Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
File:                     zqPt3xh6xsGoT4iU1jq7YFlieew.mft (raw, json)
Hash identifier:          RpWyr/KEZLHTZDFB9WO1Nvx0/tHdNjj3O07ZcWC1A30=
Subject key identifier:   67:EE:D4:53:01:12:2F:C0:0A:3B:CB:A5:34:57:43:9F:9D:C4:8B:A6
Authority key identifier: CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
Certificate issuer:       /CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Certificate serial:       018F874960E8447610F005A13D45E2D7E53C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
Manifest number:          0975
Signing time:             Fri 17 May 2024 16:01:24 +0000
Manifest this update:     Fri 17 May 2024 16:01:24 +0000
Manifest next update:     Sat 18 May 2024 16:01:24 +0000
Files and hashes:         1: zqPt3xh6xsGoT4iU1jq7YFlieew.crl (hash: mmECjuxZqtHEQ6QtCo4jzeUBZ6Tu+rWm2uKwXr+oLLI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:60:e8:44:76:10:f0:05:a1:3d:45:e2:d7:e5:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
        Validity
            Not Before: May 17 16:01:24 2024 GMT
            Not After : May 18 16:01:24 2024 GMT
        Subject: CN=67eed45301122fc00a3bcba53457439f9dc48ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0a:34:e0:03:c4:50:cb:e5:06:8d:b3:cc:4e:
                    45:47:0f:0e:5e:31:94:45:84:80:4a:74:41:23:fd:
                    ce:55:9c:f3:56:86:bc:e4:86:19:85:d0:4f:8e:df:
                    a6:2f:47:ec:9f:63:dc:d3:d1:02:01:23:27:e7:77:
                    df:54:94:39:f3:7b:78:17:63:67:0e:ab:af:2a:8f:
                    f9:bd:85:c0:75:17:27:4a:22:c7:fe:6d:99:52:7d:
                    8f:50:90:b3:7c:2a:b1:de:98:a9:02:a5:0c:40:55:
                    50:2b:c0:0c:4d:79:12:bd:af:18:eb:f6:f8:b2:26:
                    7d:86:8b:53:64:ed:3d:7b:ba:7a:0f:58:19:6b:42:
                    03:ed:97:e8:e5:be:cf:06:e6:0c:6e:8a:2d:13:2a:
                    11:55:e0:b6:f2:54:59:89:b7:a5:87:d7:df:bf:70:
                    1b:26:7c:db:b6:e2:61:8c:4d:f5:0c:7d:c2:f4:a3:
                    4b:9c:a4:ee:3c:6c:cb:91:60:8e:8d:d3:29:e6:21:
                    92:75:0d:18:00:b3:fc:bb:24:34:dd:73:38:25:8a:
                    5d:81:01:df:6e:4d:fe:e8:3c:ec:72:59:e1:9f:7b:
                    1a:aa:63:bf:e0:00:aa:de:3c:d4:4f:92:a1:ec:6d:
                    90:a3:3f:7c:6f:b1:26:67:4b:db:c1:98:a9:72:25:
                    a1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EE:D4:53:01:12:2F:C0:0A:3B:CB:A5:34:57:43:9F:9D:C4:8B:A6
            X509v3 Authority Key Identifier:
                keyid:CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:aa:4c:80:e6:9b:c8:ea:cc:7f:90:2d:b4:d2:02:0b:08:0b:
         1d:ea:28:81:8c:3c:73:41:2e:69:ea:ae:f6:27:75:6d:e9:50:
         ec:7f:af:b8:07:6e:9c:8c:61:f8:d1:52:4c:f9:b1:f2:86:46:
         dd:cc:f6:75:af:9f:6c:d1:9b:81:55:e3:42:4f:f5:f9:d4:42:
         7d:31:ea:4c:de:32:03:d5:aa:d6:bc:eb:21:92:ed:00:d7:3d:
         7b:5f:ad:17:19:d1:9c:8d:ba:bc:66:cb:69:b7:93:8f:b4:00:
         7f:d5:08:45:7f:08:e1:b8:27:a7:5b:1c:b3:d1:fb:d8:53:72:
         1c:59:b7:98:03:45:d5:97:2f:29:5b:e1:ec:17:18:2b:6e:2e:
         ad:39:5c:c4:fc:c0:cf:e3:cb:f2:be:b9:55:14:93:2f:88:1a:
         0c:41:da:f0:8f:5a:91:64:4d:c2:fb:2f:f7:47:bb:e5:9a:9b:
         43:a9:78:37:b9:0e:22:f6:c3:c9:7c:ec:96:8d:43:06:a6:98:
         a8:78:ee:14:61:e6:13:e1:2a:4f:f1:1d:a2:30:3a:70:4e:fc:
         aa:e9:f4:f6:f5:bf:4e:5b:1a:12:a1:cf:97:49:05:25:19:c2:
         53:d3:43:09:e3:b9:5f:d1:68:05:cd:c3:d0:c0:44:13:fd:4d:
         3c:f5:37:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----