Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
File:                     1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft (raw, json)
Hash identifier:          dTVZqW6T8whrMiUtCvYxCclNDAY9i/T520gOyJ8GepA=
Subject key identifier:   5E:B7:3A:B3:F4:52:E8:1A:0A:A4:3E:FC:87:49:92:9B:3E:47:AB:BA
Authority key identifier: D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8
Certificate issuer:       /CN=d469867d1d693e79a6a5ee9014e413f039eb50d8
Certificate serial:       018F1E5B1C60F343A692D0F61699961845DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
Manifest number:          0B72
Signing time:             Sat 27 Apr 2024 07:00:38 +0000
Manifest this update:     Sat 27 Apr 2024 07:00:38 +0000
Manifest next update:     Sun 28 Apr 2024 07:00:38 +0000
Files and hashes:         1: 1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl (hash: qmwzgWNBjfx8HH+fuKBeyBp/F5tK2ghTL8VCiifWua0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 07:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1e:5b:1c:60:f3:43:a6:92:d0:f6:16:99:96:18:45:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d469867d1d693e79a6a5ee9014e413f039eb50d8
        Validity
            Not Before: Apr 27 07:00:38 2024 GMT
            Not After : Apr 28 07:00:38 2024 GMT
        Subject: CN=5eb73ab3f452e81a0aa43efc8749929b3e47abba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ef:0f:29:5e:3a:7c:52:4d:ba:03:38:66:03:
                    5b:7b:27:94:a7:97:d6:c2:96:b0:f2:58:3d:f6:93:
                    84:35:48:02:cb:d5:13:8f:51:11:97:76:fa:56:96:
                    cd:e0:1d:6d:4e:32:8a:1e:d1:2c:a2:cd:12:d6:89:
                    82:0b:8c:bb:85:2c:a5:56:54:48:d9:b6:df:c7:e6:
                    dc:93:0f:c8:f4:4a:ed:42:e9:57:cc:2a:5a:22:fa:
                    6f:22:d6:4f:15:44:42:cb:dc:72:77:cb:9c:f0:2d:
                    1a:a7:0d:6b:6c:3f:8c:d2:38:ca:b1:a9:25:19:16:
                    82:bd:25:ee:74:96:c8:33:21:4f:ad:89:dd:8c:db:
                    ec:5d:7e:86:5e:bb:c5:49:e9:d8:4c:6b:18:c1:43:
                    e1:59:7b:94:6d:38:58:5c:28:9a:1d:5c:73:81:4e:
                    ce:43:cd:dc:65:db:dd:ad:4e:fd:c1:65:37:4b:4c:
                    47:e8:3f:4e:ab:69:0f:6e:3c:7b:5d:83:ec:56:bf:
                    f6:ff:05:c4:b4:a2:3a:57:cf:7e:a4:2e:c5:2d:1c:
                    e2:50:07:ea:bf:c0:00:32:d4:c4:1b:5d:ad:20:3c:
                    66:9c:3f:bc:3b:fe:c9:3c:f1:8d:c2:5a:d2:59:42:
                    7c:25:37:70:e1:4e:45:f7:bd:b1:9c:61:bb:56:4f:
                    78:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B7:3A:B3:F4:52:E8:1A:0A:A4:3E:FC:87:49:92:9B:3E:47:AB:BA
            X509v3 Authority Key Identifier:
                keyid:D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:3e:9e:06:89:06:d0:c3:ea:12:55:ee:c9:35:66:2a:83:5f:
         a6:88:1d:7e:48:80:51:b5:52:0b:24:01:ee:56:cb:d2:80:bc:
         c3:3a:b3:5c:8d:58:0c:0f:1d:d6:1c:b7:06:28:97:d2:8a:eb:
         73:55:1a:cd:e3:2a:00:70:60:4c:5a:74:21:ae:5e:7e:e8:f7:
         3c:36:17:4b:26:29:77:07:9e:a3:ee:f5:45:27:e2:4e:fb:61:
         37:19:4f:ed:f4:1c:d5:d0:57:62:d1:19:66:d0:a4:37:26:76:
         0e:24:22:52:ca:9a:04:6d:31:1d:c8:b3:7b:55:70:ea:6f:21:
         d7:54:e5:03:a2:81:29:a4:a2:16:70:dd:3d:7f:2a:29:c6:17:
         79:28:97:03:35:de:32:de:d0:ec:e5:14:1c:83:6d:0c:ae:e7:
         a5:13:44:46:1f:51:8d:99:52:18:06:13:60:be:94:22:68:17:
         1d:ad:f7:2d:d3:ce:3e:48:ad:b4:c9:f3:39:43:16:67:c9:cc:
         1d:2c:7a:c1:01:93:b8:67:d8:57:20:ad:9c:af:32:85:34:0a:
         64:7f:03:84:dd:8e:e8:9b:3e:20:00:e8:c0:d0:71:60:d2:8f:
         89:01:93:30:55:fb:47:dd:f5:f2:2f:9b:60:ce:1f:54:2f:f3:
         11:23:df:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----