Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa735c-357b-4194-be74-80c866849546/1/LNX6Kvwzj4QeAM92apA5IkUdN7g.mft
File:                     LNX6Kvwzj4QeAM92apA5IkUdN7g.mft (raw, json)
Hash identifier:          CCIr4UJUawsjD5tJqp08fKfJfgwqJxETWfA5tLEdSqI=
Subject key identifier:   6D:CF:5F:86:3A:7F:38:C8:57:D6:2C:A3:3F:1B:C3:21:65:D2:F0:99
Authority key identifier: 2C:D5:FA:2A:FC:33:8F:84:1E:00:CF:76:6A:90:39:22:45:1D:37:B8
Certificate issuer:       /CN=2cd5fa2afc338f841e00cf766a903922451d37b8
Certificate serial:       018F8823FDCDC620F35CE75C75DB6C6C647C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LNX6Kvwzj4QeAM92apA5IkUdN7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/fa735c-357b-4194-be74-80c866849546/1/LNX6Kvwzj4QeAM92apA5IkUdN7g.mft
Manifest number:          01CF
Signing time:             Fri 17 May 2024 20:00:11 +0000
Manifest this update:     Fri 17 May 2024 20:00:11 +0000
Manifest next update:     Sat 18 May 2024 20:00:11 +0000
Files and hashes:         1: LNX6Kvwzj4QeAM92apA5IkUdN7g.crl (hash: 0UjcWlbyBu9RODv47MHgLutRdMlX+p9OgLK9d8S88vo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/fa735c-357b-4194-be74-80c866849546/1/LNX6Kvwzj4QeAM92apA5IkUdN7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/fa735c-357b-4194-be74-80c866849546/1/LNX6Kvwzj4QeAM92apA5IkUdN7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LNX6Kvwzj4QeAM92apA5IkUdN7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:fd:cd:c6:20:f3:5c:e7:5c:75:db:6c:6c:64:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cd5fa2afc338f841e00cf766a903922451d37b8
        Validity
            Not Before: May 17 20:00:11 2024 GMT
            Not After : May 18 20:00:11 2024 GMT
        Subject: CN=6dcf5f863a7f38c857d62ca33f1bc32165d2f099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5f:1b:bd:04:f7:4c:83:4a:9b:de:15:79:e6:
                    99:d8:d6:2b:ff:b0:69:06:62:77:44:7a:bc:c3:64:
                    54:d3:46:a9:04:9f:3c:36:b1:ef:15:7f:74:97:17:
                    78:b5:4a:a0:fe:68:e4:3e:e8:61:a2:61:85:e1:dc:
                    ac:99:fe:cb:16:f0:66:26:76:c0:64:68:b7:83:57:
                    55:08:a1:1d:7f:d1:c6:1e:2f:ea:ff:53:ee:5d:5f:
                    14:d0:80:5b:e4:21:b1:61:eb:a7:0a:55:c5:ad:88:
                    3f:df:e4:ae:8b:15:df:55:ce:68:63:eb:90:32:05:
                    52:38:53:6f:0f:bc:24:35:e8:fd:85:9a:51:e1:03:
                    eb:8e:1c:ce:41:37:6c:c6:ff:8c:5c:62:9f:8e:75:
                    42:0d:2d:f0:11:94:db:80:40:aa:c0:cc:f1:e5:0a:
                    f9:28:08:ae:ed:9f:cc:97:5a:02:b3:8a:4b:17:76:
                    6d:1e:e2:35:6d:f5:06:e5:19:d1:a2:98:5d:a2:d1:
                    64:93:e3:c6:9e:28:c9:48:d7:93:c7:83:90:61:d7:
                    f3:cd:91:0a:c6:c1:c5:75:27:ce:c1:ef:81:c0:36:
                    a9:d2:79:2b:f4:84:46:af:df:9b:56:39:85:b3:25:
                    55:0b:0a:a6:d4:98:17:2d:85:22:b5:6d:21:cd:06:
                    3a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CF:5F:86:3A:7F:38:C8:57:D6:2C:A3:3F:1B:C3:21:65:D2:F0:99
            X509v3 Authority Key Identifier:
                keyid:2C:D5:FA:2A:FC:33:8F:84:1E:00:CF:76:6A:90:39:22:45:1D:37:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNX6Kvwzj4QeAM92apA5IkUdN7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa735c-357b-4194-be74-80c866849546/1/LNX6Kvwzj4QeAM92apA5IkUdN7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa735c-357b-4194-be74-80c866849546/1/LNX6Kvwzj4QeAM92apA5IkUdN7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:fd:03:c4:3e:47:11:bb:74:c7:fc:16:09:7f:2f:cd:72:6e:
         d9:45:f8:a9:d5:96:c2:fb:2d:fa:da:a4:68:44:99:fb:03:f2:
         5a:8b:e3:c7:31:b2:f4:cc:2a:17:58:14:5b:4b:a5:dc:d4:a4:
         f4:d8:0d:77:34:40:1a:f6:9e:c5:23:3b:a8:3c:32:69:07:fd:
         8d:f5:14:74:e9:e2:93:37:3b:30:6b:f3:ee:15:84:7a:f6:be:
         54:90:df:b9:5c:84:75:6c:dd:71:f2:ae:8d:e3:5f:7c:c8:33:
         63:c6:ec:ee:26:1a:13:fb:82:83:73:65:88:46:d9:10:c8:ed:
         f0:f6:47:68:e1:f1:ef:3c:be:9a:3c:fc:5f:be:67:71:55:65:
         96:46:9e:34:86:37:6d:d0:6e:4a:af:e8:d0:e4:d0:bb:32:94:
         7e:39:cb:d1:17:7a:6d:5f:1c:92:23:a7:06:45:11:7b:a8:f3:
         5a:a3:21:99:0b:8f:a8:37:89:9c:fa:30:71:4b:71:88:0e:62:
         69:48:98:fb:60:68:f2:81:45:2d:3f:a7:6e:4e:2b:ce:9a:a7:
         35:cd:fd:47:9e:df:ae:21:82:ca:38:81:07:fa:ef:0c:59:3e:
         8f:09:2d:77:a9:e2:f7:99:a9:c5:0d:78:04:8b:12:68:ec:ee:
         21:c4:47:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----