Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
File:                     TF_Sw94QWTTPD_SdJtnciFjOXdE.mft (raw, json)
Hash identifier:          RKZrdbHp2YQ4om9ay14tnQ0w/Tu0hi98Ahbj7I0/94Y=
Subject key identifier:   C6:20:DA:74:70:AB:8D:F8:49:38:E0:62:34:9A:35:30:8F:5A:E5:31
Authority key identifier: 4C:5F:D2:C3:DE:10:59:34:CF:0F:F4:9D:26:D9:DC:88:58:CE:5D:D1
Certificate issuer:       /CN=4c5fd2c3de105934cf0ff49d26d9dc8858ce5dd1
Certificate serial:       018F8936B259C2F1AED2F8562A9AC74E3469
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
Manifest number:          0B36
Signing time:             Sat 18 May 2024 01:00:14 +0000
Manifest this update:     Sat 18 May 2024 01:00:14 +0000
Manifest next update:     Sun 19 May 2024 01:00:14 +0000
Files and hashes:         1: TF_Sw94QWTTPD_SdJtnciFjOXdE.crl (hash: azkOyEskidkTehgnnaDflBSpohX+HAD405Ml7DSLB6Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:36:b2:59:c2:f1:ae:d2:f8:56:2a:9a:c7:4e:34:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5fd2c3de105934cf0ff49d26d9dc8858ce5dd1
        Validity
            Not Before: May 18 01:00:14 2024 GMT
            Not After : May 19 01:00:14 2024 GMT
        Subject: CN=c620da7470ab8df84938e062349a35308f5ae531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d3:54:87:33:bf:6e:ee:64:5d:f9:7e:50:83:
                    52:c6:41:a7:c5:e2:a9:59:13:aa:49:87:e6:12:d8:
                    65:58:67:8e:9e:ca:c8:44:76:96:b9:b5:dd:53:24:
                    e1:12:91:f2:02:52:48:cc:82:3b:f0:ba:ea:25:64:
                    b5:0f:09:e8:e2:e9:5d:db:de:68:db:a3:19:b1:ed:
                    25:0b:41:47:41:3a:e2:24:9e:d9:7f:30:d5:45:c0:
                    12:0b:8c:97:2e:92:5e:b8:56:25:37:fc:d7:53:f2:
                    2e:80:02:0a:4b:60:a5:86:7e:e2:ae:04:89:8a:46:
                    e1:7b:68:00:28:86:44:ca:05:72:7d:eb:75:36:04:
                    11:7d:cd:97:96:f7:7b:29:ec:19:e6:06:33:18:33:
                    37:c5:39:5d:f8:5c:c3:1c:83:e9:29:2a:53:da:a5:
                    68:25:0f:ec:6d:c0:30:e0:7b:15:2b:8d:d2:96:67:
                    53:ba:2b:65:45:4a:a8:a7:ad:ff:34:60:f4:b8:c8:
                    bf:e8:65:57:52:d1:57:c9:6c:a2:c2:98:e5:00:2d:
                    75:ca:90:1a:2a:ac:c3:f2:2a:27:df:e1:ac:09:87:
                    68:49:c8:2d:a9:8a:33:18:e8:4a:8e:b5:c5:aa:96:
                    56:06:2e:08:e7:ba:00:c3:d9:cb:7c:90:3a:a1:19:
                    56:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:20:DA:74:70:AB:8D:F8:49:38:E0:62:34:9A:35:30:8F:5A:E5:31
            X509v3 Authority Key Identifier:
                keyid:4C:5F:D2:C3:DE:10:59:34:CF:0F:F4:9D:26:D9:DC:88:58:CE:5D:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TF_Sw94QWTTPD_SdJtnciFjOXdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/54f602-c712-4d72-a46a-208565bb2d63/1/TF_Sw94QWTTPD_SdJtnciFjOXdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:28:48:8e:73:34:2f:81:10:e8:7b:4e:c4:df:54:bf:29:68:
         2d:4f:22:b4:ca:2c:36:dd:d1:33:26:36:c8:ae:56:39:16:4a:
         01:40:0b:a2:12:e6:e1:cf:22:2b:04:dc:ed:8e:02:e1:b0:07:
         79:40:fa:09:a7:cf:0c:98:9a:88:74:ea:90:d3:56:46:91:40:
         e9:ca:69:cc:d1:c3:48:a6:4b:f3:73:ec:97:b0:05:b5:50:0c:
         b2:13:27:9f:d2:02:09:a0:a9:98:a8:f2:75:a3:f0:0c:2a:54:
         29:2f:e8:72:a0:a1:75:2d:00:3c:24:c2:dd:2f:0a:07:57:c6:
         ff:0b:16:d8:5f:59:73:e6:b8:26:81:b0:f1:c7:57:28:47:da:
         1f:6a:03:ce:3d:73:05:75:c3:c3:f7:fe:9e:a4:08:11:c8:aa:
         45:b7:74:e5:5d:38:2f:44:8c:41:0d:49:81:bc:f0:23:f6:f2:
         12:7f:6c:15:85:ec:53:52:56:cb:b5:87:d1:63:3b:0e:fa:c5:
         85:7a:c1:b1:1b:f7:d3:fa:8c:29:e7:bf:30:0b:8a:bb:79:89:
         5f:b0:f0:5d:75:67:87:74:d2:f9:6c:bd:c9:80:24:4f:99:cc:
         97:9a:61:df:31:65:07:8e:8a:ed:ce:c2:d5:e7:95:1e:25:2d:
         d5:26:d1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----