Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
File:                     a-pT2WLWegFI5je0tGib5NCEqeU.mft (raw, json)
Hash identifier:          gLzud8QitJ5NO+t8aMBqQBsAqmD6pZHtwQHsIadNc0I=
Subject key identifier:   4B:F0:C8:03:24:56:76:4D:2E:E5:3F:FB:DE:9F:69:2B:7F:B5:79:E3
Authority key identifier: 6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
Certificate issuer:       /CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Certificate serial:       018F87B67B914E2A1F4DC3681BBFF0EFEC0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
Manifest number:          0156
Signing time:             Fri 17 May 2024 18:00:34 +0000
Manifest this update:     Fri 17 May 2024 18:00:34 +0000
Manifest next update:     Sat 18 May 2024 18:00:34 +0000
Files and hashes:         1: a-pT2WLWegFI5je0tGib5NCEqeU.crl (hash: 5fEIuguIKJtO5yOEYE0xIMn5INnt62EdUg3od2Rf4bA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:7b:91:4e:2a:1f:4d:c3:68:1b:bf:f0:ef:ec:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
        Validity
            Not Before: May 17 18:00:34 2024 GMT
            Not After : May 18 18:00:34 2024 GMT
        Subject: CN=4bf0c8032456764d2ee53ffbde9f692b7fb579e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:12:d5:39:75:c9:fa:e5:ab:c2:be:8b:e0:40:
                    6a:a2:6d:e7:db:f5:06:6d:72:b6:b2:a9:39:29:be:
                    69:d7:c2:56:47:0a:55:f1:a1:40:da:ba:f5:05:4f:
                    74:0c:dc:73:49:68:17:95:08:91:0a:36:4a:f4:9d:
                    6c:59:fe:36:a6:99:65:d7:ae:de:00:58:21:6f:5c:
                    99:4a:7a:64:71:78:07:e3:d0:39:a4:4b:f7:85:4d:
                    ed:b2:77:0d:d5:31:69:38:5a:39:f7:1b:b1:da:7b:
                    7c:23:82:61:50:5a:83:ea:47:47:96:53:9d:e2:bc:
                    ff:4c:f7:4d:c9:e4:d3:42:b6:4c:75:2f:71:0d:41:
                    a0:de:55:66:e0:39:fb:d9:60:44:ec:9f:9f:c9:9f:
                    f7:3a:df:67:73:c5:c8:b3:41:aa:1a:05:93:46:e5:
                    b7:d9:7c:0b:db:8a:d1:33:74:a8:5b:7d:ac:80:af:
                    8c:6e:2b:b6:49:6f:48:2c:48:02:42:5a:e6:ca:b4:
                    d7:e5:88:79:1d:c1:60:37:80:da:24:52:ba:18:a8:
                    b3:32:59:24:23:89:61:2e:c6:5b:4f:b7:78:57:86:
                    7a:d2:7a:d7:64:ad:c1:b5:ba:59:26:ab:d4:73:6a:
                    c4:7e:14:fc:d1:c5:32:94:eb:99:e5:60:af:c9:f4:
                    dd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F0:C8:03:24:56:76:4D:2E:E5:3F:FB:DE:9F:69:2B:7F:B5:79:E3
            X509v3 Authority Key Identifier:
                keyid:6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:95:e9:42:22:cf:1d:3a:b8:7f:22:a3:28:d9:64:35:0e:cf:
         98:9f:e7:2f:0e:cf:54:44:ab:a7:22:f1:a6:57:92:07:e3:1b:
         f6:d7:56:f3:fc:a6:21:d5:f7:0f:97:ef:42:1e:a6:8e:ef:4d:
         6d:3a:5a:21:6f:09:2a:8d:06:e3:6b:9f:d9:73:4e:2c:22:e8:
         9f:d8:4c:e3:55:16:0b:f1:eb:5e:4f:80:cd:8d:cf:11:0c:19:
         f9:13:59:9e:b0:83:9b:4e:d5:4b:6e:8d:ff:79:55:f0:97:29:
         08:0f:1b:64:99:27:41:94:85:5c:9c:6d:73:8d:a2:35:8d:f4:
         48:33:2d:aa:0f:0d:60:8c:25:cb:86:33:57:e4:d5:ac:a1:3a:
         17:a0:aa:25:01:fb:79:fb:f7:d0:62:65:e7:71:45:d2:42:cf:
         58:8b:01:c8:e8:3d:49:11:63:c7:5d:84:22:fa:13:c7:e8:dd:
         e6:cf:27:e3:ce:f1:f3:d5:4e:d9:35:ee:47:4e:38:51:0a:00:
         3e:8e:94:4c:f4:02:3e:66:18:6d:35:c8:3d:56:c9:2e:5d:af:
         f9:7b:02:41:0c:f5:0d:ad:6e:b2:81:af:09:fd:ff:b9:31:b3:
         e0:05:97:69:39:d3:a6:5c:7f:70:dc:92:d5:9b:02:02:38:47:
         ec:d1:1a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----