Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
File:                     az921hCBSGU2b6pnz8Za0GnHz8Q.mft (raw, json)
Hash identifier:          FP1dbqztPXG0NPGWH2+XKUqOKeI6k3653elPpEm4yKY=
Subject key identifier:   D4:EC:31:1A:C8:43:DC:08:50:C2:0D:36:CA:C1:58:C6:B9:AE:A7:57
Authority key identifier: 6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
Certificate issuer:       /CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
Certificate serial:       018F8891CD55AB172318A5AB753AEC9ADC09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
Manifest number:          0856
Signing time:             Fri 17 May 2024 22:00:07 +0000
Manifest this update:     Fri 17 May 2024 22:00:07 +0000
Manifest next update:     Sat 18 May 2024 22:00:07 +0000
Files and hashes:         1: az921hCBSGU2b6pnz8Za0GnHz8Q.crl (hash: wbzEOGWUsCIxykTj7guvQuCKOzAgGWlLIC3nRjkfOwg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:cd:55:ab:17:23:18:a5:ab:75:3a:ec:9a:dc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
        Validity
            Not Before: May 17 22:00:07 2024 GMT
            Not After : May 18 22:00:07 2024 GMT
        Subject: CN=d4ec311ac843dc0850c20d36cac158c6b9aea757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:58:a5:19:9b:88:72:24:c5:a1:67:5f:93:34:
                    e4:4f:86:fd:b1:28:a7:8b:f3:95:ba:a5:8e:e3:72:
                    1a:fb:f5:aa:89:e8:fd:17:5a:a0:13:7a:7a:a6:e6:
                    5b:63:4e:f8:7c:8a:a7:4b:8b:ed:6c:cb:66:33:70:
                    21:1b:30:b7:41:84:49:6f:ba:28:53:c1:71:f2:6f:
                    b2:be:62:d5:71:26:46:f1:73:2b:51:f8:87:90:49:
                    c3:f0:95:f4:c0:5e:16:fb:e1:49:6c:b8:38:f2:ab:
                    b0:da:7b:8c:b6:d1:34:57:41:9a:b5:ca:47:c7:72:
                    87:a6:b8:29:07:00:44:ad:6c:32:52:f1:cc:f7:0e:
                    d8:c6:ae:16:f4:26:86:00:d5:8e:45:39:05:1e:da:
                    1c:be:95:8d:59:54:a0:af:92:44:fa:7a:33:39:b1:
                    bb:98:64:e1:f5:d6:0b:7b:39:d6:73:bd:91:50:a6:
                    bc:34:77:22:90:8d:da:99:d4:e6:e9:bc:c7:32:ca:
                    51:04:27:8c:56:ac:4e:a8:20:b5:5b:28:0b:fc:22:
                    d9:e0:05:a9:b8:7e:81:3b:e6:1b:c9:e4:97:da:2a:
                    f2:8f:42:ef:b4:3f:83:3c:33:0f:8d:a6:bf:2f:5b:
                    ba:fc:e9:e2:98:ea:88:92:55:4a:a6:da:40:9d:77:
                    32:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:EC:31:1A:C8:43:DC:08:50:C2:0D:36:CA:C1:58:C6:B9:AE:A7:57
            X509v3 Authority Key Identifier:
                keyid:6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:70:f6:d5:3b:79:6f:8e:91:b5:b4:51:80:72:73:42:4e:4a:
         cc:ee:2a:1d:42:6d:5b:42:e4:35:cb:04:02:45:88:a0:2a:a2:
         7a:f8:4f:52:7c:7f:75:c1:47:5a:e4:eb:b1:12:9c:a6:1b:e0:
         07:ff:48:34:f5:2c:57:f1:7a:ba:bf:be:30:7f:e0:f7:62:25:
         bb:17:f8:8a:18:ff:1d:7f:74:33:8d:4f:2d:0a:e4:77:2c:3d:
         e5:89:0b:b2:6d:14:9c:ee:6c:43:a3:fa:38:12:7f:4a:ff:8a:
         91:9a:32:2e:90:87:74:3c:49:fa:34:88:af:39:4c:89:c9:65:
         17:b9:dd:9b:fa:27:9a:1a:21:9b:d4:da:64:5b:04:89:8b:a9:
         3c:d9:ae:ee:97:e9:89:4b:c5:06:32:bb:13:b3:3b:08:84:39:
         89:25:eb:51:ae:16:97:b8:41:91:bd:4e:47:72:84:10:14:f2:
         fd:23:d8:49:1a:43:29:17:7c:59:19:77:b0:3c:ec:d5:b9:01:
         e2:74:fb:d9:81:64:7f:d7:a2:52:0b:28:6b:d9:e7:de:27:59:
         e4:b3:27:af:e1:3b:62:fa:b3:1b:de:36:f0:fe:2e:6a:78:70:
         a9:9c:e3:df:05:ed:92:33:6d:85:2f:e3:8f:ed:28:c0:de:bc:
         7d:6c:f6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----