Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
File:                     Rii90MjhtQTSlPijkEyNV65jg_Q.mft (raw, json)
Hash identifier:          rBXK/MXKEvULroh5QR0C2/8cOqo1TZa1c683YKATMVQ=
Subject key identifier:   56:26:3F:2E:0E:9C:10:01:99:3D:AD:E6:D1:EF:66:6C:21:6C:6F:02
Authority key identifier: 46:28:BD:D0:C8:E1:B5:04:D2:94:F8:A3:90:4C:8D:57:AE:63:83:F4
Certificate issuer:       /CN=4628bdd0c8e1b504d294f8a3904c8d57ae6383f4
Certificate serial:       018F98ABC7F84BE725513354CE2D1578340C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
Manifest number:          117D
Signing time:             Tue 21 May 2024 01:02:25 +0000
Manifest this update:     Tue 21 May 2024 01:02:25 +0000
Manifest next update:     Wed 22 May 2024 01:02:25 +0000
Files and hashes:         1: Rii90MjhtQTSlPijkEyNV65jg_Q.crl (hash: vrPlr0TE1CMoA7do0dggnoJHekhqXb6M3pOpi5tg4/A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 01:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:ab:c7:f8:4b:e7:25:51:33:54:ce:2d:15:78:34:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4628bdd0c8e1b504d294f8a3904c8d57ae6383f4
        Validity
            Not Before: May 21 01:02:25 2024 GMT
            Not After : May 22 01:02:25 2024 GMT
        Subject: CN=56263f2e0e9c1001993dade6d1ef666c216c6f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ae:1d:ff:f5:6c:a9:cc:1f:c8:e9:e2:af:a7:
                    92:17:3a:98:e0:39:d3:25:ed:50:96:4f:ec:78:d3:
                    9d:24:e5:6a:ee:27:cd:0b:a0:49:02:ef:bd:2a:e4:
                    ba:ca:cd:f4:4d:71:f6:e5:5f:a9:cd:1b:fb:61:b4:
                    38:fe:54:5b:75:ae:a2:8f:4e:1e:05:5f:60:33:30:
                    e9:95:cf:8b:31:5e:dc:04:3e:b4:6e:f3:cf:65:28:
                    9a:95:82:01:58:2a:c9:38:3f:32:c5:93:c4:e7:b3:
                    03:98:37:2a:ad:97:96:47:26:b1:5b:70:41:8f:6f:
                    36:63:23:17:00:2e:b5:17:87:0b:1b:e4:f3:8f:0c:
                    3f:2f:1a:d7:2e:6a:39:e7:5d:96:49:bd:02:43:73:
                    6d:8a:91:3a:6a:65:34:b3:40:4a:c2:c7:74:7b:e5:
                    19:b7:76:fe:27:ae:3d:57:ea:3e:0a:4d:47:13:c6:
                    fd:79:94:49:33:f4:e3:af:94:56:2f:c9:3a:48:e4:
                    f1:36:1f:8f:54:7d:0f:51:a8:08:a0:90:bd:77:42:
                    73:e5:f4:6b:4e:eb:ec:26:7f:28:2f:a1:5e:ed:35:
                    08:fe:9f:3e:68:24:03:8e:e7:7b:3e:34:f6:c2:ba:
                    e5:b8:0f:b8:42:14:08:25:85:40:9f:5a:fa:6e:a2:
                    4b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:26:3F:2E:0E:9C:10:01:99:3D:AD:E6:D1:EF:66:6C:21:6C:6F:02
            X509v3 Authority Key Identifier:
                keyid:46:28:BD:D0:C8:E1:B5:04:D2:94:F8:A3:90:4C:8D:57:AE:63:83:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:82:27:33:1a:6f:ef:25:a7:63:2d:e5:d6:50:e6:01:d6:bf:
         e3:d2:1a:fd:58:fb:4e:ff:e3:95:52:42:b4:52:d4:8d:52:2e:
         75:c1:d9:aa:ff:5d:f5:f9:e6:c4:45:78:10:13:c6:68:fe:72:
         43:b6:50:f0:ee:66:37:37:43:a3:23:40:7d:62:d4:1c:01:99:
         a6:3f:55:ea:d2:3f:99:80:48:b5:8f:63:b2:9b:ef:d8:ab:f3:
         95:aa:88:ad:fd:8e:8d:e3:0a:80:31:11:29:c6:46:ff:6c:47:
         42:cc:71:75:00:85:17:f0:1b:3e:58:3d:ec:8c:73:68:57:a9:
         ee:6c:64:6d:a2:3d:14:6f:7e:ca:4d:f9:d6:be:99:44:7f:05:
         b4:32:dc:eb:91:42:aa:f6:95:ea:94:03:de:7d:b9:ed:06:f9:
         64:37:5a:7f:71:bc:8d:1f:9d:f4:2b:c2:26:36:1c:88:6a:f1:
         e9:a3:ab:37:8c:8c:8a:5a:f6:7c:df:a4:8c:b5:ed:69:ab:f3:
         d2:c4:bd:f6:35:73:29:75:43:b8:72:bd:8e:0d:c7:4a:4c:58:
         93:f5:57:9d:16:4f:68:75:de:a7:ef:a8:86:2b:d6:bc:5e:ad:
         cd:9f:48:c9:a1:45:04:02:92:07:0b:d1:21:93:07:ba:17:2c:
         0d:26:64:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----