Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
File:                     WVt4mYk7niSL5hVd9EX2MK5daHI.mft (raw, json)
Hash identifier:          OwkParibol/2r7UjYlVC5oUt9036mCYdh3rHVldDls0=
Subject key identifier:   B8:39:DC:1B:2F:30:81:5A:97:55:56:64:3D:0F:33:43:AC:9D:CC:DE
Authority key identifier: 59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72
Certificate issuer:       /CN=595b7899893b9e248be6155df445f630ae5d6872
Certificate serial:       018F9C87D566011AC03E75D62849ED4DEC1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
Manifest number:          1183
Signing time:             Tue 21 May 2024 19:01:38 +0000
Manifest this update:     Tue 21 May 2024 19:01:38 +0000
Manifest next update:     Wed 22 May 2024 19:01:38 +0000
Files and hashes:         1: WVt4mYk7niSL5hVd9EX2MK5daHI.crl (hash: 1fz85TR4TIMmj8q72L89qHDIFd7DhX+d4uwv7oyEJ3k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 14:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9c:87:d5:66:01:1a:c0:3e:75:d6:28:49:ed:4d:ec:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595b7899893b9e248be6155df445f630ae5d6872
        Validity
            Not Before: May 21 19:01:38 2024 GMT
            Not After : May 22 19:01:38 2024 GMT
        Subject: CN=b839dc1b2f30815a975556643d0f3343ac9dccde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:89:cc:1c:36:18:2e:77:07:ee:2e:78:6e:b1:
                    47:c4:87:f3:88:07:74:ce:0f:41:81:7c:a7:d8:1d:
                    42:d9:5b:74:37:5f:e9:11:10:7f:5c:10:b9:0c:43:
                    3e:08:ff:51:71:bb:e2:96:22:cc:50:d0:4a:06:4a:
                    2e:4a:3b:f6:f4:fe:40:03:59:4b:2c:6d:71:83:19:
                    b4:29:c5:34:d6:c7:b8:01:07:36:c2:c9:a3:57:d6:
                    7f:c0:04:0b:46:db:58:1b:4c:10:40:1e:c6:fc:a8:
                    43:58:2a:f2:59:22:03:d0:af:3a:7e:3a:f3:fe:26:
                    80:9c:d7:61:8d:48:a1:bc:23:e9:da:bc:6a:02:05:
                    ac:c2:fe:8d:8f:7e:6a:a3:01:ca:b1:cd:75:c3:ee:
                    14:d1:ae:74:ac:bd:9c:0d:0c:5b:a3:5d:df:42:7d:
                    6b:10:4b:e9:b7:a0:5a:05:1f:ed:36:46:c7:01:e9:
                    99:67:9e:5f:43:ff:24:73:de:cc:87:e0:1b:0d:55:
                    ed:2f:bf:88:56:9a:6e:16:fa:cd:67:c6:20:ef:dd:
                    17:a5:eb:82:65:1f:20:0b:a2:d9:42:72:2f:18:da:
                    1f:92:46:61:69:da:ec:7a:7f:43:cf:e7:ee:40:86:
                    0d:93:49:32:26:b2:de:c8:2b:33:f3:b4:0e:0a:4d:
                    4d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:39:DC:1B:2F:30:81:5A:97:55:56:64:3D:0F:33:43:AC:9D:CC:DE
            X509v3 Authority Key Identifier:
                keyid:59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:13:62:16:0a:a2:f5:71:f7:f6:dd:26:9a:b4:1e:74:88:cc:
         b6:08:4b:b4:f1:0f:18:d3:f3:75:54:6b:18:01:86:36:90:b9:
         13:64:e4:02:9e:e0:da:e1:08:1a:65:37:cc:a9:38:b6:d0:b6:
         d3:9b:66:47:02:8c:5a:b2:f7:d3:25:b7:59:79:91:5f:8f:f1:
         73:a3:d7:42:ac:b1:d0:40:2c:ad:51:ee:ea:de:c9:22:ae:2a:
         b0:4d:3c:d8:c8:96:48:db:76:10:04:78:2e:0c:b1:19:49:08:
         27:99:70:41:4c:5d:72:f5:bf:b8:39:a9:8d:43:56:78:49:64:
         de:56:cb:f3:7c:51:6f:c9:eb:2b:27:a8:12:e3:87:55:dd:1e:
         34:d2:f1:7e:c4:3a:6d:f4:f0:7d:0c:3b:c3:11:04:f6:96:92:
         cb:91:95:79:19:81:89:9d:d3:c9:28:b8:1e:17:72:f9:c5:50:
         3f:87:1c:46:6d:60:15:cc:c2:cf:7f:ed:16:7b:ae:36:30:3f:
         55:8f:36:f4:b8:98:37:76:12:1b:45:bf:fa:7b:ae:9b:d6:26:
         48:c4:b1:7f:6d:3b:28:91:3e:25:92:ba:2d:89:4b:a4:f2:da:
         58:9d:c6:d2:cd:50:c0:68:25:d4:65:cc:d4:ff:8e:5c:92:e4:
         73:be:cc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----