Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
File:                     AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft (raw, json)
Hash identifier:          qs/pmQfFvU6d28QH6WYvf4eqwudZ1M+1RzNTrQ7QeR0=
Subject key identifier:   89:CA:30:25:3C:B8:73:E7:69:88:27:56:CA:46:14:97:DF:5B:46:77
Authority key identifier: 03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
Certificate issuer:       /CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Certificate serial:       018F8749E08076954870678C2435C313DCF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
Manifest number:          F7
Signing time:             Fri 17 May 2024 16:01:56 +0000
Manifest this update:     Fri 17 May 2024 16:01:56 +0000
Manifest next update:     Sat 18 May 2024 16:01:56 +0000
Files and hashes:         1: AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl (hash: zKfJrpgZKdV9qztb4EF2O16cK0gLUlUykQuOl40yGmo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:e0:80:76:95:48:70:67:8c:24:35:c3:13:dc:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
        Validity
            Not Before: May 17 16:01:56 2024 GMT
            Not After : May 18 16:01:56 2024 GMT
        Subject: CN=89ca30253cb873e769882756ca461497df5b4677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:79:59:d4:68:f7:8c:61:12:2e:33:22:dc:e0:
                    3c:ce:a6:53:73:6c:5a:cb:54:9c:49:0c:66:a3:19:
                    ac:cd:74:a8:09:dc:59:77:5b:eb:78:94:f5:b7:c3:
                    27:0a:f1:e3:47:b7:a6:2d:31:ce:78:a5:ce:17:57:
                    33:78:10:31:1a:90:7b:18:92:e4:6f:a6:15:50:97:
                    d6:ab:a6:40:21:8b:45:da:ce:33:df:b3:cb:55:fc:
                    16:88:85:ad:ab:5c:c0:9b:85:b1:dc:5c:1b:1d:6f:
                    2a:2b:53:3d:47:93:69:9f:51:c0:07:2d:d4:c0:95:
                    e3:69:4d:95:a1:49:bd:35:48:ee:b9:dc:c5:95:04:
                    da:b6:11:b0:d8:e0:51:53:c2:4e:1a:ff:5d:ee:b4:
                    48:35:8f:ef:97:a0:e6:eb:4c:a7:b2:2e:6b:f5:ca:
                    e7:db:df:c0:6a:fa:95:1a:e6:a7:ec:93:03:5a:90:
                    29:5c:5b:e3:48:f4:9b:20:5e:ba:e8:8d:31:f3:31:
                    19:fb:dd:a6:f2:00:8d:ca:94:db:e8:de:07:48:49:
                    0d:c1:3a:21:17:14:8e:6b:98:81:29:3e:70:b2:67:
                    f7:f3:68:4a:9c:0b:fa:85:d0:a0:49:31:84:31:93:
                    88:c2:2f:55:f5:0a:18:e1:ed:da:1c:75:37:b3:4d:
                    e0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CA:30:25:3C:B8:73:E7:69:88:27:56:CA:46:14:97:DF:5B:46:77
            X509v3 Authority Key Identifier:
                keyid:03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:45:c6:32:f3:ce:96:44:c7:64:e2:10:69:dc:e0:45:29:5b:
         56:6b:4c:e1:3a:da:8c:d5:6f:e2:c8:da:7f:40:2d:a1:6e:f5:
         f8:78:5c:3b:89:9c:96:cb:ad:0c:0d:37:66:db:6d:46:f6:a6:
         64:61:c5:23:cf:3b:f8:9a:81:78:fc:5b:14:53:6e:b9:32:3c:
         8e:85:ae:f8:f3:f0:fb:1a:bd:2f:fc:cd:76:19:4e:ba:b2:dc:
         8c:8b:b5:b0:7e:59:d7:12:b0:4f:f3:96:88:61:c0:bf:5c:e5:
         8f:85:7b:e1:f6:64:58:9d:3d:95:bd:4c:3c:a7:b6:20:09:2d:
         50:02:20:29:21:c5:99:c5:c2:ce:5f:fe:19:6c:b4:ed:34:cc:
         f7:bc:72:b0:cf:8b:34:18:44:d8:64:52:b6:9e:2e:78:c2:dc:
         6b:b4:c1:da:aa:d5:f2:38:8d:56:0f:0e:67:01:74:0f:f3:7c:
         b1:c7:c5:a7:81:a9:5d:0b:17:2a:c9:90:e7:3c:fd:06:8c:ae:
         72:56:0f:fc:06:98:6d:a4:18:be:fa:a7:9d:24:66:8f:67:a0:
         83:06:9e:d2:bc:07:bb:c7:cd:a3:b8:60:1d:ec:0d:93:33:04:
         39:71:de:71:1e:be:21:8c:17:8a:f5:96:f2:34:a3:a5:a2:d3:
         2c:ae:49:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----