Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
File:                     l6A46SAR7iaAaKFRfSRM4iwmVU0.mft (raw, json)
Hash identifier:          4Dbl3FJ7TRvq6XbdFWLDLDhi+jWZSqZ5hjsKkBJQ8aM=
Subject key identifier:   7E:F9:12:89:D2:71:F2:97:1A:12:91:B1:70:87:25:D5:D0:28:C5:7F
Authority key identifier: 97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D
Certificate issuer:       /CN=97a038e92011ee268068a1517d244ce22c26554d
Certificate serial:       018F87ED3695B4C042CC434C37984C80B4E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
Manifest number:          04E3
Signing time:             Fri 17 May 2024 19:00:21 +0000
Manifest this update:     Fri 17 May 2024 19:00:21 +0000
Manifest next update:     Sat 18 May 2024 19:00:21 +0000
Files and hashes:         1: l6A46SAR7iaAaKFRfSRM4iwmVU0.crl (hash: yRGye4e5bjEnQ4RiMeKw/rmX7Lu2M1nAtmzK+ILthzg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:36:95:b4:c0:42:cc:43:4c:37:98:4c:80:b4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97a038e92011ee268068a1517d244ce22c26554d
        Validity
            Not Before: May 17 19:00:21 2024 GMT
            Not After : May 18 19:00:21 2024 GMT
        Subject: CN=7ef91289d271f2971a1291b1708725d5d028c57f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:aa:3f:c4:7d:ef:8f:47:01:cf:7f:67:32:2e:
                    40:97:24:ae:a3:ac:9d:46:e1:79:c7:ad:fb:89:81:
                    75:dd:fe:4a:30:fd:4b:a8:f4:e6:75:4c:54:70:ca:
                    93:f1:cf:c4:f3:57:3d:cb:ce:af:66:bb:71:29:21:
                    56:b5:4b:e4:e9:b8:73:33:0d:03:18:43:b0:22:24:
                    b1:79:a1:e2:69:e6:2a:82:30:7e:c5:b8:53:c9:fc:
                    84:ec:8c:e3:d6:bb:d3:dd:55:7b:ca:d1:b9:34:50:
                    ee:d1:b3:ff:df:9d:cd:74:cb:48:b6:dd:8f:86:44:
                    63:61:a8:92:c0:dc:fe:9b:62:53:a5:4f:fa:25:98:
                    d4:55:2c:cb:a9:36:1d:e4:7c:08:83:85:f7:64:da:
                    45:f3:a1:40:cf:06:0c:73:3b:62:7f:17:47:b8:b7:
                    01:e4:6c:f0:88:8e:cf:8a:bf:1a:27:75:86:1b:06:
                    3f:5b:28:34:19:8d:a6:5d:24:39:59:13:62:60:ed:
                    fb:b4:f0:d2:5c:51:6a:a4:ff:4c:fd:88:93:41:6e:
                    08:d8:a2:8f:4c:90:5c:5b:16:b1:2c:29:3e:d9:02:
                    d5:ca:c9:a6:d9:60:4b:c8:a8:b2:22:41:73:7b:08:
                    4d:67:15:9c:11:6e:aa:34:d4:40:0e:5e:87:90:54:
                    40:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F9:12:89:D2:71:F2:97:1A:12:91:B1:70:87:25:D5:D0:28:C5:7F
            X509v3 Authority Key Identifier:
                keyid:97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:7b:e3:74:c1:b5:5c:b5:bd:3a:00:ea:d0:5e:51:b8:21:37:
         dd:9f:40:e6:3b:58:0b:48:38:92:42:59:22:bd:85:f4:a2:f9:
         ce:89:1c:86:ab:f1:c8:1a:93:21:31:72:4d:77:fc:1f:92:eb:
         16:f8:26:19:ac:9d:6e:3a:21:5e:ee:8a:fd:1a:5c:52:94:83:
         21:11:ce:d2:5e:19:cf:39:43:c4:e9:ee:80:9c:61:60:e0:93:
         2e:5f:34:8d:6c:9a:e6:1c:ed:bf:df:47:89:a2:6a:f1:07:21:
         c2:c1:bc:e2:73:d7:81:f4:a3:80:dc:92:6f:48:20:aa:b0:33:
         e7:6d:ba:51:21:49:a4:a7:b3:7b:ab:c1:b2:28:88:51:97:36:
         22:7f:46:e8:93:fb:3b:3d:bf:fb:10:ec:b7:32:3d:e2:12:bf:
         f6:9a:26:61:45:ed:d9:11:2d:46:82:48:6d:ac:d2:1d:f5:41:
         75:15:62:25:dc:d4:66:cd:e2:f4:b8:4b:59:32:b9:f4:b3:fb:
         41:65:a0:03:26:50:b3:ad:cd:be:ff:84:42:3f:8c:c6:4f:7d:
         76:df:c2:b0:e1:7e:bb:c2:43:4a:ad:c8:92:94:a8:9c:fb:f8:
         4a:43:d4:59:97:70:2a:ab:aa:a3:9d:68:22:90:92:73:bb:25:
         62:c4:f9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----