb:28:22:0d:b6:1a:08:27:44:f0:6a:f6:6a:65:bc:c0:cb:f0:
         24:8a:0a:bd:39:a3:c8:b1:b2:03:6b:37:23:20:ca:89:24:d0:
         0a:43:73:ac:83:5c:63:a2:ab:ed:ee:cf:b5:00:ee:a7:11:7a:
         52:48:83:fd:e7:47:42:0c:70:33:4c:42:6e:e7:3f:7e:17:67:
         43:aa:52:fe:b9:71:eb:ef:22:e1:4e:4c:44:60:ba:8a:e9:27:
         58:20:3e:47:3e:36:8a:f8:02:bc:99:99:dd:9c:79:33:3a:7d:
         d9:c4:e0:cf:b1:35:29:bb:18:a9:ce:6a:a1:25:d5:4e:e3:54:
         57:8b:f0:02:c3:2b:4f:06:3d:fb:01:dc:63:a5:52:64:ee:22:
         2b:1d:dc:0a:e4:4b:e6:67:1f:00:10:15:44:d9:86:e8:d0:60:
         d7:a5:50:bf:61:12:66:7a:bc:d0:e7:fe:dc:9d:c1:f4:06:34:
         11:19:ce:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----