Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
File:                     _5zoM1_DdnayDsFlXFPWfbyG6LM.mft (raw, json)
Hash identifier:          otgwHG43X1/AhG8VIaKvhTv/67mGbS8h5nmZgyNWg8A=
Subject key identifier:   80:FF:64:36:2C:33:34:48:22:F6:F0:2F:38:11:E3:48:60:37:50:E9
Authority key identifier: FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3
Certificate issuer:       /CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
Certificate serial:       018F98056B69770DAAB485D8583B42D12988
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
Manifest number:          09FB
Signing time:             Mon 20 May 2024 22:00:42 +0000
Manifest this update:     Mon 20 May 2024 22:00:42 +0000
Manifest next update:     Tue 21 May 2024 22:00:42 +0000
Files and hashes:         1: _5zoM1_DdnayDsFlXFPWfbyG6LM.crl (hash: SyXLrgrzxxIBNgQc4T38OUd4FN5hTvddZTv7gRw1NBQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 22:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:05:6b:69:77:0d:aa:b4:85:d8:58:3b:42:d1:29:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
        Validity
            Not Before: May 20 22:00:42 2024 GMT
            Not After : May 21 22:00:42 2024 GMT
        Subject: CN=80ff64362c33344822f6f02f3811e348603750e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:08:1e:47:09:7f:08:fc:4c:b5:0c:d4:5c:42:
                    b1:15:ad:38:60:a3:0b:92:b3:ad:a9:b1:80:6a:93:
                    b7:76:a2:3e:dc:48:3f:e9:f1:ad:a5:c6:96:83:33:
                    ff:68:2d:08:06:5b:1b:8c:80:12:8e:3a:27:e3:88:
                    fb:66:db:67:ab:9f:f8:25:3b:34:e6:59:17:5f:a2:
                    26:2c:96:ab:64:f8:f1:49:4f:f4:d0:bf:ce:9d:f2:
                    fd:f8:20:84:fc:8b:04:f4:a0:e9:4a:7f:15:cb:23:
                    18:a9:52:e5:bf:2e:74:9b:63:58:cd:84:6a:01:fa:
                    fa:ff:0c:50:84:b2:9a:9a:41:8b:90:e3:dd:f7:c3:
                    31:0b:fc:60:0e:55:e6:9b:84:4d:ea:db:87:c1:82:
                    88:01:45:5d:64:a3:04:16:50:77:2b:3b:9e:08:2a:
                    e7:09:c4:3e:27:e4:46:fa:86:7f:41:c6:b1:5c:8b:
                    1f:ec:7d:75:27:7c:ec:3b:e2:22:08:33:83:87:13:
                    25:b9:f8:2f:18:9a:27:03:c7:20:a3:49:0f:69:16:
                    fc:aa:28:8f:8b:1f:22:a2:14:a2:a4:97:f2:7b:cd:
                    13:22:1e:c5:b0:90:31:c7:7e:69:d2:eb:f1:45:62:
                    10:5c:51:e8:ad:e2:88:92:a6:7e:88:87:41:35:1f:
                    16:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FF:64:36:2C:33:34:48:22:F6:F0:2F:38:11:E3:48:60:37:50:E9
            X509v3 Authority Key Identifier:
                keyid:FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:25:3e:9d:8e:bc:27:68:0c:35:c3:27:49:85:77:be:96:10:
         0c:86:3b:cf:c4:8a:b2:53:12:27:f6:00:9b:0e:55:be:57:1a:
         db:df:25:19:b3:60:d6:48:e6:18:6a:3a:c6:2d:63:69:a5:08:
         98:c3:e3:b1:f4:49:de:bc:fb:79:5d:78:97:55:bd:d4:b9:7b:
         d8:00:b3:b7:e6:1a:63:5b:d8:2d:57:88:c3:36:03:af:73:32:
         07:fe:b2:07:32:a0:51:13:8c:65:23:a8:a5:43:3b:e1:52:64:
         1b:22:c9:b4:5f:44:f2:d9:4a:0e:8f:fe:5e:a4:4e:8a:5b:54:
         6f:ef:48:2e:bc:3a:d0:9b:87:be:1e:c7:bf:e1:9b:30:f7:65:
         2f:ff:29:a8:aa:87:1a:02:a7:b4:eb:1d:8d:11:21:1d:66:b5:
         e7:ee:3f:36:9f:f2:22:8e:e8:4b:fe:86:37:7b:9d:9a:2f:0f:
         bd:b9:42:19:5d:f7:ed:91:dc:86:b9:c5:86:47:1e:f5:b9:49:
         fd:fb:61:5c:54:5a:3a:23:a5:fc:02:6b:04:33:85:f9:f8:2d:
         3a:86:36:2b:ef:6c:89:53:91:47:a3:1b:40:3e:1d:9f:31:ee:
         a4:37:d8:74:f2:79:41:8f:14:29:f6:53:f9:36:37:57:68:cf:
         47:2a:b3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----