Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/16bf28-842b-48fa-894d-fbf7575aace2/1/Mh6FAflfcDdNRXa5sM1VW68fNas.mft
File:                     Mh6FAflfcDdNRXa5sM1VW68fNas.mft (raw, json)
Hash identifier:          aXB8dbmVHnANExITjzVVUcFvXiqQKXhSPUbOABbWmbM=
Subject key identifier:   04:C2:A3:DC:5A:9D:A0:64:41:04:9E:86:71:68:9A:D5:79:81:6B:D4
Authority key identifier: 32:1E:85:01:F9:5F:70:37:4D:45:76:B9:B0:CD:55:5B:AF:1F:35:AB
Certificate issuer:       /CN=321e8501f95f70374d4576b9b0cd555baf1f35ab
Certificate serial:       018F882477DB9470CA94930783FE65EE69C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mh6FAflfcDdNRXa5sM1VW68fNas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/16bf28-842b-48fa-894d-fbf7575aace2/1/Mh6FAflfcDdNRXa5sM1VW68fNas.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 20:00:42 +0000
Manifest this update:     Fri 17 May 2024 20:00:42 +0000
Manifest next update:     Sat 18 May 2024 20:00:42 +0000
Files and hashes:         1: Mh6FAflfcDdNRXa5sM1VW68fNas.crl (hash: 0w0gHuKG9bz6rT7X5Pp2rHbzsQmyrhIywTixX/GnT+w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/16bf28-842b-48fa-894d-fbf7575aace2/1/Mh6FAflfcDdNRXa5sM1VW68fNas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/16bf28-842b-48fa-894d-fbf7575aace2/1/Mh6FAflfcDdNRXa5sM1VW68fNas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mh6FAflfcDdNRXa5sM1VW68fNas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:77:db:94:70:ca:94:93:07:83:fe:65:ee:69:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321e8501f95f70374d4576b9b0cd555baf1f35ab
        Validity
            Not Before: May 17 20:00:42 2024 GMT
            Not After : May 18 20:00:42 2024 GMT
        Subject: CN=04c2a3dc5a9da06441049e8671689ad579816bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:28:4a:b7:9a:c6:c1:03:2d:33:94:9d:5f:3d:
                    1f:33:43:9e:52:c0:51:a1:35:05:22:6f:92:c1:76:
                    64:28:19:f1:94:92:ce:30:7d:6d:11:51:99:7a:5e:
                    02:71:14:ad:32:c0:5e:a8:15:12:86:35:e0:5b:69:
                    18:f3:73:73:d7:dd:4f:05:b1:db:2f:1e:4b:2a:7a:
                    ba:cd:d9:0c:d2:32:c1:65:f8:66:c1:c7:f6:74:ce:
                    9c:19:7b:20:59:7f:6e:4c:e9:13:95:09:f6:46:b7:
                    b5:ca:f9:27:5b:43:ff:aa:91:cf:4b:79:f6:81:86:
                    fa:18:54:93:28:ec:3b:84:5d:59:be:a2:fa:d7:4b:
                    c0:30:c1:76:7f:78:4d:3f:15:8e:8c:d2:69:2c:9a:
                    b4:d8:b8:99:1e:fd:04:c3:b8:93:b6:ab:e4:0b:c2:
                    dc:0e:de:72:9a:42:72:a9:20:07:67:4b:a4:fb:27:
                    71:6f:d8:1d:3a:db:23:de:0e:1c:00:1b:0b:a8:2c:
                    64:f1:7a:39:cd:12:fb:85:31:b1:fe:da:d5:30:8c:
                    07:45:67:48:48:41:cb:fd:6d:c5:ba:82:9c:65:3f:
                    4c:f3:0b:00:dc:d1:55:ed:b3:1d:a0:4b:52:fa:e1:
                    71:5a:65:31:0d:c9:77:59:8b:28:d5:4b:b5:02:c5:
                    bb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C2:A3:DC:5A:9D:A0:64:41:04:9E:86:71:68:9A:D5:79:81:6B:D4
            X509v3 Authority Key Identifier:
                keyid:32:1E:85:01:F9:5F:70:37:4D:45:76:B9:B0:CD:55:5B:AF:1F:35:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh6FAflfcDdNRXa5sM1VW68fNas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/16bf28-842b-48fa-894d-fbf7575aace2/1/Mh6FAflfcDdNRXa5sM1VW68fNas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/16bf28-842b-48fa-894d-fbf7575aace2/1/Mh6FAflfcDdNRXa5sM1VW68fNas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:75:d9:7d:73:e0:21:7f:de:d5:2d:8d:b8:f5:be:e2:5b:47:
         d4:64:d5:ec:18:3e:a8:30:ec:c0:bf:48:b8:03:de:ef:3b:b6:
         8f:20:9d:9b:eb:03:a6:e1:e3:20:42:c3:5e:73:0c:fd:17:34:
         53:2c:de:d7:e4:b2:52:2e:45:72:d5:79:20:e4:cd:63:2c:c3:
         f8:3c:cd:0e:5a:93:d5:4c:a4:06:3b:63:2c:16:21:e5:b9:5d:
         a5:97:7b:d9:e1:1a:13:e4:f3:32:e2:cc:25:66:b5:be:b8:63:
         e3:dc:e7:41:21:37:c6:3f:39:bb:db:a8:76:63:9c:d0:65:95:
         ec:e8:e5:97:ee:fd:34:4c:52:9e:0f:d6:f9:a3:8b:8d:5b:73:
         e6:8c:a8:b6:6c:28:3b:4d:16:91:6e:1e:8e:fb:bf:66:94:b9:
         d9:ac:58:ae:49:92:f6:9a:18:48:06:66:5a:fc:81:80:d9:fc:
         eb:04:eb:93:fd:ec:07:88:fd:0c:26:d7:bf:21:a5:d5:5d:16:
         f9:21:5b:a0:18:0e:69:5b:88:8e:1d:7e:85:0a:d7:ec:11:ea:
         f3:3a:c6:9e:d5:ce:c5:1f:b3:14:09:47:67:e9:e5:61:20:a6:
         26:b5:4a:3c:70:d4:3a:c0:2c:93:86:de:0f:4c:2c:cb:0a:0d:
         14:5f:b8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----