Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
File:                     UB7eLUfXfhQKl78pidqCpYdzyMA.mft (raw, json)
Hash identifier:          5xcK7gQ/7cZW5M91kJ46d+QfwM51pQ0DytqOqRo8PNA=
Subject key identifier:   29:57:47:8D:CF:45:33:D1:95:0D:18:B6:84:DF:A7:CB:73:0A:F1:57
Authority key identifier: 50:1E:DE:2D:47:D7:7E:14:0A:97:BF:29:89:DA:82:A5:87:73:C8:C0
Certificate issuer:       /CN=501ede2d47d77e140a97bf2989da82a58773c8c0
Certificate serial:       018F874AC5BA8EEB4B944515B617F905C531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
Manifest number:          085D
Signing time:             Fri 17 May 2024 16:02:55 +0000
Manifest this update:     Fri 17 May 2024 16:02:55 +0000
Manifest next update:     Sat 18 May 2024 16:02:55 +0000
Files and hashes:         1: UB7eLUfXfhQKl78pidqCpYdzyMA.crl (hash: nKh4TvcsJPAq3tJZNSwEyTb0ePiGdGFG5XTXp/D+oAo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:c5:ba:8e:eb:4b:94:45:15:b6:17:f9:05:c5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501ede2d47d77e140a97bf2989da82a58773c8c0
        Validity
            Not Before: May 17 16:02:55 2024 GMT
            Not After : May 18 16:02:55 2024 GMT
        Subject: CN=2957478dcf4533d1950d18b684dfa7cb730af157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:63:4a:04:b3:df:1a:e7:f5:90:9a:79:54:37:
                    ed:e6:fd:68:a5:d3:7c:5a:dc:d3:93:cc:f2:2a:19:
                    02:eb:72:9e:a7:39:d2:03:c5:2b:e1:00:d3:33:ce:
                    80:ba:a2:47:b5:7a:7a:55:10:79:75:3f:e0:8a:5c:
                    08:71:ed:0c:64:2b:ee:eb:b3:59:c9:da:38:2c:d5:
                    4b:5b:74:e5:47:06:8b:af:bc:67:33:2b:f5:d9:5d:
                    16:4c:fa:de:db:da:78:e8:b2:4d:69:25:9e:8b:85:
                    db:9c:43:74:ba:68:0d:f9:1b:62:41:2f:de:41:33:
                    7a:50:46:46:c5:b4:c4:61:51:c5:cd:d4:6f:65:75:
                    8d:9c:dc:5f:1c:fd:69:99:10:5f:d8:07:42:f9:b8:
                    f2:e8:c9:a9:9d:2a:a2:22:72:af:1f:13:d1:08:96:
                    8a:c8:d2:f0:94:57:98:e4:82:88:fb:2c:95:13:30:
                    51:f7:7e:5c:c4:11:25:59:70:70:0e:b1:a8:78:10:
                    ac:03:37:d9:32:de:6b:a9:85:9d:f2:97:99:8f:b5:
                    a5:3d:ad:91:30:16:ed:fb:ae:59:d6:da:42:4f:e3:
                    64:88:be:42:bc:51:f7:d5:d5:21:8d:1f:ff:f9:10:
                    dd:f4:a4:2d:9f:72:e2:87:0c:5a:25:78:46:bb:22:
                    98:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:57:47:8D:CF:45:33:D1:95:0D:18:B6:84:DF:A7:CB:73:0A:F1:57
            X509v3 Authority Key Identifier:
                keyid:50:1E:DE:2D:47:D7:7E:14:0A:97:BF:29:89:DA:82:A5:87:73:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:77:38:14:e1:bd:da:ae:fe:71:36:ab:1c:c2:5c:aa:36:99:
         55:da:52:d8:43:62:30:9c:39:a6:45:c0:5f:a0:e5:51:50:70:
         45:63:18:fc:b5:a0:6c:31:66:92:38:3f:64:2c:75:3b:09:98:
         48:cc:10:21:d3:f9:f1:07:05:86:f7:eb:4c:e9:83:d7:ac:44:
         1c:9b:5e:3a:30:e3:3a:04:b6:d3:6a:1c:d1:28:98:fe:ba:fa:
         82:27:90:a5:2f:6e:13:34:b1:ab:19:ba:18:98:4d:12:7c:68:
         c1:eb:0f:5d:8c:09:90:d0:16:d5:89:24:31:5b:45:12:85:76:
         cd:90:ce:b7:b6:0f:e5:6e:00:1a:af:6a:e3:e3:b0:d7:d8:7d:
         ac:4b:07:dd:3a:a3:84:1c:02:c6:8c:fb:80:a3:01:f1:ce:e7:
         9e:41:46:86:9e:0b:b6:b4:1a:47:f3:29:5f:2e:c7:61:f7:30:
         f7:94:56:f4:4c:c6:7e:f5:38:52:68:86:bf:2c:a3:f7:87:1c:
         2b:3a:21:1b:49:e5:d0:99:c3:e0:36:9b:0e:cd:9a:6c:a9:ce:
         df:99:42:ee:96:90:91:7b:38:d0:f8:fe:a7:ae:6d:6e:36:e3:
         fc:5a:fa:8a:a6:84:d2:2b:c3:7a:88:7f:16:7d:1c:68:af:bd:
         96:a9:68:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----