Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
File:                     u7kUAX20Xp91443ePwNXzitx2Cc.mft (raw, json)
Hash identifier:          YJbWRQyq3HIBvqQY9SN9STiz1T7Q6bwJtilKya0Qh8c=
Subject key identifier:   EE:A7:A2:17:D2:A3:63:F0:B8:D3:01:32:79:85:5B:0D:20:99:8F:81
Authority key identifier: BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27
Certificate issuer:       /CN=bbb914017db45e9f75e38dde3f0357ce2b71d827
Certificate serial:       018F893921C9EAA0E48E86ECD94C6026BD12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
Manifest number:          0223
Signing time:             Sat 18 May 2024 01:02:53 +0000
Manifest this update:     Sat 18 May 2024 01:02:53 +0000
Manifest next update:     Sun 19 May 2024 01:02:53 +0000
Files and hashes:         1: u7kUAX20Xp91443ePwNXzitx2Cc.crl (hash: 4XU8vRBe0V9ozxQAAUXj5FMOP75kDWI4vHyn9W9JB9M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:39:21:c9:ea:a0:e4:8e:86:ec:d9:4c:60:26:bd:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbb914017db45e9f75e38dde3f0357ce2b71d827
        Validity
            Not Before: May 18 01:02:53 2024 GMT
            Not After : May 19 01:02:53 2024 GMT
        Subject: CN=eea7a217d2a363f0b8d3013279855b0d20998f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:68:ec:4a:fd:dd:b7:a3:30:3e:82:21:6f:e7:
                    6d:ae:35:0b:1a:13:f1:30:93:51:8a:ff:2d:d4:48:
                    ef:19:6c:de:be:3e:4b:05:60:b7:77:e3:07:f4:89:
                    a8:1a:08:48:fa:29:b1:39:6d:e8:3b:64:8d:32:29:
                    47:ea:5d:6d:fa:7f:d4:a0:e0:5b:14:81:8f:d8:6c:
                    e9:61:de:b7:ba:cd:f4:9f:3e:70:f1:28:31:b1:69:
                    e7:77:53:98:7d:00:d7:67:da:25:16:ef:76:72:74:
                    44:5e:ca:3c:16:99:6e:04:be:47:69:b1:0a:02:2c:
                    6b:7c:f2:fe:2c:19:3c:a3:3e:6f:23:31:e0:da:78:
                    69:c8:66:c7:94:5b:a8:32:7f:f4:df:3a:6f:9f:82:
                    77:56:4b:b1:bf:bf:b5:03:a8:5b:d1:80:bb:5f:9e:
                    d9:f3:fd:07:05:bb:15:bf:12:c7:68:63:89:34:ea:
                    dd:8f:2b:90:21:2c:d3:22:cf:0c:09:f3:d6:e5:c5:
                    ff:52:69:44:c0:f9:6c:78:da:39:d3:89:35:a7:d4:
                    99:c2:6c:75:73:9b:fd:b7:c9:6d:fd:4d:29:e7:23:
                    9a:7a:14:fb:b4:f0:de:90:ad:0b:69:76:a2:9f:d3:
                    6d:14:39:38:1b:c5:e1:96:5d:f4:1b:d2:f4:1a:19:
                    e8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A7:A2:17:D2:A3:63:F0:B8:D3:01:32:79:85:5B:0D:20:99:8F:81
            X509v3 Authority Key Identifier:
                keyid:BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:c8:2e:e6:03:f1:6e:b9:ad:9b:98:e9:ea:07:8c:ad:61:01:
         18:df:3c:a0:7e:43:e4:cd:11:63:c2:2f:ea:ac:3e:30:bc:2e:
         ad:fc:95:2d:17:1c:d5:7d:d4:94:a3:b1:ab:70:dd:27:dc:24:
         bc:2b:ab:de:22:74:5b:fd:05:ad:6a:68:5c:f3:53:e6:61:28:
         b2:19:99:02:97:fa:9f:5c:ff:c3:0e:60:90:05:7f:4c:d8:ce:
         24:53:58:65:b3:fd:2e:fe:fc:fa:e4:ed:75:37:ba:29:2d:0f:
         36:73:e6:54:4a:14:b5:7f:c5:dc:51:61:af:8a:bf:53:64:39:
         be:eb:17:55:d1:07:fc:72:82:92:f0:bb:67:d1:e4:85:67:ae:
         32:13:52:ab:eb:c3:6e:c2:3e:76:52:1a:5c:a1:0e:73:00:89:
         f9:95:0b:f2:ec:3a:fa:fb:9c:f9:cf:20:80:0f:ee:88:86:e5:
         3e:b2:07:f7:5c:20:71:b4:73:1f:c9:23:26:f9:07:76:b6:39:
         99:ba:6c:6f:20:f9:5e:d3:5b:99:cf:f0:2c:f7:e4:91:d3:af:
         b0:57:92:93:81:8c:8c:85:33:b9:f1:03:79:73:9a:90:3a:5c:
         4c:75:08:74:5a:34:8c:62:9e:83:51:d0:25:95:f3:e8:9b:c2:
         e0:61:e9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----