Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
File:                     TsRiBLT4hZI6pKl4btWsr7HACd4.mft (raw, json)
Hash identifier:          rfttheYHM3iKkKRTwEb1bxuxcHykbXv2rtW3+fFRCVU=
Subject key identifier:   AE:6B:8C:13:63:F8:FA:1E:45:1F:BD:BE:FC:71:92:10:F1:0E:56:F7
Authority key identifier: 4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
Certificate issuer:       /CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Certificate serial:       018F8892097A23C3BA8A90263A4CA86FCE8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
Manifest number:          0648
Signing time:             Fri 17 May 2024 22:00:23 +0000
Manifest this update:     Fri 17 May 2024 22:00:23 +0000
Manifest next update:     Sat 18 May 2024 22:00:23 +0000
Files and hashes:         1: TsRiBLT4hZI6pKl4btWsr7HACd4.crl (hash: uCzqy+WHPWALINwuvaJJxc+q1+8IZqAeG0Ro6R70RMQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:09:7a:23:c3:ba:8a:90:26:3a:4c:a8:6f:ce:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
        Validity
            Not Before: May 17 22:00:23 2024 GMT
            Not After : May 18 22:00:23 2024 GMT
        Subject: CN=ae6b8c1363f8fa1e451fbdbefc719210f10e56f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:35:3f:64:fd:29:68:45:c9:66:0e:42:41:43:
                    1f:a9:b0:8c:69:52:83:cb:42:19:82:ef:58:80:a5:
                    d5:79:de:3f:c9:0f:cd:d8:8f:b6:4a:34:55:ec:94:
                    f2:ec:b3:18:fc:be:a2:63:e0:38:9e:85:46:0d:1e:
                    29:40:ca:b6:21:47:14:e8:eb:45:24:13:52:8f:c3:
                    71:4a:0d:84:41:56:d9:70:ec:4e:5a:43:0e:b0:48:
                    09:b5:fa:42:21:55:65:71:ec:aa:a2:24:48:fe:bf:
                    6a:2d:d3:41:c7:99:ec:f7:3e:aa:ba:c8:25:62:93:
                    ce:b0:de:49:98:8d:99:ce:8a:bf:5a:2b:e5:26:6a:
                    f6:53:74:d1:d4:6a:e8:5d:81:7a:09:bb:fb:a0:6e:
                    92:55:6d:53:b6:ac:6f:89:2d:8a:b4:02:85:b4:c9:
                    02:3e:61:78:a2:6e:25:d9:30:a4:0b:ec:eb:4c:4f:
                    f3:82:c5:68:12:93:54:29:02:e7:d8:1e:54:69:bf:
                    a4:02:33:2a:89:12:bf:ec:7a:f8:f1:ba:2f:7f:80:
                    2c:4e:a4:b6:41:16:50:06:c6:af:00:0f:d7:1b:38:
                    cd:58:26:1a:e0:7b:c8:c9:3a:45:c9:bc:d1:89:c2:
                    d6:ca:02:a6:5c:cc:85:a3:f3:43:c6:c5:6d:df:b9:
                    cc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6B:8C:13:63:F8:FA:1E:45:1F:BD:BE:FC:71:92:10:F1:0E:56:F7
            X509v3 Authority Key Identifier:
                keyid:4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:dd:6d:ce:c2:da:e0:78:af:99:92:97:e4:35:64:b3:12:e6:
         0b:fe:26:c0:ba:c3:72:ca:7a:d1:dc:d0:97:0b:4e:8c:14:b6:
         19:f5:df:d0:1c:96:fa:48:16:80:ef:95:ba:fb:d2:9d:9b:31:
         9f:32:42:7a:f5:88:71:45:4f:82:88:2e:51:2d:02:36:df:75:
         33:c2:a8:79:26:72:e1:5c:e8:23:78:12:71:be:c0:34:8b:b5:
         8a:65:f5:39:95:9e:2c:4b:04:9e:20:cc:ef:0d:df:76:02:cd:
         4c:1a:88:55:48:9b:87:65:73:8c:c8:f0:6e:e8:1d:3c:47:d4:
         67:ff:fa:cd:33:74:53:12:31:ab:7f:ff:30:07:2c:1d:6e:68:
         c3:bb:78:30:20:77:50:a8:87:d7:24:e2:cd:85:39:eb:a2:7b:
         cd:53:b0:34:1a:a4:37:d0:32:21:17:07:06:94:ca:f5:c7:48:
         71:28:d7:ad:7c:cf:77:91:55:7e:b3:20:31:39:b2:f6:23:1f:
         4b:c8:35:09:8a:6a:bb:b4:fc:9d:f9:6d:0a:6e:40:e1:56:d9:
         24:c6:39:b6:f1:dd:5e:ec:02:77:1c:25:f8:3a:13:b2:41:21:
         da:74:56:8f:30:09:eb:d4:4e:61:e7:5e:b9:4e:71:25:83:6d:
         af:e1:cd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----