Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
File:                     E3ueCmc-FAe_PmWfLqYlN462Mng.mft (raw, json)
Hash identifier:          M0qBF7BqN3N0isdFygjpHhzwilqoPp1m/q4iVfXspto=
Subject key identifier:   9A:A8:9B:40:C7:3D:A5:40:63:92:A2:5F:3E:26:38:30:16:B1:4F:BE
Authority key identifier: 13:7B:9E:0A:67:3E:14:07:BF:3E:65:9F:2E:A6:25:37:8E:B6:32:78
Certificate issuer:       /CN=137b9e0a673e1407bf3e659f2ea625378eb63278
Certificate serial:       018F9D2BE8718BE33BF8168AB279109F7DBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
Manifest number:          0250
Signing time:             Tue 21 May 2024 22:00:51 +0000
Manifest this update:     Tue 21 May 2024 22:00:51 +0000
Manifest next update:     Wed 22 May 2024 22:00:51 +0000
Files and hashes:         1: E3ueCmc-FAe_PmWfLqYlN462Mng.crl (hash: b0GEFu/TSgu4pyxJckWfB9H9MtziN8p3Iqj+B10/2oc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 14:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9d:2b:e8:71:8b:e3:3b:f8:16:8a:b2:79:10:9f:7d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137b9e0a673e1407bf3e659f2ea625378eb63278
        Validity
            Not Before: May 21 22:00:51 2024 GMT
            Not After : May 22 22:00:51 2024 GMT
        Subject: CN=9aa89b40c73da5406392a25f3e26383016b14fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:60:52:49:a7:15:c6:f7:c8:23:f3:46:5b:c3:
                    9b:82:ac:e4:6b:4d:df:f8:a1:d7:83:b9:8f:79:fa:
                    76:1d:f2:26:23:2e:99:2e:8c:77:80:6d:00:3d:cb:
                    de:6f:f0:2d:58:a4:ef:10:0a:2c:4e:2f:21:aa:cd:
                    da:d0:72:49:fa:e2:40:a2:4b:10:ba:b5:cf:90:74:
                    84:38:ea:92:38:dd:90:99:f8:a3:01:78:93:3a:11:
                    f2:2e:6f:9d:47:e6:3c:52:8f:63:54:9a:74:c1:f3:
                    6f:a4:87:98:c8:0f:81:24:d3:87:85:3f:a1:8b:74:
                    74:0b:95:11:e0:75:69:35:37:f5:af:23:f4:fb:54:
                    2f:70:06:bf:1c:68:3f:ed:03:e7:a1:2e:2b:7b:d2:
                    99:ff:07:17:05:42:27:9d:c0:f8:08:e2:78:58:ce:
                    e0:3a:2c:1f:2f:f5:93:49:fb:f1:bc:76:e6:1f:40:
                    aa:11:d4:f0:dc:e3:bd:5e:62:27:36:84:18:f9:1d:
                    76:09:33:e5:5d:21:50:3c:b9:9d:9b:73:28:d7:ea:
                    1d:5a:1e:02:34:aa:e4:08:33:5b:17:c5:98:bc:3b:
                    7b:4e:09:9a:5d:18:4b:f5:a1:73:c7:71:2a:19:28:
                    66:8a:59:84:b2:4a:43:93:17:48:c0:27:16:e5:3c:
                    cb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A8:9B:40:C7:3D:A5:40:63:92:A2:5F:3E:26:38:30:16:B1:4F:BE
            X509v3 Authority Key Identifier:
                keyid:13:7B:9E:0A:67:3E:14:07:BF:3E:65:9F:2E:A6:25:37:8E:B6:32:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:5b:dd:ee:9a:a1:d1:21:72:aa:84:5c:66:55:96:4d:51:14:
         b2:bc:c0:21:5a:64:6a:8e:20:29:0f:96:ae:d0:97:64:51:ac:
         fc:77:96:25:63:a5:5d:b1:29:f3:a6:08:32:55:b0:76:76:51:
         08:98:56:a2:29:98:e5:39:b4:0b:9b:7a:f3:0c:14:2e:47:0f:
         81:bf:1c:90:24:fb:90:6b:ff:5b:13:8f:38:8e:eb:b5:22:df:
         cd:5a:00:9a:a6:5b:0d:0c:19:73:e0:dd:9b:22:6f:33:95:3a:
         e2:9a:52:0a:a0:8e:18:e3:61:f0:5a:e9:a1:53:41:c4:54:20:
         1e:0c:69:92:3e:ea:ad:59:ec:ba:0e:fe:9b:0f:19:a8:d7:ef:
         b6:c9:1f:41:24:c6:c5:29:f1:b3:af:92:9f:6b:ad:3b:b4:45:
         40:1d:08:6e:05:40:4f:3b:c8:1f:70:3f:e1:f6:1e:48:b1:aa:
         17:66:90:4d:8a:eb:17:32:17:32:a5:02:2c:82:9d:24:68:93:
         2e:22:c2:45:79:23:eb:29:84:c0:67:ab:fa:79:1b:d7:02:29:
         ff:d3:2f:7b:da:71:f9:60:ae:6f:95:d5:5e:7b:7c:48:7b:d5:
         b0:ff:f6:cd:42:e8:58:eb:65:46:a1:75:49:29:e5:57:f3:b0:
         f5:0c:d0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----