Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
File:                     CKKX-M-hzm0_4sUmkRxGippjGNA.mft (raw, json)
Hash identifier:          57ONEErMvlbzaaUPy4eePaKRHzY/wa8HjojHoGQBQb4=
Subject key identifier:   57:3A:AD:CC:DE:06:9B:0A:2B:CE:B0:76:19:3D:BD:28:6F:65:5E:43
Authority key identifier: 08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
Certificate issuer:       /CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Certificate serial:       018F847E59B07CAECE2637E14CDFE62558AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 03:00:23 +0000
Manifest this update:     Fri 17 May 2024 03:00:23 +0000
Manifest next update:     Sat 18 May 2024 03:00:23 +0000
Files and hashes:         1: CKKX-M-hzm0_4sUmkRxGippjGNA.crl (hash: jcrDWYUSgx/ed0HSl8SMPlqOx4+IrFGPeugBpWw5rLA=)
                          2: fALxq4E_X1Tfz94ZW5hLl8eyk3E.roa (hash: efFHf04DDGAKp+3rIoMON05dVik5apotrLIw1tCDp3E=)
                          3: rPuXy-ioJmWHwxUUeyXyDZFFv5k.roa (hash: R0a+a2FGDA/F9wA5CVMpj2jwf/dC6RKzswo0uLbIC8A=)
                          4: rxhBfSZ_58SfrfJTxYq9uOkD3nY.roa (hash: LSYnFSuySg66jncPl+qm+My5xmh0U9sNrU8HOGxOpl8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 19:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:7e:59:b0:7c:ae:ce:26:37:e1:4c:df:e6:25:58:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
        Validity
            Not Before: May 17 03:00:23 2024 GMT
            Not After : May 18 03:00:23 2024 GMT
        Subject: CN=573aadccde069b0a2bceb076193dbd286f655e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d5:7c:14:5f:37:e6:48:3a:31:39:69:54:6f:
                    b6:e2:05:da:f4:35:cf:21:41:c3:0f:67:c2:d0:9c:
                    9a:be:a3:ef:f3:47:d4:4e:0f:c0:84:c6:a8:97:5d:
                    11:3a:3f:1a:96:9e:de:c9:1d:15:bc:4a:42:73:22:
                    1c:95:ad:c2:4e:1f:88:39:10:e4:d0:cf:60:38:8e:
                    d9:a9:66:d8:88:2c:63:f4:77:a8:5e:64:5f:cd:a7:
                    dc:c0:1d:a6:7e:82:63:b5:9b:07:fd:f0:34:32:14:
                    55:1b:37:1b:e0:0e:71:ce:03:3b:f3:f2:a3:67:b8:
                    a7:2f:36:ca:ee:99:17:f7:a8:cf:2c:97:01:b4:66:
                    51:81:b5:ea:c9:ec:d8:20:85:b0:64:d3:9b:e5:f3:
                    b1:24:c6:34:44:7f:f3:b8:bc:72:a7:bc:5a:25:90:
                    53:a8:31:75:ab:e1:e8:1c:30:b1:f3:32:af:fb:d6:
                    f0:d0:7c:ef:c6:3c:d1:d7:cf:10:f5:d2:a4:4a:97:
                    83:25:bd:43:44:30:58:0e:7c:bf:6b:4f:8b:6c:86:
                    0a:cb:4a:e9:48:d4:e3:1f:20:4f:f1:37:82:9c:59:
                    06:40:fd:33:2d:bb:ea:87:c2:e5:e7:59:c8:b6:09:
                    79:bf:9d:6c:d5:92:e9:89:6d:d5:06:23:7e:69:fe:
                    f9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3A:AD:CC:DE:06:9B:0A:2B:CE:B0:76:19:3D:BD:28:6F:65:5E:43
            X509v3 Authority Key Identifier:
                keyid:08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:24:4a:ac:74:a9:6d:f5:da:91:a6:f7:e7:a1:8a:a1:68:d6:
         61:ed:8b:09:49:3d:15:48:01:c3:48:7b:88:a8:82:7b:bd:b4:
         13:90:b4:e6:ad:c7:79:8c:c8:11:60:4f:f1:3d:7a:50:58:67:
         6a:ed:a2:d8:ad:4c:33:0e:c7:fb:e0:16:d2:fe:81:da:7a:59:
         6f:4f:34:03:c0:e9:1d:4a:62:43:e3:e7:ea:11:92:5f:39:b3:
         25:cb:c4:a5:ea:40:8f:3f:9b:bc:aa:a4:73:3b:ed:60:c9:91:
         2f:5e:55:20:96:6d:4e:fc:28:24:0c:0c:e6:75:53:90:35:76:
         95:c3:cb:ff:28:e5:73:b5:70:9a:68:b4:23:1c:92:ce:e5:c9:
         eb:00:63:b9:5e:8e:a9:b7:76:bc:9a:0d:9c:56:a7:c2:c6:fa:
         ed:2c:a7:ab:0e:60:49:1f:4a:c9:f5:82:50:28:20:61:e7:b3:
         90:21:9d:bf:b9:fe:c2:4c:e1:73:3c:14:2b:a2:72:8e:1d:64:
         f1:12:2a:78:92:98:9e:fc:d8:e9:99:a1:39:3d:eb:33:80:17:
         26:b5:6b:fe:aa:e1:cc:1a:0c:aa:96:9a:7f:83:8d:72:82:36:
         38:b5:d7:b6:56:46:ec:25:34:86:88:06:1c:3d:37:8f:c1:cc:
         4d:51:2a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----