Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2e2c8e-4c2b-48e9-afd5-235aba19d9f9/1/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.mft
File:                     QKpxFX4g2YA2u9aTuOy7K5nw8Dw.mft (raw, json)
Hash identifier:          fcQO1Mreh21Fn3CH/z/jKVGIhme38jzSnmLqpO/SWOY=
Subject key identifier:   B2:6A:63:39:4E:8E:FD:A2:A0:9F:FB:62:A8:20:F1:F6:AD:58:97:DA
Authority key identifier: 40:AA:71:15:7E:20:D9:80:36:BB:D6:93:B8:EC:BB:2B:99:F0:F0:3C
Certificate issuer:       /CN=40aa71157e20d98036bbd693b8ecbb2b99f0f03c
Certificate serial:       018F8936921FA43A16C18E9BA983126063E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/2e2c8e-4c2b-48e9-afd5-235aba19d9f9/1/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.mft
Manifest number:          1176
Signing time:             Sat 18 May 2024 01:00:05 +0000
Manifest this update:     Sat 18 May 2024 01:00:05 +0000
Manifest next update:     Sun 19 May 2024 01:00:05 +0000
Files and hashes:         1: QKpxFX4g2YA2u9aTuOy7K5nw8Dw.crl (hash: 7wWib4VcSpsU944SX43oShdtRV3HTmHPiO8VzLfHt34=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/2e2c8e-4c2b-48e9-afd5-235aba19d9f9/1/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/2e2c8e-4c2b-48e9-afd5-235aba19d9f9/1/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:36:92:1f:a4:3a:16:c1:8e:9b:a9:83:12:60:63:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40aa71157e20d98036bbd693b8ecbb2b99f0f03c
        Validity
            Not Before: May 18 01:00:05 2024 GMT
            Not After : May 19 01:00:05 2024 GMT
        Subject: CN=b26a63394e8efda2a09ffb62a820f1f6ad5897da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fa:dd:55:a5:b8:2f:b6:de:8d:b2:72:ef:29:
                    a3:48:51:ee:81:c4:6c:15:6c:7c:bc:cc:44:bc:d3:
                    54:e0:d3:0c:01:e8:ff:df:cd:c5:2f:d6:63:ea:a8:
                    47:24:97:b0:aa:6a:5c:d9:8d:d7:b7:b8:68:8f:3a:
                    48:0f:94:a6:19:e6:30:65:e1:13:04:c1:80:95:dc:
                    43:b2:04:88:fc:cd:f9:c4:46:23:48:c3:47:69:cb:
                    a9:fc:cb:a3:12:5a:32:cb:c5:c3:78:b1:d8:b5:af:
                    d5:1d:34:70:92:33:a3:fb:dd:52:c9:14:85:85:eb:
                    96:03:67:08:5c:67:91:08:fd:99:53:74:df:3d:bd:
                    2a:00:cc:00:02:d4:c4:e6:37:46:99:41:76:5f:e2:
                    df:4a:64:25:90:88:6f:ce:36:13:64:93:b2:cb:b1:
                    66:93:34:dd:e5:bd:c2:e8:86:8f:db:bb:0e:34:82:
                    fe:da:04:57:ec:5f:19:0e:3a:e9:2d:39:d3:7e:63:
                    a5:0d:65:6f:66:f4:f8:ad:ee:7c:ac:2b:a6:ce:01:
                    22:75:bc:86:f3:12:b8:e6:ef:ae:18:97:a4:4d:7c:
                    2c:18:92:6a:4e:6f:b2:62:1e:ad:20:9f:5a:dc:27:
                    3b:60:d1:2e:57:6a:57:77:f7:a7:c6:20:7e:3c:20:
                    a1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6A:63:39:4E:8E:FD:A2:A0:9F:FB:62:A8:20:F1:F6:AD:58:97:DA
            X509v3 Authority Key Identifier:
                keyid:40:AA:71:15:7E:20:D9:80:36:BB:D6:93:B8:EC:BB:2B:99:F0:F0:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2e2c8e-4c2b-48e9-afd5-235aba19d9f9/1/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2e2c8e-4c2b-48e9-afd5-235aba19d9f9/1/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:b6:dd:21:ab:d4:1c:cb:2f:d4:ee:ce:9a:5a:72:f0:59:06:
         c1:22:b4:83:32:6c:af:db:89:ab:40:9f:06:ad:8d:79:c5:95:
         a9:2f:92:1a:e9:31:e3:e5:83:a8:d8:20:fe:3f:38:33:28:35:
         2c:48:1d:fd:1d:52:c1:fb:bf:6e:ba:60:e2:e8:94:dc:ec:b1:
         ba:f0:13:c2:f5:6d:89:74:79:7f:07:24:3c:e1:64:be:a5:e7:
         f5:1c:03:94:31:8d:61:cc:53:3e:23:90:34:60:73:76:06:b9:
         6f:73:cf:d4:37:92:73:b2:6c:53:5f:e7:59:aa:8d:39:a6:9d:
         fc:43:b1:1f:7b:8d:7a:a9:2f:af:09:5b:ea:d2:15:85:2b:9a:
         b4:ec:1c:82:7d:78:30:48:14:22:4a:3d:be:6d:de:8e:9b:0d:
         5e:72:fd:35:07:95:f2:24:11:d2:8c:e8:cd:2c:8e:67:84:f0:
         a4:5f:5f:fe:5a:08:e4:6d:0c:22:1c:8c:2e:de:69:4f:d4:44:
         e0:9f:96:6f:33:a4:3a:a3:ce:43:b5:0a:0b:55:92:91:36:10:
         53:7d:f4:2e:84:a4:4e:2b:bd:c7:c3:4c:02:90:71:bc:a6:6f:
         5f:66:97:58:4e:c4:5f:74:1e:2c:1f:12:ae:0a:d0:a8:11:d7:
         dc:b7:9f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----