Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
File:                     6QOzpacoCqn-K_-pBlwrKgGld8w.mft (raw, json)
Hash identifier:          Rj90PeS1dzo+HHffXvq09nMsgM01SfHlJ6qVfnfv8HI=
Subject key identifier:   EF:54:C7:9B:7E:7D:89:2D:CE:0B:C5:50:69:E4:68:2B:FF:6D:67:82
Authority key identifier: E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC
Certificate issuer:       /CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
Certificate serial:       018F4BD931089BDA172476D08B3BC6F96ED0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
Manifest number:          1156
Signing time:             Mon 06 May 2024 03:01:15 +0000
Manifest this update:     Mon 06 May 2024 03:01:15 +0000
Manifest next update:     Tue 07 May 2024 03:01:15 +0000
Files and hashes:         1: 6QOzpacoCqn-K_-pBlwrKgGld8w.crl (hash: GsfWpTXNhqh6mE3ZbtV0WGT+XJ3Tf2n73/SfQ32EAYs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:d9:31:08:9b:da:17:24:76:d0:8b:3b:c6:f9:6e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
        Validity
            Not Before: May  6 03:01:15 2024 GMT
            Not After : May  7 03:01:15 2024 GMT
        Subject: CN=ef54c79b7e7d892dce0bc55069e4682bff6d6782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:64:73:ef:5f:4a:9a:51:9c:7f:85:e8:86:d5:
                    c2:2d:cb:e4:0f:65:94:4a:b1:97:59:d7:e9:3a:c7:
                    3d:cd:a6:45:27:d4:26:ff:63:d3:43:82:70:78:b9:
                    af:da:36:48:58:5e:3b:18:89:e7:c1:be:6b:74:c9:
                    5e:52:2b:a0:26:26:90:08:50:f7:a7:e0:eb:00:70:
                    a3:e5:b5:3e:e1:81:a9:3e:41:d9:11:28:27:aa:ce:
                    dc:fc:5e:05:4b:57:27:8d:01:42:ff:28:ff:6f:7c:
                    1a:28:76:36:05:54:2f:80:a3:27:d1:df:81:60:1b:
                    8f:99:f7:21:77:ca:1f:8f:c7:a3:4b:71:df:72:d5:
                    4e:7a:9a:07:0a:99:2e:41:cb:00:08:d4:4d:f8:ad:
                    81:4d:2b:f2:5e:0f:7a:dd:95:72:7e:f4:90:7d:8d:
                    e4:a6:8f:6e:e8:fd:a7:85:66:60:b9:a1:96:12:a0:
                    d1:d0:ac:bd:07:05:d9:37:79:77:74:8e:31:08:dd:
                    54:f2:12:af:68:d5:c5:0e:96:e3:45:ab:24:f0:16:
                    85:6a:ee:f9:3c:8f:2e:1b:e3:4f:9e:63:89:c6:78:
                    ff:d3:74:8d:0e:f3:0a:82:9a:b1:4d:97:82:0d:75:
                    c8:26:b8:a8:b2:b4:64:f3:90:1f:0b:ce:39:76:af:
                    2a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:54:C7:9B:7E:7D:89:2D:CE:0B:C5:50:69:E4:68:2B:FF:6D:67:82
            X509v3 Authority Key Identifier:
                keyid:E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:6d:0c:db:3a:50:36:6f:fe:be:6e:4e:8b:ec:a1:43:1e:c1:
         e6:1f:08:0a:bc:5a:7d:96:2a:56:bc:8a:18:c6:78:1c:12:28:
         90:22:67:90:4e:18:d4:02:55:26:e8:f9:35:61:3d:78:16:0e:
         69:74:fc:ff:d3:74:72:87:91:11:98:1f:fb:f0:cb:77:aa:e4:
         c6:6e:22:20:48:87:e3:7d:ea:77:0e:3d:ae:39:49:43:1c:76:
         b9:42:86:11:9e:80:3a:3d:d6:80:3c:cc:8c:f8:86:c7:20:de:
         bd:aa:69:03:49:44:79:3b:e0:18:d8:a3:96:49:5f:2a:cb:a9:
         16:82:0e:71:b7:2f:66:17:2d:29:61:6e:e2:be:6e:43:d4:55:
         bf:e3:dc:c1:8d:39:e1:f7:50:de:54:e6:16:c8:79:a2:63:c1:
         74:e9:ff:9b:65:66:9e:5f:55:e5:98:01:7a:01:f7:a0:af:9e:
         3c:b6:0d:41:6a:2b:c2:bd:69:2a:a5:e7:9f:10:24:88:8a:5a:
         e8:bc:30:a8:f5:98:80:4c:2e:8a:e2:11:b3:21:76:0d:46:5e:
         19:d1:31:ba:c6:c2:b4:a3:62:4e:a8:6a:df:ae:c4:35:10:35:
         91:d7:8f:3d:72:61:d5:2e:8d:5c:96:6c:cd:12:41:32:02:35:
         91:84:6c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----