Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
File:                     vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft (raw, json)
Hash identifier:          n0YSy/w5JEJVFZjHvib/II2f7ycV5bBX0D3/4JrMNWI=
Subject key identifier:   59:CC:3B:CD:01:8C:10:AB:1D:4F:FF:3B:7D:84:61:F6:3C:2F:71:CA
Authority key identifier: BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
Certificate issuer:       /CN=bea7769343c691f675bb369253cb3f6fc304b01f
Certificate serial:       018F87B669F6762F8E7B1B9324407FEFD38E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
Manifest number:          051B
Signing time:             Fri 17 May 2024 18:00:29 +0000
Manifest this update:     Fri 17 May 2024 18:00:29 +0000
Manifest next update:     Sat 18 May 2024 18:00:29 +0000
Files and hashes:         1: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl (hash: UVLtyYeDEDPHFEAMlh/0CFfBanonKO5HESORkwvXUa0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:69:f6:76:2f:8e:7b:1b:93:24:40:7f:ef:d3:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea7769343c691f675bb369253cb3f6fc304b01f
        Validity
            Not Before: May 17 18:00:29 2024 GMT
            Not After : May 18 18:00:29 2024 GMT
        Subject: CN=59cc3bcd018c10ab1d4fff3b7d8461f63c2f71ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e8:28:8e:c0:f2:13:7e:af:75:2a:fe:b1:1e:
                    85:2e:07:2f:42:e4:97:4d:17:25:c2:68:00:98:fa:
                    fb:09:a9:2d:98:08:78:74:84:df:b0:e8:f3:7e:57:
                    9d:65:22:19:03:b3:1b:9b:bf:4e:c7:57:e8:27:15:
                    d6:9b:db:b3:b6:91:21:dc:32:b9:da:b8:24:25:22:
                    27:00:40:7b:7f:8a:cb:e8:95:8f:12:87:e4:cb:2c:
                    fa:7b:29:06:45:e4:a1:50:a4:da:2c:bb:d8:cf:fa:
                    c6:2e:24:8a:0e:ac:f1:4a:d1:77:2d:a4:20:df:cb:
                    9b:f2:c0:c4:ad:4f:4b:e7:f2:0a:cf:79:7b:54:81:
                    a0:3d:11:3c:6c:cd:d6:d9:16:3a:00:d7:d1:37:78:
                    64:55:58:dd:a4:1c:f8:78:12:8a:93:cc:05:c1:2c:
                    7f:f9:12:60:23:1e:2c:1c:cf:29:79:12:24:b7:ac:
                    47:46:5e:ad:9b:f3:11:13:47:dd:8a:92:62:4a:91:
                    3d:3e:1b:17:20:4f:10:24:4f:f2:41:f6:46:06:3e:
                    7c:8f:f4:a0:b7:e0:99:d4:e7:75:71:00:f9:da:ed:
                    46:7e:a4:b3:f1:74:db:a8:8d:4e:f7:3d:85:6e:25:
                    e9:5e:75:ff:f0:31:2b:90:90:8e:79:00:b3:b7:2b:
                    e5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CC:3B:CD:01:8C:10:AB:1D:4F:FF:3B:7D:84:61:F6:3C:2F:71:CA
            X509v3 Authority Key Identifier:
                keyid:BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:f5:dc:62:ff:2d:7c:89:67:d1:f7:a5:2e:39:0c:7f:47:6c:
         4c:db:17:d2:27:2d:ed:81:5a:4d:8e:1e:dd:38:2c:93:0e:3a:
         18:86:37:be:8c:22:4f:9e:a8:05:20:bc:88:11:89:34:84:c7:
         24:67:02:70:a5:ac:9e:59:11:d5:27:7a:4f:cb:32:1e:2f:ee:
         b8:5f:2c:88:3c:d0:89:ea:5e:ac:c9:d7:5f:be:b2:3c:9f:5c:
         72:0d:ce:49:74:7b:83:57:00:5c:78:85:d2:ae:8c:8c:06:a7:
         bc:d7:a6:08:58:2a:52:1b:62:95:ea:be:64:59:9d:d3:ad:db:
         f9:1a:f7:7f:cf:88:33:ef:61:9e:e5:3d:31:7b:69:f5:46:b1:
         e1:60:ad:1a:c9:25:3b:01:43:37:98:6c:20:ba:84:d2:ea:be:
         82:66:d2:48:13:66:c9:87:b2:b7:42:6c:2e:3e:3a:4c:a7:a8:
         8e:b0:7d:7d:05:57:e2:46:c2:b6:5a:1a:11:ab:80:e2:98:5a:
         48:0e:68:da:63:fb:b0:fc:01:16:d2:e3:cd:b2:fe:a9:b6:35:
         89:24:d5:ac:e8:0f:37:76:6c:75:32:65:32:48:21:44:0f:88:
         a3:96:09:6d:82:7c:12:35:22:44:27:eb:69:57:42:c5:65:1f:
         54:52:e9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----