Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
File:                     hheg4tbmBy6I03dN18z78HochjI.mft (raw, json)
Hash identifier:          SvgcUucqSCG1MPqQhSFR0HLWMX4O1p0Da4fvkRCl3xY=
Subject key identifier:   4D:16:30:30:92:E1:68:6B:68:CE:8D:DE:46:77:74:06:11:5F:2A:46
Authority key identifier: 86:17:A0:E2:D6:E6:07:2E:88:D3:77:4D:D7:CC:FB:F0:7A:1C:86:32
Certificate issuer:       /CN=8617a0e2d6e6072e88d3774dd7ccfbf07a1c8632
Certificate serial:       018F88923597334C66764DB89DAC7B683E88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
Manifest number:          0D6A
Signing time:             Fri 17 May 2024 22:00:34 +0000
Manifest this update:     Fri 17 May 2024 22:00:34 +0000
Manifest next update:     Sat 18 May 2024 22:00:34 +0000
Files and hashes:         1: hheg4tbmBy6I03dN18z78HochjI.crl (hash: WitIX9OprL6hieawc8+l4Umk/dM14VTxg9hFInqCLdw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:35:97:33:4c:66:76:4d:b8:9d:ac:7b:68:3e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8617a0e2d6e6072e88d3774dd7ccfbf07a1c8632
        Validity
            Not Before: May 17 22:00:34 2024 GMT
            Not After : May 18 22:00:34 2024 GMT
        Subject: CN=4d16303092e1686b68ce8dde46777406115f2a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5b:0a:54:50:b6:7b:53:bb:b5:07:b3:28:26:
                    3b:32:0d:e8:e3:df:3b:af:b1:74:8f:21:f0:c4:f3:
                    30:ae:d8:ad:2d:0d:d5:1b:2d:8a:77:e6:41:5b:8d:
                    64:00:20:77:1e:1b:b7:b7:2c:16:e3:8c:2c:a0:7d:
                    40:99:9f:be:b2:9b:aa:dd:0d:e4:7e:06:8c:92:8f:
                    84:18:cb:2c:7b:e6:1e:ec:4c:ee:5e:06:3e:a3:e6:
                    99:0a:02:d7:b0:7e:00:81:9d:55:36:9a:25:e3:62:
                    bf:88:0e:e4:18:5f:0e:4b:65:c7:bf:f2:ca:cd:21:
                    2f:ea:27:64:aa:49:5a:df:a9:58:37:c0:11:49:7c:
                    af:92:2f:ea:f7:d3:45:3a:77:e2:86:a3:50:f0:c1:
                    84:eb:46:3a:15:8d:9a:78:f7:cb:50:ba:fa:d8:5d:
                    9c:55:a9:45:5a:64:71:2f:f3:6d:52:08:50:a4:23:
                    aa:ec:84:07:89:24:89:d6:e8:5c:dc:e1:c1:1b:44:
                    b8:66:64:53:bb:52:5e:82:d6:5c:39:40:35:57:17:
                    ad:2e:ac:e3:b5:8e:de:1d:90:f5:bd:26:d4:72:53:
                    1b:6e:54:3e:2f:39:1e:52:c3:47:3a:d6:92:9b:0e:
                    fd:5c:6a:a1:d0:0c:5d:b2:cf:19:34:1b:a0:7f:d9:
                    f8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:16:30:30:92:E1:68:6B:68:CE:8D:DE:46:77:74:06:11:5F:2A:46
            X509v3 Authority Key Identifier:
                keyid:86:17:A0:E2:D6:E6:07:2E:88:D3:77:4D:D7:CC:FB:F0:7A:1C:86:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b5:1c:87:54:58:6f:d8:a6:4d:91:a7:cb:32:5a:20:e2:75:
         7e:98:6c:53:03:6c:84:ae:7a:aa:fb:28:0e:07:76:7b:ad:2f:
         e7:e3:b0:ef:85:4f:2d:99:f3:ed:11:85:6a:2b:bb:44:42:f5:
         1b:41:1c:dc:e1:7e:6d:da:f6:27:57:77:33:f0:6d:80:d4:1d:
         d0:c2:af:16:16:83:4a:b0:43:84:db:ba:66:c1:2a:13:2a:18:
         f0:bc:be:f0:52:39:95:f0:4a:6c:53:dc:91:e7:7c:46:a5:f5:
         42:8c:ca:1a:d4:79:5a:88:8d:d6:85:34:e9:21:60:98:95:b0:
         13:98:e3:a1:dd:29:24:49:07:f3:19:c6:01:c3:8a:65:b7:2d:
         1d:b7:4a:84:51:f0:b5:52:f1:8d:73:11:02:67:32:71:41:72:
         7f:8d:72:4e:5f:ba:c9:56:90:72:bd:cc:6f:10:32:fc:06:d4:
         ba:e3:01:e3:94:be:68:c8:b7:0b:ef:a1:bb:ec:81:f7:36:69:
         51:d2:ce:48:83:e6:23:21:f4:da:c4:ef:64:4f:d3:44:b5:84:
         d0:5e:f0:b4:0a:ae:49:30:c7:26:6a:2a:c7:67:cc:93:11:d1:
         04:a3:63:b1:c1:3a:d0:86:cd:41:8d:ca:bf:90:4e:fb:6b:0d:
         ae:69:70:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----