Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
File:                     JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json)
Hash identifier:          6GbP72WsVmdNFx5eTJpH0aVy1xatr8enEuQOOR05KtI=
Subject key identifier:   54:B4:EF:0C:EE:4D:CE:92:E9:07:BD:30:D3:5E:B8:DD:4E:38:4F:AA
Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
Certificate issuer:       /CN=240fd0d33886d839c5cc90103a186e13a348ad50
Certificate serial:       018F89392D2D2AD661F23986799A35F1E20E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
Manifest number:          1175
Signing time:             Sat 18 May 2024 01:02:56 +0000
Manifest this update:     Sat 18 May 2024 01:02:56 +0000
Manifest next update:     Sun 19 May 2024 01:02:56 +0000
Files and hashes:         1: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: knT0IzEq13UMGZvr97nrEjyxNskwcAoYrqHfLC/PfNI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:39:2d:2d:2a:d6:61:f2:39:86:79:9a:35:f1:e2:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50
        Validity
            Not Before: May 18 01:02:56 2024 GMT
            Not After : May 19 01:02:56 2024 GMT
        Subject: CN=54b4ef0cee4dce92e907bd30d35eb8dd4e384faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b6:1b:1d:70:5f:32:75:01:a8:4e:cb:f6:76:
                    4b:ec:37:96:6b:38:01:3a:82:f9:ee:a5:6c:97:65:
                    e0:0d:ed:6e:d1:eb:e6:06:09:ca:d0:d8:94:8e:7f:
                    1c:55:e4:9b:c6:d7:e4:20:c8:37:33:f6:1c:2f:4f:
                    01:5f:54:3b:f0:ef:4d:34:a1:cd:aa:b7:41:b2:b8:
                    89:ea:ce:0e:17:2d:0b:f1:98:00:23:ef:8e:bd:b2:
                    3e:8a:88:2f:1c:ae:0a:60:be:d1:50:8d:11:98:98:
                    80:0a:ec:c6:1f:41:fe:ba:7e:af:de:f8:be:aa:3e:
                    b4:94:1e:d0:0a:41:bb:1c:af:d4:0f:bd:8f:c4:b9:
                    74:e3:96:f2:2d:55:53:d8:cc:24:8e:69:58:ce:07:
                    a6:59:5e:16:9e:9f:37:a9:d8:67:87:fa:10:6e:30:
                    a3:b3:20:dc:8f:42:d1:30:64:7f:e2:c7:b4:46:63:
                    5e:b4:38:d8:bf:e6:65:ac:9e:28:f3:01:98:cd:e7:
                    2b:34:a6:c5:79:3f:f8:4e:bd:bc:1a:f5:8c:66:19:
                    eb:05:09:23:5a:3d:b8:43:73:e1:d5:c3:76:7d:03:
                    17:2a:f6:38:4a:8f:07:e3:92:bf:48:38:bc:8f:a3:
                    af:81:54:fa:7f:ae:aa:2f:53:49:39:af:2a:c9:4b:
                    47:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B4:EF:0C:EE:4D:CE:92:E9:07:BD:30:D3:5E:B8:DD:4E:38:4F:AA
            X509v3 Authority Key Identifier:
                keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:60:44:ae:52:0a:56:4e:65:98:06:b2:bd:06:3e:da:b8:d5:
         6c:0b:62:36:de:30:ad:a3:58:6e:55:25:25:b4:b2:76:91:7f:
         58:10:fc:62:b1:f2:ff:52:c4:aa:41:2a:43:6d:34:32:06:26:
         57:8a:bd:28:17:b3:6e:09:9b:db:2e:a0:4a:c3:e6:54:46:5d:
         6c:aa:09:ba:f9:fd:97:a8:ad:ba:b9:11:66:64:c1:a9:9c:fc:
         17:d0:01:92:f6:bc:4a:30:e4:c1:eb:87:a6:8d:a7:40:25:26:
         33:9f:b3:f9:d1:92:d6:e8:d3:fc:94:cd:75:b2:7a:f7:24:45:
         16:b9:90:eb:42:d1:61:60:11:2e:4a:bf:7f:71:62:77:4d:d9:
         16:44:47:f0:1a:77:5e:83:a8:f0:c4:a0:48:4a:5c:58:35:14:
         38:cb:4c:4d:8a:f3:24:97:c4:59:2f:4f:f0:e7:0f:70:02:8f:
         27:b4:76:f4:d6:87:fb:b8:be:38:fd:d7:da:e7:d8:ae:bb:c6:
         82:ff:61:d6:74:d7:bf:2f:57:69:2a:c3:44:42:86:1a:b8:20:
         f3:61:7e:c9:70:d7:93:8f:14:78:6c:a9:85:e6:2f:db:03:5f:
         2a:f1:e5:57:15:90:a0:3e:08:ba:13:b4:b1:c4:75:4b:9f:31:
         15:37:77:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----