Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.mft
File:                     dNUnZVf32kEAET2Fc5VmSBVA5hw.mft (raw, json)
Hash identifier:          dCvVo4M+tfksTU/pujpQ353Yw8tfMZwSo0SMcm/9uX0=
Subject key identifier:   BA:CB:E1:C9:65:0F:BD:AC:9B:76:0C:C7:FA:A4:29:6D:06:98:16:5B
Authority key identifier: 74:D5:27:65:57:F7:DA:41:00:11:3D:85:73:95:66:48:15:40:E6:1C
Certificate issuer:       /CN=74d5276557f7da4100113d85739566481540e61c
Certificate serial:       018F87B6C88921A439663F03DDA59390575C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dNUnZVf32kEAET2Fc5VmSBVA5hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.mft
Manifest number:          042A
Signing time:             Fri 17 May 2024 18:00:53 +0000
Manifest this update:     Fri 17 May 2024 18:00:53 +0000
Manifest next update:     Sat 18 May 2024 18:00:53 +0000
Files and hashes:         1: dNUnZVf32kEAET2Fc5VmSBVA5hw.crl (hash: EsaYNBeKX/DVuDyq+7HfU0TBOaZxsnYDSmjZrwxxJUw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dNUnZVf32kEAET2Fc5VmSBVA5hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:c8:89:21:a4:39:66:3f:03:dd:a5:93:90:57:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d5276557f7da4100113d85739566481540e61c
        Validity
            Not Before: May 17 18:00:53 2024 GMT
            Not After : May 18 18:00:53 2024 GMT
        Subject: CN=bacbe1c9650fbdac9b760cc7faa4296d0698165b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fa:a1:7d:0b:47:37:4e:93:b9:b5:10:dc:46:
                    42:50:d9:3a:f2:66:a3:bd:e3:94:66:e0:9d:ff:0a:
                    60:ec:60:45:5a:9f:76:0d:82:02:03:98:1f:de:42:
                    3d:9f:95:21:d1:f1:19:7c:23:0b:57:1d:f2:59:a7:
                    b0:bb:88:66:2b:33:11:9d:90:47:a8:d6:b0:51:83:
                    0e:17:cb:20:dc:e9:11:90:f3:c3:ee:3a:b2:07:66:
                    7b:d1:ff:b8:57:68:87:cb:a9:e3:88:6d:02:e0:2f:
                    2f:b7:66:25:d3:04:53:98:6c:cf:4a:8f:ad:e6:18:
                    ca:5e:25:12:aa:08:14:07:57:cd:e2:75:e5:74:f4:
                    1c:5f:97:3e:91:45:ac:d5:f9:d9:d6:33:ec:50:42:
                    2e:57:53:2a:00:e4:07:eb:7c:d5:e2:e9:93:8e:99:
                    e5:dd:65:89:8f:07:5c:0f:d7:b5:21:79:d8:71:a5:
                    f2:b8:4e:85:ec:31:05:30:94:48:bf:19:93:84:d6:
                    35:3a:3c:5b:6f:93:c0:97:6c:02:8e:37:7c:ac:b2:
                    b7:ac:3a:a3:93:2f:97:6b:04:39:76:4a:3b:db:8e:
                    f3:ba:02:ec:aa:4a:a0:50:c8:93:fe:63:40:b5:bb:
                    19:ad:bd:63:5f:c2:a4:71:9d:43:07:ee:10:43:19:
                    d8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CB:E1:C9:65:0F:BD:AC:9B:76:0C:C7:FA:A4:29:6D:06:98:16:5B
            X509v3 Authority Key Identifier:
                keyid:74:D5:27:65:57:F7:DA:41:00:11:3D:85:73:95:66:48:15:40:E6:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNUnZVf32kEAET2Fc5VmSBVA5hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:c9:e8:a8:60:af:b3:7d:11:7b:d8:81:4f:9c:75:a7:33:0c:
         92:28:df:62:ac:fc:15:fc:d2:ae:3e:b6:c3:6d:92:50:45:ef:
         8e:e5:e3:83:93:ae:7a:7a:25:9e:c3:4d:38:76:79:d9:38:80:
         be:f7:4f:ec:a9:c5:e5:76:01:8a:16:08:d5:72:53:8d:ad:56:
         b6:a8:1b:3d:0b:d8:52:6f:4d:84:82:65:d5:a1:29:9b:31:f8:
         c0:c4:ee:df:1e:27:f2:21:7f:a0:60:cb:39:72:aa:88:ba:3d:
         1c:bb:22:b5:ba:48:a2:7a:5b:4b:fc:a0:d7:59:24:4e:3f:5c:
         f0:15:d9:d0:69:86:6a:d5:24:f7:4e:51:b3:1c:c1:17:65:3d:
         85:f0:77:b9:91:d5:9d:7e:92:ae:5f:c7:9c:6c:94:bf:1e:ab:
         fd:0c:cf:f1:5c:dd:d2:16:db:e0:f3:63:dc:68:f4:3f:a5:c1:
         af:19:de:b2:2d:97:be:30:d5:d5:73:3a:38:ec:25:f7:fb:9f:
         14:0c:c3:4d:e2:09:eb:8d:54:f5:77:a7:19:a1:75:95:23:14:
         ba:1c:09:f8:07:5b:a1:93:4f:92:c1:8a:89:25:fa:f5:d7:23:
         83:42:88:20:7a:bc:3f:38:22:7c:2a:aa:a4:a2:e0:ce:9d:82:
         6c:04:f8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----