Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
File:                     3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft (raw, json)
Hash identifier:          iCbzfHCAaPB7qdGmZU0//XPNnuwLO5EvsLAzY+QOsLk=
Subject key identifier:   07:EE:7D:AB:9F:29:67:7F:94:3D:C7:C0:BA:24:8D:00:5A:19:F0:F7
Authority key identifier: DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
Certificate issuer:       /CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Certificate serial:       018F94CDDF06EEFC77A0A949653D708CE975
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
Manifest number:          117C
Signing time:             Mon 20 May 2024 07:01:10 +0000
Manifest this update:     Mon 20 May 2024 07:01:10 +0000
Manifest next update:     Tue 21 May 2024 07:01:10 +0000
Files and hashes:         1: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl (hash: TDxUY0XrMftBvBIiiKo9yDLab8VcxszWsNcFKXkpmXg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:94:cd:df:06:ee:fc:77:a0:a9:49:65:3d:70:8c:e9:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
        Validity
            Not Before: May 20 07:01:10 2024 GMT
            Not After : May 21 07:01:10 2024 GMT
        Subject: CN=07ee7dab9f29677f943dc7c0ba248d005a19f0f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e9:8d:a6:3a:49:be:b6:c6:4c:75:42:e8:40:
                    fe:25:35:fa:5b:04:be:e3:c1:b6:96:44:6d:9c:5e:
                    98:ba:8c:08:ef:ad:1a:ef:e2:ad:56:c6:26:04:79:
                    0a:19:60:d2:7d:c3:89:97:d2:c0:e0:92:60:0e:84:
                    fe:2d:d2:c5:51:85:02:00:68:28:8a:af:56:3d:8c:
                    6a:f8:c1:d3:4f:b3:66:d6:81:a1:02:b8:f7:44:be:
                    12:41:7d:7f:1d:02:50:20:72:89:08:7d:34:b7:de:
                    da:6d:62:55:36:10:03:29:95:1d:fe:7d:be:33:99:
                    8c:b6:62:43:21:d9:4a:b9:cf:05:7b:1e:72:f5:3d:
                    09:3b:27:42:98:b2:57:3e:aa:0e:0e:34:f1:23:d5:
                    3f:dd:29:ac:55:a2:89:56:a1:52:e1:d8:8a:26:7b:
                    27:47:af:c0:56:07:12:c2:f2:ab:b1:50:ce:06:3f:
                    3f:09:00:db:e6:bb:da:a8:44:27:39:08:1d:14:ec:
                    a0:0d:1f:00:60:22:89:32:f8:be:2b:0c:0c:2c:6c:
                    f5:e0:ea:dd:84:0b:1c:a2:ef:af:25:e7:c6:11:54:
                    30:e7:34:db:59:78:41:28:e8:00:78:08:59:df:cb:
                    26:31:94:18:b1:1d:23:45:51:4e:6c:ff:94:50:bc:
                    70:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EE:7D:AB:9F:29:67:7F:94:3D:C7:C0:BA:24:8D:00:5A:19:F0:F7
            X509v3 Authority Key Identifier:
                keyid:DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:74:26:69:d0:eb:49:92:36:99:d2:f4:d8:c7:ce:9b:11:72:
         69:45:e1:f0:dd:d4:6c:a5:3f:50:55:5b:32:30:91:c0:20:d3:
         1b:a7:6a:38:f1:b9:ff:18:26:4f:45:76:72:13:f5:12:a0:02:
         7e:87:49:d7:46:92:8e:fa:18:d6:91:35:21:a6:ee:33:55:92:
         21:12:25:b4:06:d3:ee:e3:54:eb:8b:50:0b:8c:e8:d5:19:10:
         a4:49:6f:e3:e7:3e:8e:98:e9:72:33:f9:ef:4b:e8:c2:c2:35:
         75:b5:a5:ed:98:c7:3b:ed:01:d4:2d:0d:e0:05:3e:0f:f2:25:
         7b:55:76:35:33:b3:d0:8f:ea:73:39:29:8b:32:34:4f:21:b2:
         4e:fd:82:e4:7b:86:2d:12:34:12:a7:6b:5d:c6:f8:ee:b1:d3:
         16:e0:2c:d9:10:a8:ac:8e:36:0f:e7:16:6d:65:9c:cf:52:06:
         d8:7e:4f:aa:b9:20:b2:b6:ba:20:17:f7:d8:90:70:c2:06:2b:
         22:14:18:60:5c:6a:19:e0:e4:87:19:c1:83:1c:08:b9:9f:64:
         1f:77:f4:67:7a:82:10:2e:dc:76:43:3c:cf:a0:f4:6c:70:c7:
         e9:27:d8:e1:77:16:3a:06:c4:39:c9:37:1c:bc:76:c5:ef:01:
         10:ce:2b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----