Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
File:                     SP34H7869DBnKkv2Qnc7lZxFCKY.mft (raw, json)
Hash identifier:          0iaQlIyMRb8CWF2hs7zCJHaU1k/PjK87kkK0VeQIGoc=
Subject key identifier:   AC:71:1C:0E:DC:9C:1F:2D:74:28:3F:D6:F2:99:0A:79:E6:53:0C:4F
Authority key identifier: 48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
Certificate issuer:       /CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Certificate serial:       018F8824457982C6CD2D8C223E9D443F4053
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
Manifest number:          0D2B
Signing time:             Fri 17 May 2024 20:00:29 +0000
Manifest this update:     Fri 17 May 2024 20:00:29 +0000
Manifest next update:     Sat 18 May 2024 20:00:29 +0000
Files and hashes:         1: SP34H7869DBnKkv2Qnc7lZxFCKY.crl (hash: oAaSP4Q22fnwxX6I2GSO2Va2W6to0lKm0ZDuNd4mr6Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:45:79:82:c6:cd:2d:8c:22:3e:9d:44:3f:40:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48fdf81fbf3af430672a4bf642773b959c4508a6
        Validity
            Not Before: May 17 20:00:29 2024 GMT
            Not After : May 18 20:00:29 2024 GMT
        Subject: CN=ac711c0edc9c1f2d74283fd6f2990a79e6530c4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:39:a2:5a:27:a2:02:e1:a4:c0:78:39:35:84:
                    f2:82:a3:2c:93:66:b8:48:55:6e:7d:33:9d:4a:47:
                    a6:0b:64:c7:b3:ba:da:09:74:f1:56:13:e5:71:81:
                    44:45:1b:7b:8b:ab:9b:a3:d1:c8:33:36:ab:d9:fd:
                    e4:43:e8:a2:c0:dd:c2:fc:18:ab:d9:ce:e0:d8:a8:
                    21:77:83:4f:99:9d:78:15:27:31:0e:bd:4b:3a:88:
                    14:39:73:99:31:a4:c5:7e:79:a2:23:27:e2:57:23:
                    b5:ed:aa:d6:ea:8d:91:27:18:28:7c:c6:b8:e6:54:
                    dd:f9:41:57:59:f1:8e:a9:0d:e9:15:4c:e2:18:dc:
                    6c:82:5f:cc:25:c0:03:d1:58:6b:15:6d:e2:1a:bb:
                    44:3a:16:a2:40:9b:68:2c:76:5c:59:18:8b:2f:7e:
                    74:61:f5:73:ff:56:97:8b:f7:a5:be:69:2c:dd:ca:
                    f4:66:3b:81:be:f4:44:8d:16:d7:f4:cb:01:71:f4:
                    6b:ad:44:46:15:71:dc:3b:55:c4:12:f0:4e:be:fc:
                    ca:4a:38:a0:fb:4b:58:09:91:a9:d9:24:28:0b:fa:
                    b9:f3:c9:d2:56:f8:91:db:af:c1:ff:95:c7:08:9b:
                    46:80:b6:bc:0c:23:cd:7f:cf:4d:1b:5d:cc:95:53:
                    b9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:71:1C:0E:DC:9C:1F:2D:74:28:3F:D6:F2:99:0A:79:E6:53:0C:4F
            X509v3 Authority Key Identifier:
                keyid:48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:0e:1f:40:40:90:ea:dd:f3:99:19:0a:9a:0a:3f:8e:5c:b3:
         c3:3e:20:8f:f2:8a:6e:8c:8d:39:34:6f:d2:44:19:5a:dd:e2:
         18:32:fc:69:3f:94:86:ff:e0:98:ec:18:9a:14:45:a3:cc:75:
         13:02:ec:fe:6a:d2:d9:59:87:53:13:9c:72:4d:b4:c0:3d:b1:
         67:fb:a1:8f:a8:52:cf:39:f5:b4:ef:d0:5c:d1:48:3c:d6:af:
         04:db:db:5b:08:a9:e7:fa:01:96:d4:ca:7a:9c:f1:05:b0:42:
         6e:26:f0:79:f6:9d:99:f3:18:ab:71:3d:ed:40:3c:d2:06:92:
         ba:37:f4:ae:e2:a1:5b:ab:86:b0:76:62:e3:7b:ee:f3:61:e6:
         1c:bd:76:46:83:0d:a5:ce:ca:5c:86:34:e3:53:72:76:d9:3a:
         7f:3c:b4:97:3a:ea:37:9a:a4:a2:00:74:e7:38:1f:60:05:43:
         8a:ff:d7:51:dc:65:7a:38:78:1b:d1:4b:b7:b7:17:e9:ea:53:
         4b:33:35:90:d6:48:b7:52:9f:de:57:01:5b:34:2e:26:5e:dd:
         01:27:7d:fc:3f:76:0d:11:c2:1e:7e:04:ba:d7:b4:f2:df:d2:
         b5:79:ab:01:ba:5e:38:79:6d:55:f5:87:3f:20:fa:59:1b:72:
         3e:6a:ac:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----