Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.mft
File:                     Mlpdv7OJlbWnn8HQ7jFEySeSTqU.mft (raw, json)
Hash identifier:          J8rc1Zm5TRkYNQ3tfWY9oV2wgkkvcyBiDcqqSVvcvEY=
Subject key identifier:   38:92:C4:2E:BD:69:92:AA:E9:BD:F1:C8:6A:D2:DE:87:B2:44:23:F6
Authority key identifier: 32:5A:5D:BF:B3:89:95:B5:A7:9F:C1:D0:EE:31:44:C9:27:92:4E:A5
Certificate issuer:       /CN=325a5dbfb38995b5a79fc1d0ee3144c927924ea5
Certificate serial:       018F87B69025EAAF2526BC1B4940BD8F90B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 18:00:39 +0000
Manifest this update:     Fri 17 May 2024 18:00:39 +0000
Manifest next update:     Sat 18 May 2024 18:00:39 +0000
Files and hashes:         1: Mlpdv7OJlbWnn8HQ7jFEySeSTqU.crl (hash: nyfmVCjqEiwcoRh3UwiM/T1IzOhunUvTcsNhDsXJb/g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:90:25:ea:af:25:26:bc:1b:49:40:bd:8f:90:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=325a5dbfb38995b5a79fc1d0ee3144c927924ea5
        Validity
            Not Before: May 17 18:00:39 2024 GMT
            Not After : May 18 18:00:39 2024 GMT
        Subject: CN=3892c42ebd6992aae9bdf1c86ad2de87b24423f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:59:3a:d9:07:6e:0f:59:01:cf:8c:3e:85:0c:
                    5e:75:71:20:4a:29:a2:df:04:37:4e:a0:0f:08:54:
                    e5:90:aa:1c:af:3b:43:10:4c:6a:82:85:27:b3:0d:
                    16:f7:b6:68:21:25:11:60:7e:c6:a6:17:0f:a4:eb:
                    cf:b4:40:8c:38:aa:62:f2:96:08:f4:e3:b1:f4:ac:
                    08:11:0e:49:09:76:d2:f6:f5:1b:ac:c5:67:f4:56:
                    3c:b2:00:47:d7:33:47:eb:6b:c0:76:64:4c:9f:26:
                    b2:d1:e0:97:bf:70:5a:8f:aa:bf:c8:56:95:ce:36:
                    3e:e6:fd:6a:84:8d:ca:ed:7f:ab:f5:ba:59:ac:fe:
                    c2:ec:6d:81:bb:9a:bd:74:f6:e0:0f:7f:d9:b5:82:
                    25:ed:ce:95:3a:21:90:a5:64:ae:9e:9f:e0:68:99:
                    ed:3f:6d:db:0f:af:f2:f7:72:43:ce:6a:0b:13:c0:
                    e7:f1:0a:99:8e:67:bd:c7:88:06:3f:32:90:80:33:
                    91:19:9b:74:94:26:84:2c:5c:98:ad:ab:4f:93:25:
                    04:72:0b:05:f4:5f:d8:ac:f5:8b:9d:fc:c1:56:71:
                    0f:3a:2d:22:a8:9d:bc:58:78:fa:62:1c:b0:14:54:
                    67:09:16:6f:b1:a4:45:00:70:a4:9b:66:a6:38:c1:
                    e5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:92:C4:2E:BD:69:92:AA:E9:BD:F1:C8:6A:D2:DE:87:B2:44:23:F6
            X509v3 Authority Key Identifier:
                keyid:32:5A:5D:BF:B3:89:95:B5:A7:9F:C1:D0:EE:31:44:C9:27:92:4E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:5b:ef:43:02:12:0b:40:7c:f8:90:e7:16:0b:d8:d9:f0:3f:
         51:9a:81:43:f2:cb:fb:11:55:f8:79:d2:7c:9b:ba:e9:20:77:
         a2:67:a2:d7:80:68:c8:5a:b2:e7:75:b1:b7:10:d8:cf:8b:29:
         67:6e:bd:f4:09:d1:e0:44:0e:da:0c:a1:7f:7d:7c:9b:25:cd:
         26:9a:6a:14:aa:a4:75:b8:2d:25:4f:16:70:73:b5:d2:9c:c9:
         d5:c3:66:a7:cc:36:c5:28:78:fe:f3:ed:ed:a7:18:a5:87:14:
         2a:27:b1:e2:5c:c1:54:c0:dd:e7:b1:83:50:86:bf:3a:62:f2:
         98:c5:65:3e:73:5f:35:98:5b:0d:b8:5b:be:36:24:b9:f7:6d:
         6c:c4:0f:62:a7:0c:23:c3:65:35:f1:fd:05:f1:51:2c:c4:b9:
         ac:d4:ba:57:5b:74:8a:c0:13:fb:6b:c4:d6:9e:38:07:a0:58:
         b7:65:02:ac:7b:87:a3:84:de:3d:f3:53:82:b3:87:44:a7:b3:
         bd:b4:8d:a2:2b:e8:7c:0e:93:89:fe:00:d9:5d:f6:cc:45:0b:
         32:43:16:2d:26:f9:2b:91:ea:67:bd:9b:69:a8:73:8d:79:8b:
         ba:e5:c3:81:27:b9:7f:d6:7a:a7:e2:13:64:2d:c7:0b:32:7c:
         17:e3:97:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----