Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b9c89c-c774-4662-a168-83ec87ee9ddc/1/0flR50Xnd_DBBmaXGqcOHryLrpY.mft
File:                     0flR50Xnd_DBBmaXGqcOHryLrpY.mft (raw, json)
Hash identifier:          smqXAEJmFeb+fUSuJb3i9Eay8zT8I/NqEq19f+3Ww24=
Subject key identifier:   C8:D9:91:0B:BE:7C:29:B3:54:26:06:BA:87:44:73:FA:CF:AD:90:89
Authority key identifier: D1:F9:51:E7:45:E7:77:F0:C1:06:66:97:1A:A7:0E:1E:BC:8B:AE:96
Certificate issuer:       /CN=d1f951e745e777f0c10666971aa70e1ebc8bae96
Certificate serial:       018F21938235D2E8965D2102F71BE364655C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0flR50Xnd_DBBmaXGqcOHryLrpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/b9c89c-c774-4662-a168-83ec87ee9ddc/1/0flR50Xnd_DBBmaXGqcOHryLrpY.mft
Manifest number:          1140
Signing time:             Sat 27 Apr 2024 22:01:06 +0000
Manifest this update:     Sat 27 Apr 2024 22:01:06 +0000
Manifest next update:     Sun 28 Apr 2024 22:01:06 +0000
Files and hashes:         1: 0flR50Xnd_DBBmaXGqcOHryLrpY.crl (hash: 6qarms20aJ3Ub244BOU9ufy6O4idG2450SJQ3BIRWSk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/b9c89c-c774-4662-a168-83ec87ee9ddc/1/0flR50Xnd_DBBmaXGqcOHryLrpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/b9c89c-c774-4662-a168-83ec87ee9ddc/1/0flR50Xnd_DBBmaXGqcOHryLrpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0flR50Xnd_DBBmaXGqcOHryLrpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 15:42:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:21:93:82:35:d2:e8:96:5d:21:02:f7:1b:e3:64:65:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f951e745e777f0c10666971aa70e1ebc8bae96
        Validity
            Not Before: Apr 27 22:01:06 2024 GMT
            Not After : Apr 28 22:01:06 2024 GMT
        Subject: CN=c8d9910bbe7c29b3542606ba874473facfad9089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:81:7a:e2:bb:62:6c:9b:b3:1b:6d:20:66:
                    17:0d:ae:1c:9d:2e:9f:80:77:13:bf:4b:2c:2e:14:
                    08:99:29:32:63:f4:3b:eb:30:bc:c6:80:36:79:88:
                    86:4f:3f:7d:10:87:fa:32:66:1f:35:3d:9b:b4:96:
                    86:99:8f:32:0f:f3:12:15:70:ee:aa:66:ce:d3:78:
                    97:01:94:b9:be:f5:9f:c2:07:e7:21:82:23:c3:0d:
                    7a:f2:00:58:1d:69:32:ea:bf:64:af:71:7b:96:c9:
                    ab:35:ff:69:98:b2:6c:07:44:04:87:b1:6d:4e:aa:
                    b7:bc:97:10:27:e2:92:6f:5d:80:58:03:32:11:4e:
                    27:39:48:53:99:b6:15:bd:d6:7f:1b:e8:6f:7c:c0:
                    25:54:a3:f0:4b:bc:77:49:4b:61:3c:0f:d7:bd:1a:
                    8b:6f:45:85:11:70:37:96:41:2b:f5:c4:26:97:88:
                    aa:e8:74:b4:13:e3:50:7b:71:71:b3:1b:72:e8:ab:
                    52:de:85:c4:c1:44:5e:b9:c0:db:79:6f:a5:22:31:
                    68:f5:e0:18:cc:13:6d:67:82:5c:7b:b0:82:cb:c6:
                    d8:4e:d1:ec:b6:9e:96:59:2b:e6:9b:c1:e7:77:18:
                    7c:3e:6d:18:2b:ff:b0:8e:d2:70:e7:ac:fb:95:8c:
                    c2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D9:91:0B:BE:7C:29:B3:54:26:06:BA:87:44:73:FA:CF:AD:90:89
            X509v3 Authority Key Identifier:
                keyid:D1:F9:51:E7:45:E7:77:F0:C1:06:66:97:1A:A7:0E:1E:BC:8B:AE:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0flR50Xnd_DBBmaXGqcOHryLrpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b9c89c-c774-4662-a168-83ec87ee9ddc/1/0flR50Xnd_DBBmaXGqcOHryLrpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b9c89c-c774-4662-a168-83ec87ee9ddc/1/0flR50Xnd_DBBmaXGqcOHryLrpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:33:4e:72:62:d7:ee:5a:c7:2a:ae:10:78:9f:84:ce:92:5b:
         77:8e:d5:00:44:de:f2:ac:61:99:80:9f:9c:4d:5f:7d:65:5e:
         9d:f7:83:04:7a:2f:89:6f:db:3d:1e:bd:39:f3:9b:51:fb:35:
         50:b7:88:41:10:46:f8:68:7f:82:47:e6:72:7d:40:5d:5b:a6:
         38:86:62:ec:26:d0:c5:d1:f4:42:50:32:f8:f7:c7:44:48:76:
         25:11:bd:e5:f0:37:c9:d5:fe:bb:eb:f6:db:3d:a6:e0:3d:ed:
         29:18:a9:83:83:1b:1c:af:ac:22:51:f8:f5:09:0e:c2:c5:25:
         c7:41:00:7d:82:e4:b9:dc:14:1f:a1:86:a8:b1:51:4c:a5:2d:
         92:60:f4:76:c4:d7:03:03:21:7d:e1:f5:36:4f:a5:e6:53:74:
         3c:ba:14:7d:6c:73:fb:bf:8b:77:b1:ef:ba:b5:25:7b:e2:8f:
         b3:66:18:d2:87:bc:b8:68:6b:1e:db:3a:4a:48:8c:01:e9:be:
         59:18:35:b8:a0:ea:56:ce:97:e5:39:e1:0c:44:9e:e9:0e:86:
         c5:e3:b1:51:f8:b4:c8:72:5f:ca:9a:c8:36:13:05:27:47:3c:
         2e:06:7e:fb:3e:d1:03:7a:d4:68:ab:e5:6b:1f:5c:15:32:4c:
         6a:fe:5e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----