Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
File:                     kN_zHRsERNQgTeFYTQDd-WjQsBI.mft (raw, json)
Hash identifier:          7s4VnHpqmEuZmt0x4QZ16iICYk3imXuqXRSrX1JfGv8=
Subject key identifier:   1B:B8:EB:06:6F:24:34:CE:DA:77:3D:EB:60:09:9D:9B:CB:78:36:99
Authority key identifier: 90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12
Certificate issuer:       /CN=90dff31d1b0444d4204de1584d00ddf968d0b012
Certificate serial:       018F87ED7E5D5EE8E4A70096698FE5449F59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
Manifest number:          05E5
Signing time:             Fri 17 May 2024 19:00:39 +0000
Manifest this update:     Fri 17 May 2024 19:00:39 +0000
Manifest next update:     Sat 18 May 2024 19:00:39 +0000
Files and hashes:         1: kN_zHRsERNQgTeFYTQDd-WjQsBI.crl (hash: t+iulpTvxcJFU0lbsf/P3J/4u4PIr8EYwz/lHY7M69M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:7e:5d:5e:e8:e4:a7:00:96:69:8f:e5:44:9f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dff31d1b0444d4204de1584d00ddf968d0b012
        Validity
            Not Before: May 17 19:00:39 2024 GMT
            Not After : May 18 19:00:39 2024 GMT
        Subject: CN=1bb8eb066f2434ceda773deb60099d9bcb783699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:eb:fd:fe:0a:eb:55:0d:2a:5b:55:58:8f:aa:
                    1a:59:f6:88:8c:3c:95:4c:90:6a:0b:10:29:5c:65:
                    b4:8b:51:75:74:2f:4f:2c:c4:39:43:13:05:ee:ce:
                    be:35:6d:29:18:08:38:1f:78:9c:14:bd:07:a8:88:
                    20:c3:1a:1a:94:d7:56:38:76:74:4d:a7:b1:6e:72:
                    bc:6a:27:9b:c5:f0:87:92:e6:50:f4:bf:54:0d:fc:
                    60:72:02:f6:e4:a3:18:b0:9b:15:fa:fa:cb:37:27:
                    3e:b8:0b:8c:32:85:e3:65:80:a8:1d:1e:4c:b5:0a:
                    f2:3d:55:a3:03:e6:c4:ad:ba:5d:5c:19:6b:24:26:
                    f3:13:f4:a3:d0:2f:7b:19:82:bc:93:14:78:c8:d0:
                    71:66:68:dc:b6:66:54:ed:82:30:6f:83:21:cb:08:
                    5c:2e:2f:18:f2:ca:84:49:3c:a3:01:40:a9:6b:5f:
                    78:ab:cb:e5:5c:91:51:4a:3d:b0:e5:29:2d:65:c0:
                    f4:37:58:9d:4f:8b:52:dd:aa:36:7a:8a:ab:11:69:
                    63:ce:e6:e1:fb:cb:86:49:e3:ca:1c:a4:37:47:af:
                    2b:69:85:31:07:5f:6b:16:2f:14:44:12:7e:5e:e9:
                    4e:62:18:42:78:9c:36:95:74:76:a2:bf:49:66:3b:
                    c1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B8:EB:06:6F:24:34:CE:DA:77:3D:EB:60:09:9D:9B:CB:78:36:99
            X509v3 Authority Key Identifier:
                keyid:90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:c9:45:06:86:5f:85:b6:26:17:b5:01:c2:2e:39:87:df:8e:
         c8:84:98:40:99:25:b0:7f:80:85:be:52:c6:39:ef:5f:2a:88:
         47:41:2e:8c:a3:4a:59:e3:a1:56:cd:12:ee:32:ab:e0:a9:4b:
         52:35:4e:ce:c5:5d:b1:5d:80:d2:d3:cb:73:cc:69:e2:93:72:
         60:34:b2:9f:f1:d5:38:df:bc:10:84:56:4c:b0:cd:ba:7e:49:
         ac:87:aa:1f:dd:3f:a7:b7:99:37:f4:5b:da:20:5e:50:da:44:
         e9:95:0b:ee:54:de:c0:61:24:e6:91:b6:cc:c3:5f:99:f3:ff:
         9a:97:95:15:28:9b:25:d1:8d:10:db:c2:6f:7f:de:79:01:ee:
         af:0d:e5:95:15:b4:e8:a9:20:28:fc:8d:e9:fa:35:a2:d6:af:
         2e:ef:9e:6a:77:86:cb:b2:e5:c8:2a:03:d0:75:76:cc:aa:50:
         c6:fb:39:c0:a2:c6:e6:00:0b:4b:f4:04:ce:e3:f9:54:83:4f:
         68:0d:5b:60:01:b9:da:ee:46:4b:f2:5d:29:c5:2a:19:54:c8:
         9a:61:ae:9f:45:5d:99:33:1a:45:a8:3a:51:d9:98:80:ab:b3:
         01:83:a3:6d:35:de:6b:df:37:a3:2e:bb:74:23:a4:ea:c6:ce:
         6b:15:f8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----