Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
File:                     MMu06oV_eyolkC7geq4ucSLc1cw.mft (raw, json)
Hash identifier:          VegaSbVCAan0HC7PT0pJ8lxaLBOhemGjCGahz/4sDrk=
Subject key identifier:   1A:EF:EB:F2:E1:17:61:F5:95:C4:FC:9C:1F:40:33:C9:50:78:82:60
Authority key identifier: 30:CB:B4:EA:85:7F:7B:2A:25:90:2E:E0:7A:AE:2E:71:22:DC:D5:CC
Certificate issuer:       /CN=30cbb4ea857f7b2a25902ee07aae2e7122dcd5cc
Certificate serial:       018F8748A2825895432CA04FDED3246C5512
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:00:35 +0000
Manifest this update:     Fri 17 May 2024 16:00:35 +0000
Manifest next update:     Sat 18 May 2024 16:00:35 +0000
Files and hashes:         1: MMu06oV_eyolkC7geq4ucSLc1cw.crl (hash: dgZlOkz4WOMGn5niZOqfMkP4qTlKeKI8GuGg+O2iEek=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:a2:82:58:95:43:2c:a0:4f:de:d3:24:6c:55:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30cbb4ea857f7b2a25902ee07aae2e7122dcd5cc
        Validity
            Not Before: May 17 16:00:35 2024 GMT
            Not After : May 18 16:00:35 2024 GMT
        Subject: CN=1aefebf2e11761f595c4fc9c1f4033c950788260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6d:0c:57:d0:50:3b:7d:a5:47:88:34:36:ce:
                    bd:47:04:9f:ce:31:c0:3a:94:64:7f:86:0b:74:c0:
                    36:6d:6b:b2:bc:74:a4:0d:99:08:7e:0b:a9:95:19:
                    32:ef:ca:c3:cb:e2:6a:3a:61:fe:a8:02:68:a5:38:
                    3d:0d:cf:01:5f:ce:c1:e0:f3:93:8f:84:e5:ee:1c:
                    c4:e4:ec:3b:6d:22:50:33:23:9e:48:ea:65:d0:5d:
                    3a:8f:b5:8c:9b:c9:53:94:a5:24:71:ed:ab:c9:24:
                    d2:e6:82:bb:d4:66:31:8e:52:64:65:bf:96:50:c8:
                    f9:ee:43:d7:b0:a8:30:ac:4c:4b:86:07:e8:06:5c:
                    ec:e2:b2:da:ef:2c:0c:25:a4:8b:7d:a3:40:57:f0:
                    e6:f3:20:d9:a0:27:b1:8d:b1:7c:e3:65:94:34:8e:
                    83:ad:0f:a2:c3:11:16:eb:a0:2c:56:d9:6d:58:db:
                    0f:65:f7:15:6c:ff:6e:6e:cc:43:67:d2:1a:1d:63:
                    bd:fc:91:df:1d:36:3d:b6:d3:2e:1b:92:18:02:b6:
                    56:0f:3f:53:82:1b:93:8b:0c:8d:a7:0a:3a:78:50:
                    49:c1:f3:3f:3d:ba:a5:19:d3:d7:72:4a:52:11:7f:
                    61:ac:e7:e3:12:11:e3:da:d9:19:b5:80:2e:7c:dc:
                    6c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EF:EB:F2:E1:17:61:F5:95:C4:FC:9C:1F:40:33:C9:50:78:82:60
            X509v3 Authority Key Identifier:
                keyid:30:CB:B4:EA:85:7F:7B:2A:25:90:2E:E0:7A:AE:2E:71:22:DC:D5:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:71:0a:56:f3:20:d4:d2:cf:ae:cd:a2:1e:da:c1:37:98:34:
         59:cb:15:d0:89:f7:68:b1:a6:e4:7a:ac:63:d6:df:37:ba:c9:
         78:9b:ee:b0:9a:0d:7e:33:08:f2:56:7f:47:d0:50:1d:08:07:
         98:ef:c9:79:fe:3c:a7:13:00:a3:aa:aa:65:af:68:ed:06:ea:
         df:32:80:1a:51:cb:04:b9:ad:ee:6a:29:b4:c8:09:df:c0:b5:
         1c:03:e7:61:ae:0c:14:4c:a7:5f:ba:f1:d0:2d:0e:dc:e2:e9:
         de:d7:d0:02:fa:dc:e0:f0:93:a1:eb:5c:79:af:55:5f:49:cf:
         eb:67:67:f8:58:9f:4f:a1:7c:87:f1:ea:d7:65:4c:f4:78:c8:
         e8:a6:fc:93:61:5c:3b:c5:7e:84:57:9c:8b:a1:fd:74:1a:2a:
         7f:2a:71:0a:ad:20:5e:95:c0:6d:1d:5a:5d:e1:ca:a0:c6:b0:
         f9:f2:42:96:e9:09:ca:28:b3:09:b0:22:b9:95:e2:a5:b0:9a:
         2e:98:df:57:df:47:a1:94:f8:40:6e:ef:3c:70:d4:96:cc:38:
         e8:fc:04:d8:70:04:1a:3d:2b:89:1b:49:a4:8f:a0:65:4a:bc:
         78:00:c7:e6:15:2e:4e:0e:7e:87:18:09:5f:6a:55:d0:54:a1:
         0d:a9:55:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----