Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
File:                     N0862b8UbAabjYPW1a1UggRetw0.mft (raw, json)
Hash identifier:          yMXeVA4+sL61B8sxRUYzGEuGGC7qkHul69lyDLlRT34=
Subject key identifier:   A9:EA:A9:4B:94:13:F5:DA:AD:A3:B1:93:AB:7C:8F:18:47:91:79:77
Authority key identifier: 37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D
Certificate issuer:       /CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d
Certificate serial:       018F86A4230BD305E5EA5B94507DAAA2A54D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 13:00:54 +0000
Manifest this update:     Fri 17 May 2024 13:00:54 +0000
Manifest next update:     Sat 18 May 2024 13:00:54 +0000
Files and hashes:         1: N0862b8UbAabjYPW1a1UggRetw0.crl (hash: zzRJ5RsemOjXkhwY8byoGFBT2q2CupD0tsjyF0ee6oQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a4:23:0b:d3:05:e5:ea:5b:94:50:7d:aa:a2:a5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d
        Validity
            Not Before: May 17 13:00:54 2024 GMT
            Not After : May 18 13:00:54 2024 GMT
        Subject: CN=a9eaa94b9413f5daada3b193ab7c8f1847917977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e2:23:02:a3:43:64:af:d5:5b:23:7c:70:35:
                    3b:0d:e7:13:ad:11:fa:12:01:b2:61:0b:16:ee:b0:
                    29:3f:34:64:eb:64:48:a1:46:4f:36:bd:20:42:cb:
                    f9:f9:28:d8:ad:4e:6a:7a:d8:46:6f:a5:e3:1c:74:
                    41:30:6c:1b:13:db:6c:bc:09:6c:b9:e1:e5:20:3a:
                    d9:39:f5:29:28:78:4f:2c:e9:4e:8a:8b:68:18:4b:
                    a4:2d:a9:d0:a7:80:f8:45:5e:cc:bf:2f:01:1c:d5:
                    d9:6e:a6:f4:21:90:97:ad:f1:9d:17:6d:84:99:da:
                    e3:38:4c:da:48:ca:6a:9a:43:20:0e:4c:1c:24:06:
                    90:2d:e8:91:c5:8d:03:ce:99:4b:28:09:af:88:ba:
                    12:77:40:a2:09:2e:8d:dd:0c:78:00:cf:d5:54:89:
                    de:36:0a:b7:76:1f:09:bc:61:98:41:c3:f5:77:14:
                    bb:67:30:9f:69:99:f9:a2:37:82:d0:1f:f9:d3:5e:
                    b8:8c:01:41:ff:63:0e:08:69:1b:63:00:b2:f9:f8:
                    34:18:b1:9d:c1:37:51:d1:66:b8:67:d1:b4:bf:82:
                    ff:ee:4e:24:90:a7:f0:86:f5:e4:a9:5b:c2:20:11:
                    d6:7d:96:98:61:fd:68:74:24:a8:f1:35:1d:2c:5c:
                    b6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EA:A9:4B:94:13:F5:DA:AD:A3:B1:93:AB:7C:8F:18:47:91:79:77
            X509v3 Authority Key Identifier:
                keyid:37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b1:b5:d8:3e:69:3b:8d:5f:a4:df:ab:cf:2d:89:4a:e1:51:
         b6:4c:90:e6:17:6b:d0:ba:e4:f4:c4:5d:1d:01:90:9a:08:43:
         72:e4:42:38:ed:91:7d:b5:e3:5a:ab:6f:dc:1a:8b:38:dc:ba:
         35:06:c9:ba:0e:ed:e2:53:4d:23:de:b7:6e:42:3d:8d:6f:d3:
         6b:e2:7d:97:ac:a2:77:5f:95:16:85:80:04:65:3a:45:bf:63:
         32:92:e6:cf:2f:13:35:a0:a7:bf:87:f8:19:8e:8f:79:3b:19:
         4e:a6:b6:89:8c:bf:60:8c:35:8b:84:dd:d0:60:57:cc:82:ff:
         3d:dc:21:f1:78:e7:f9:ba:aa:d4:2f:32:c5:02:e4:71:3f:34:
         70:ee:24:47:34:d4:c5:bf:4a:4b:05:ea:67:d0:2a:a7:66:3a:
         16:fd:6e:d7:29:a6:dd:ea:1f:18:b2:57:62:e0:8d:d2:7e:04:
         e8:dd:7c:29:aa:6c:6b:6e:8d:bc:75:2d:7a:ff:82:f8:22:c2:
         42:d6:47:4a:c1:9e:93:6c:97:7a:62:0d:17:38:f3:3e:61:0b:
         d3:ab:f3:07:e4:c4:9a:7f:ba:ad:58:f5:e1:fd:c3:af:1c:41:
         f6:15:88:8d:7f:64:c7:e5:62:15:d6:65:4d:01:2f:a1:c4:a6:
         18:a3:d1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----