Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
File:                     04SkGZfu6k0F_MfNQLEhE6W7aeg.mft (raw, json)
Hash identifier:          p3d9thBenNK9onpM09BHkFi6dLU4DRJLaLVFg0eQz5g=
Subject key identifier:   E6:AA:F8:0E:2F:09:F6:23:40:A1:7B:70:1C:77:D1:D7:60:A4:A5:6A
Authority key identifier: D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
Certificate issuer:       /CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Certificate serial:       018F22DDA29509A27BD6C29BCED76DA40E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
Manifest number:          0550
Signing time:             Sun 28 Apr 2024 04:01:41 +0000
Manifest this update:     Sun 28 Apr 2024 04:01:41 +0000
Manifest next update:     Mon 29 Apr 2024 04:01:41 +0000
Files and hashes:         1: 04SkGZfu6k0F_MfNQLEhE6W7aeg.crl (hash: rHEt7TbC8zSJlvdU0LiyzKSAkssNXZ6Tu1AK7QNzUJ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:dd:a2:95:09:a2:7b:d6:c2:9b:ce:d7:6d:a4:0e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
        Validity
            Not Before: Apr 28 04:01:41 2024 GMT
            Not After : Apr 29 04:01:41 2024 GMT
        Subject: CN=e6aaf80e2f09f62340a17b701c77d1d760a4a56a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:98:84:b9:68:fc:99:c4:45:f3:2a:e2:03:dd:
                    09:26:b7:ac:db:65:28:7b:8b:fe:18:aa:52:28:82:
                    f3:86:b6:80:92:38:9c:0e:82:56:40:ba:01:a8:b9:
                    d3:d9:aa:fa:2c:f7:81:26:f8:49:2f:c4:06:dd:54:
                    24:f2:b1:8c:dd:a0:93:d3:f4:c5:f3:f6:89:fc:9e:
                    bf:2d:30:ac:e9:89:9b:02:4d:74:9c:12:fc:0e:f6:
                    b6:e1:7d:36:a4:42:e9:09:52:c3:1a:c5:4a:89:19:
                    a7:79:b7:b4:9f:63:b3:1f:f0:bf:c1:c9:a8:d9:fa:
                    2a:8f:e9:45:45:bb:24:61:a4:b7:17:65:fd:6e:18:
                    b0:34:2b:e5:5b:d4:ca:1a:e2:2e:b4:17:7b:86:e4:
                    6b:c3:35:c3:30:9d:db:70:53:20:c8:e5:59:69:96:
                    1b:09:12:6c:32:6c:19:cb:ab:30:2e:fe:9c:55:51:
                    a8:eb:41:b1:be:01:bc:a0:27:6b:f5:8f:20:71:82:
                    d3:0e:dc:f8:a8:6f:e6:68:c0:cd:1b:a3:b9:13:87:
                    fc:1a:91:d9:de:36:4e:b2:7e:1f:7c:14:5c:a0:a5:
                    10:d7:5d:c7:f1:0e:ce:de:e0:04:23:25:f1:0f:00:
                    e4:10:32:87:74:34:ca:45:3e:8d:0d:ba:58:67:47:
                    34:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AA:F8:0E:2F:09:F6:23:40:A1:7B:70:1C:77:D1:D7:60:A4:A5:6A
            X509v3 Authority Key Identifier:
                keyid:D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:1e:a8:19:03:8c:67:48:d3:63:d6:9c:5d:b0:fd:c0:3c:de:
         b7:2f:f4:d3:62:e5:56:16:af:ad:86:d7:cf:6d:12:76:d5:d8:
         d7:ed:92:57:6e:0f:62:13:c9:73:09:81:d5:4d:df:3d:ef:0c:
         a3:12:d0:6e:d8:29:71:35:8c:20:43:5f:94:6c:bc:6c:75:8e:
         1b:99:43:98:6a:a7:27:09:cb:63:68:4f:d0:25:90:98:0e:8c:
         ee:c7:63:df:27:12:5d:a2:a5:99:78:12:ed:bc:7a:1a:3e:13:
         cc:df:89:32:ed:f5:0c:ad:7f:eb:c9:9a:be:bc:75:28:41:0b:
         e3:f6:57:2f:d1:d7:dd:12:64:75:62:3f:94:f0:b9:93:89:35:
         21:37:1d:30:c6:18:4d:50:da:fe:c7:49:69:9d:d8:2d:a2:b5:
         a9:8c:59:a5:e1:4a:ea:ab:f7:f9:b0:80:73:ff:da:18:57:8a:
         19:10:bb:d2:ca:13:ff:52:18:1d:f3:57:27:f7:68:48:1e:e6:
         f4:18:c7:d2:c9:9a:49:97:0d:8b:11:45:19:d8:73:4f:fa:8d:
         be:96:75:53:59:03:77:8a:b5:70:fb:70:70:1b:16:34:96:81:
         91:69:1b:32:41:09:0a:71:1b:9a:de:a7:47:87:4c:b3:b3:0a:
         ed:9d:8e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----