Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
File:                     kffw_3S3yfrqKXjtlehAmEkE3NY.mft (raw, json)
Hash identifier:          U/st78OFplNXM1zu6/Uw+3gALhuj6rtiGmTpilyky0g=
Subject key identifier:   93:F5:96:59:73:F2:2F:12:1B:12:E0:47:53:CB:59:38:EA:92:69:48
Authority key identifier: 91:F7:F0:FF:74:B7:C9:FA:EA:29:78:ED:95:E8:40:98:49:04:DC:D6
Certificate issuer:       /CN=91f7f0ff74b7c9faea2978ed95e840984904dcd6
Certificate serial:       018F87B646414DD0C2369634CB8A84CA27AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
Manifest number:          0534
Signing time:             Fri 17 May 2024 18:00:20 +0000
Manifest this update:     Fri 17 May 2024 18:00:20 +0000
Manifest next update:     Sat 18 May 2024 18:00:20 +0000
Files and hashes:         1: kffw_3S3yfrqKXjtlehAmEkE3NY.crl (hash: kNB3EYKNHEmnE2lHoOOiu/V30FMpevEtsTkg+2pv9GE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:46:41:4d:d0:c2:36:96:34:cb:8a:84:ca:27:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91f7f0ff74b7c9faea2978ed95e840984904dcd6
        Validity
            Not Before: May 17 18:00:20 2024 GMT
            Not After : May 18 18:00:20 2024 GMT
        Subject: CN=93f5965973f22f121b12e04753cb5938ea926948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4b:b7:05:bd:2b:a6:6d:09:0d:3f:9a:06:39:
                    4b:74:50:05:5d:8d:d7:0e:3d:72:a7:d8:14:af:46:
                    48:a3:9e:a0:e1:c7:62:50:f6:57:c0:ae:58:d3:55:
                    e6:96:05:55:eb:4a:7a:b7:2f:ab:c7:3b:3a:85:32:
                    bc:e4:3e:37:81:a4:ec:4e:42:fb:ab:94:5c:c2:ca:
                    6d:3c:64:e9:b6:80:e2:69:e7:6a:1c:cc:10:d4:64:
                    ad:7a:af:14:fd:92:49:12:40:0a:1d:09:23:c3:9d:
                    c1:80:51:c6:13:8c:b8:d4:81:5b:be:19:e1:68:f8:
                    ac:85:dd:a2:51:81:3a:d7:c4:2a:ae:52:3e:aa:e6:
                    46:06:8a:c9:e7:41:1b:91:af:96:00:06:a7:4d:7a:
                    98:e6:be:81:86:5e:b4:f7:1b:f3:bc:1f:3e:11:57:
                    f7:ec:1c:89:5e:8d:78:20:49:5a:cf:a0:ae:69:cf:
                    c8:7a:b4:a4:0b:94:d8:c5:40:c9:82:7f:a8:3e:d7:
                    1a:25:3a:d7:f0:2a:a0:19:72:4c:0b:30:af:5f:92:
                    b8:82:b8:e8:f9:ff:4a:3b:78:0a:46:7e:ce:3f:39:
                    09:1b:97:03:c6:95:b2:17:3a:67:d7:1b:3b:c2:ff:
                    d2:7a:c9:b7:11:17:6c:ea:52:8a:1f:d4:a6:7a:ec:
                    b8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F5:96:59:73:F2:2F:12:1B:12:E0:47:53:CB:59:38:EA:92:69:48
            X509v3 Authority Key Identifier:
                keyid:91:F7:F0:FF:74:B7:C9:FA:EA:29:78:ED:95:E8:40:98:49:04:DC:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:d4:0c:65:25:a0:42:11:4d:71:2b:83:26:d5:5b:27:3a:aa:
         de:e6:0a:b1:8f:19:c4:79:9e:63:94:18:9d:ef:77:8e:d6:0b:
         53:3c:90:bc:0c:6d:03:80:7b:9e:eb:83:5e:3d:67:f8:b3:d1:
         60:74:65:b8:13:33:54:cf:7f:28:3b:b9:10:36:12:e1:24:aa:
         a5:73:08:ee:da:33:45:63:fb:06:05:7d:d7:9a:71:8b:5a:f8:
         d7:3d:bc:58:69:4e:be:28:c9:ef:6e:22:ed:22:52:ae:6b:05:
         ae:23:cf:f6:99:85:11:3c:7d:f6:c9:a6:56:02:02:0b:9c:bc:
         80:6c:82:2a:63:7a:28:4b:25:67:12:03:88:20:9c:2b:8b:ec:
         94:ab:25:36:53:31:5c:be:2d:8c:42:e4:16:70:62:11:80:dc:
         ed:87:55:5b:b1:f0:94:55:1d:a1:ee:4b:60:53:c5:a7:dd:e3:
         20:36:c8:cf:a0:b2:8e:12:d6:15:d2:d0:a8:31:0e:3b:14:77:
         f7:49:e2:35:a4:4b:5e:f8:93:6c:f3:be:31:cb:ba:ae:af:f6:
         3a:24:b9:6c:12:bd:a0:73:34:39:c0:4f:fc:17:e0:2a:f2:fa:
         49:86:3e:e0:6b:41:29:9e:a2:8f:4f:e4:55:ff:18:d7:53:be:
         88:3f:fd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----