Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
File:                     tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft (raw, json)
Hash identifier:          oP5Xn6uy+/spucHuYQRiGPQE754aM2Kcrsw3JlXdYBY=
Subject key identifier:   A9:7E:27:92:17:D4:9C:1F:29:78:22:80:C9:B6:DD:E4:77:FD:52:B2
Authority key identifier: B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
Certificate issuer:       /CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Certificate serial:       018F89382E6FAA1766EE19F95BADDDC8848B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
Manifest number:          0AF5
Signing time:             Sat 18 May 2024 01:01:51 +0000
Manifest this update:     Sat 18 May 2024 01:01:51 +0000
Manifest next update:     Sun 19 May 2024 01:01:51 +0000
Files and hashes:         1: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl (hash: repF3qylRejCq5WuRC5Swb11+LusRCzZCj9b3vbUhZc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:2e:6f:aa:17:66:ee:19:f9:5b:ad:dd:c8:84:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4bc3f0232303f5b037745ec53a66c738256bf43
        Validity
            Not Before: May 18 01:01:51 2024 GMT
            Not After : May 19 01:01:51 2024 GMT
        Subject: CN=a97e279217d49c1f29782280c9b6dde477fd52b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:59:dd:f4:c2:ed:a3:d8:31:ba:bc:59:0f:87:
                    2c:f4:85:1d:61:d8:a4:f8:2a:1e:9b:44:11:e1:4e:
                    e6:57:f8:8c:62:92:87:5c:e9:0a:71:2e:d6:87:22:
                    09:a8:0f:6e:7a:6c:68:37:ee:c4:f4:10:63:cd:bd:
                    95:90:db:4c:30:6b:a0:81:63:34:e3:44:49:20:28:
                    0e:6f:2a:6c:fa:b9:d4:3e:44:1b:d3:12:7d:d4:55:
                    1c:43:1e:a0:d8:2c:0d:d7:86:22:0b:74:66:25:d3:
                    d7:48:e7:11:13:50:ed:29:32:70:92:95:34:40:70:
                    05:bf:c4:aa:93:c8:4e:2a:39:f9:1f:f0:36:3f:fa:
                    82:6a:f5:ff:94:fa:f1:a1:1e:f5:10:83:b0:3f:8a:
                    7a:0a:ca:66:33:80:a8:74:59:45:04:8b:03:70:72:
                    3c:19:cb:ec:c8:ba:ab:a3:ee:cb:20:7a:fd:64:15:
                    fb:30:28:81:6b:44:ab:78:de:9f:e5:f9:75:c3:c7:
                    1a:25:0a:c2:d6:57:c6:5f:6b:02:46:b2:62:94:f5:
                    d1:a6:c0:90:91:64:d8:99:bb:d0:11:28:0b:be:6c:
                    b7:61:b4:cc:a9:5d:a5:20:82:46:8d:bf:9d:e5:b9:
                    4e:0f:71:f4:ae:8a:8a:77:23:a7:51:b8:aa:71:2f:
                    15:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7E:27:92:17:D4:9C:1F:29:78:22:80:C9:B6:DD:E4:77:FD:52:B2
            X509v3 Authority Key Identifier:
                keyid:B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:65:69:d7:8a:a9:f8:1f:f8:8a:65:89:5f:e6:7b:d3:5a:6b:
         a2:b7:d8:a0:87:0a:1f:f1:f2:3a:af:99:c5:ce:c9:b3:1f:2e:
         33:2c:b0:6b:40:e3:a1:35:c4:94:87:dd:59:0c:b3:1d:dc:89:
         d0:45:7f:f1:da:d7:e9:d3:fb:f0:58:9b:34:fb:f6:b3:5c:b6:
         c2:65:f8:ac:d7:84:28:21:0d:b7:76:86:36:ac:bc:be:da:ca:
         6a:2a:27:f8:7e:fe:ac:4a:16:e6:bf:7a:22:f6:2d:ff:45:aa:
         ea:a1:a6:d7:18:c3:80:66:30:12:7b:98:b9:58:bd:0d:b2:44:
         50:cc:96:87:6c:fb:e2:fa:65:f3:c8:57:11:53:c7:de:4a:99:
         29:63:d5:f3:23:63:3d:58:9e:de:5d:4a:aa:f3:44:eb:42:77:
         e2:b3:ea:7e:f9:8a:12:fb:97:e8:14:57:b3:63:58:0a:fa:9c:
         44:e5:95:b6:a5:53:54:c1:46:df:40:15:94:0f:42:47:be:ba:
         f8:f3:aa:4f:c1:35:b9:ee:42:c4:df:96:33:d7:ae:3e:f2:be:
         b5:8b:56:55:3a:cf:f4:25:2d:0d:11:e3:d2:75:b6:e8:86:13:
         d9:f6:29:e8:ca:8b:89:7a:2e:a1:82:d4:f3:68:1d:69:9f:18:
         b3:54:ed:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----