Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/753036-a138-44ad-856c-199fd7362517/1/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.mft
File:                     IJ-T1LXCl2-_w2zM5SPh5TsBnY0.mft (raw, json)
Hash identifier:          oyR9gbbG0Kh2TQ4uug0PGNQj8+APybAa5v0bd0i9TCg=
Subject key identifier:   81:F0:A4:7A:97:D3:98:9E:3A:1E:DF:9D:4B:B9:CC:06:CE:2B:03:66
Authority key identifier: 20:9F:93:D4:B5:C2:97:6F:BF:C3:6C:CC:E5:23:E1:E5:3B:01:9D:8D
Certificate issuer:       /CN=209f93d4b5c2976fbfc36ccce523e1e53b019d8d
Certificate serial:       018F3BFA189AABB21279499F69C5B2764457
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/753036-a138-44ad-856c-199fd7362517/1/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.mft
Manifest number:          0521
Signing time:             Fri 03 May 2024 01:03:17 +0000
Manifest this update:     Fri 03 May 2024 01:03:17 +0000
Manifest next update:     Sat 04 May 2024 01:03:17 +0000
Files and hashes:         1: IJ-T1LXCl2-_w2zM5SPh5TsBnY0.crl (hash: J9ucyhRkZVon7JAqRBj9YAc3ExHe3PhQSfMOI86k8DE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/753036-a138-44ad-856c-199fd7362517/1/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/753036-a138-44ad-856c-199fd7362517/1/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 00:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:fa:18:9a:ab:b2:12:79:49:9f:69:c5:b2:76:44:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209f93d4b5c2976fbfc36ccce523e1e53b019d8d
        Validity
            Not Before: May  3 01:03:17 2024 GMT
            Not After : May  4 01:03:17 2024 GMT
        Subject: CN=81f0a47a97d3989e3a1edf9d4bb9cc06ce2b0366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:66:33:00:61:ae:ca:bd:d0:ae:10:7a:2e:e6:
                    d3:97:bb:dc:d6:b2:96:3c:69:5f:03:21:dd:31:87:
                    dc:de:9c:28:5c:40:22:e3:70:db:2d:1c:19:d2:06:
                    2a:35:97:48:1c:92:e9:19:59:a0:02:dc:86:36:1c:
                    6c:28:1e:0b:08:b0:a2:40:37:cc:38:74:4f:92:f7:
                    4a:44:42:5b:68:25:e0:d6:f5:e5:0e:65:f4:08:99:
                    17:d4:75:a4:e7:52:66:a6:8b:6f:cd:9e:5f:f0:88:
                    aa:01:26:eb:96:d0:06:cd:ed:7d:23:75:80:1b:ba:
                    3b:e4:c6:14:12:55:fc:0e:1d:d8:86:df:e8:70:b2:
                    f6:91:5a:92:6a:e1:2f:3b:f4:be:ae:52:52:6c:90:
                    15:21:68:55:c5:02:09:17:2e:22:7c:66:bd:2d:23:
                    d3:bb:38:fb:37:c8:a3:1b:95:87:3d:b0:61:e3:2b:
                    0c:2d:54:d2:77:bd:e9:c4:b7:09:9f:22:25:e6:c0:
                    69:40:21:b1:39:be:ee:85:84:af:c1:98:0e:d7:2d:
                    9d:9d:51:7a:c4:7b:f7:fd:7f:3a:5f:f2:48:c5:12:
                    56:bd:12:ff:ec:f1:f6:6b:a9:8e:22:56:aa:7a:48:
                    97:3e:b7:95:38:7c:aa:87:d5:7c:d9:9c:4c:8b:8f:
                    c6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F0:A4:7A:97:D3:98:9E:3A:1E:DF:9D:4B:B9:CC:06:CE:2B:03:66
            X509v3 Authority Key Identifier:
                keyid:20:9F:93:D4:B5:C2:97:6F:BF:C3:6C:CC:E5:23:E1:E5:3B:01:9D:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/753036-a138-44ad-856c-199fd7362517/1/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/753036-a138-44ad-856c-199fd7362517/1/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ac:30:32:97:bb:5e:21:3e:cd:66:45:b9:4a:78:3b:d3:c4:
         7f:ae:22:28:7e:d2:7d:0c:a4:82:5a:44:e2:6a:83:cd:42:4f:
         e3:7b:f7:a1:f2:5c:41:f4:22:b5:b1:b8:a3:5c:82:c4:b5:17:
         19:28:2f:1d:dd:59:81:c4:47:14:ea:f2:22:34:0d:5f:fb:36:
         ae:7b:b6:d4:43:fe:b0:f8:e3:50:e4:ca:86:0c:85:1b:0d:fa:
         dc:55:29:19:db:8d:f0:9b:bd:3a:fe:18:a2:bf:98:97:8a:9c:
         2c:63:3a:61:5c:c9:12:a4:16:fe:03:bc:97:26:76:59:fa:d3:
         d7:bf:e2:69:6e:1a:e4:fc:c8:d0:8c:9d:8f:25:6d:56:c7:47:
         64:15:96:f6:f8:b9:e1:65:ca:d9:cf:6a:46:85:2e:a5:05:c3:
         bb:89:cb:9c:93:59:e8:0c:93:69:fe:75:2a:32:b4:57:a8:9f:
         fd:ae:53:31:9c:07:e4:c1:2c:f7:df:4f:f6:29:fc:8d:29:ba:
         6e:5b:22:63:0f:1a:65:5a:a1:a0:66:78:57:00:7e:e3:27:ad:
         90:5f:92:6f:d9:54:dd:69:2d:ed:c4:18:9b:a5:8c:bc:de:e2:
         12:7a:b1:21:d2:39:58:4e:03:60:92:c7:8f:61:63:fa:a9:c5:
         06:73:7f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----