Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
File:                     R3BGWvTHI2RwAFnnll08iepGPNc.mft (raw, json)
Hash identifier:          kKBcfbFOqOy2E3K2SyuEkA1xsPGuBPkqwPnw2ucszqo=
Subject key identifier:   60:F0:3D:11:B0:8B:95:BA:F0:B1:F5:CA:C2:8A:D2:33:F2:FB:7B:17
Authority key identifier: 47:70:46:5A:F4:C7:23:64:70:00:59:E7:96:5D:3C:89:EA:46:3C:D7
Certificate issuer:       /CN=4770465af4c72364700059e7965d3c89ea463cd7
Certificate serial:       018F8748A48C455D35426098FE8CAEC7F159
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
Manifest number:          0B2E
Signing time:             Fri 17 May 2024 16:00:35 +0000
Manifest this update:     Fri 17 May 2024 16:00:35 +0000
Manifest next update:     Sat 18 May 2024 16:00:35 +0000
Files and hashes:         1: R3BGWvTHI2RwAFnnll08iepGPNc.crl (hash: L2e6g9eROjw+h5ziLFfYpfnbh9M9FLrsO+hLZ9Yd/d8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:a4:8c:45:5d:35:42:60:98:fe:8c:ae:c7:f1:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4770465af4c72364700059e7965d3c89ea463cd7
        Validity
            Not Before: May 17 16:00:35 2024 GMT
            Not After : May 18 16:00:35 2024 GMT
        Subject: CN=60f03d11b08b95baf0b1f5cac28ad233f2fb7b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2a:35:14:f2:78:eb:40:7b:e1:89:6d:5e:7e:
                    34:b6:25:73:45:e8:c0:4f:45:0d:c4:cf:e4:f6:ca:
                    4b:b9:fc:ad:f9:27:79:8f:71:ea:28:8a:23:2f:44:
                    f9:f8:51:c3:e4:ac:55:af:12:ab:bd:85:3b:de:ce:
                    04:f6:bb:e7:11:79:d9:97:98:5b:57:d4:68:e7:46:
                    40:11:89:a9:1a:e4:57:b4:3a:e8:52:57:64:93:38:
                    73:00:2f:1a:19:65:2c:13:cb:7f:30:af:00:a3:5b:
                    e1:0d:aa:60:7b:90:fa:10:5c:eb:82:0d:3c:20:64:
                    c6:ac:71:d5:79:0a:43:6b:b0:33:f0:c5:8b:82:35:
                    7f:c9:2e:ef:ee:1a:e4:b3:8b:7b:64:e5:9d:0b:47:
                    2c:cc:a9:8d:9b:21:33:40:98:ff:c5:b7:7d:31:34:
                    db:08:4d:05:0d:e3:2a:16:ea:9a:29:24:b4:dd:2d:
                    06:72:78:a0:75:80:69:98:e6:ea:3d:0c:da:0e:f0:
                    d9:11:d3:3d:28:14:1d:5e:25:e3:93:4b:56:e9:64:
                    81:a9:c1:78:ac:98:ad:2a:c5:2b:47:ba:0b:50:06:
                    9a:42:fc:4d:a4:f2:a3:b1:11:4b:f6:df:15:39:37:
                    ee:d2:fc:89:04:6a:c6:69:56:93:77:06:77:e6:b6:
                    ca:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F0:3D:11:B0:8B:95:BA:F0:B1:F5:CA:C2:8A:D2:33:F2:FB:7B:17
            X509v3 Authority Key Identifier:
                keyid:47:70:46:5A:F4:C7:23:64:70:00:59:E7:96:5D:3C:89:EA:46:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:da:1c:63:63:0b:cd:dd:fa:33:ea:35:30:87:92:97:f0:fe:
         3e:43:2d:33:28:c7:94:f5:95:0c:ba:50:d1:3e:a2:07:72:6b:
         10:51:04:28:38:1d:96:c4:68:2c:20:c6:11:7b:76:b5:e4:06:
         d5:93:78:b7:9f:dd:8d:a8:15:96:f9:b3:35:0d:2c:d6:04:a2:
         78:e9:0d:00:70:d1:c5:bc:5e:26:40:25:26:a2:5c:db:96:cd:
         1f:0b:34:30:73:8c:c5:5a:e8:88:d1:13:e7:4c:1b:ca:ff:ae:
         8a:5a:b5:23:ab:f9:38:a9:b4:6b:2a:09:02:4b:52:61:a9:be:
         cb:7c:b9:dc:ef:cc:0c:b9:ed:76:a8:39:7c:c0:d6:bc:5b:2e:
         42:58:b4:7a:fe:89:f2:42:69:49:14:fb:e8:aa:ef:97:ca:df:
         e7:03:c5:99:53:7b:6e:b5:21:5f:f6:69:c9:9a:2b:76:5f:b4:
         40:c7:69:44:a7:fa:9e:80:29:65:b5:b1:fe:0e:b7:a7:b7:98:
         8e:c6:14:d0:94:b9:fb:b2:93:cf:1c:a6:0f:02:3a:03:44:3b:
         69:7d:d2:85:e8:9e:b2:80:d8:f4:84:d4:d0:55:8e:61:33:da:
         24:1a:d2:a2:22:bc:8a:6d:8c:0d:35:f3:c0:1b:e2:f4:d3:fa:
         7a:d2:55:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----