Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
File:                     zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft (raw, json)
Hash identifier:          6S0Mhm5Hf3dAHD1s1SOkAMXlGxF0Sh0UCk4Th4Yzwb4=
Subject key identifier:   D4:B8:92:05:D7:2F:8D:E9:6A:F6:9D:3D:AE:0C:83:7E:15:EB:C3:2C
Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
Certificate issuer:       /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Certificate serial:       018F87B6B2579537CB06644BA3D06202E9B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
Manifest number:          0E3E
Signing time:             Fri 17 May 2024 18:00:48 +0000
Manifest this update:     Fri 17 May 2024 18:00:48 +0000
Manifest next update:     Sat 18 May 2024 18:00:48 +0000
Files and hashes:         1: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl (hash: FPwQGG359x294Y8ECt6N/BxODt8zhO7bgKQqMg13joo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:b2:57:95:37:cb:06:64:4b:a3:d0:62:02:e9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
        Validity
            Not Before: May 17 18:00:48 2024 GMT
            Not After : May 18 18:00:48 2024 GMT
        Subject: CN=d4b89205d72f8de96af69d3dae0c837e15ebc32c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:aa:38:1c:e7:9e:dc:5a:9d:5a:60:5c:79:2d:
                    24:fd:3e:09:88:87:1b:6f:2e:8f:51:9a:59:86:70:
                    26:01:c5:7d:ac:02:77:0b:e4:10:26:58:84:e1:3f:
                    02:a8:19:60:50:38:fd:6b:8a:bd:4c:ca:ee:8c:8a:
                    da:0f:8d:33:35:e1:d3:8c:ee:15:3d:f3:13:64:e5:
                    f0:99:71:64:63:b3:28:ae:db:f9:b8:52:11:cb:f8:
                    ce:cd:ef:a3:8b:5b:8f:d2:dc:83:71:47:f9:99:b7:
                    8f:df:2b:50:91:de:9d:1f:88:ab:49:f7:5d:8f:9c:
                    91:b3:6b:3f:a4:d0:0c:84:8e:4a:b6:7a:9b:77:c2:
                    9f:27:62:b3:e5:80:fe:b0:7d:04:58:c6:47:fe:33:
                    4b:b6:3e:8b:33:50:8c:e6:da:b3:b0:b9:90:b6:d3:
                    81:ae:91:f8:62:5f:d4:5b:0a:1a:79:0b:06:54:de:
                    4b:d3:89:c1:c1:ce:75:c4:c7:32:3a:80:ae:58:cd:
                    8b:fd:54:70:be:97:de:09:d1:f9:db:2d:bd:f8:ac:
                    fc:c9:51:f2:b3:19:ef:b8:4b:ee:66:38:43:76:a0:
                    2b:0e:3e:e0:96:68:16:06:8f:bb:d6:42:e6:4d:eb:
                    4d:a9:53:db:e3:4e:5f:a0:bc:dd:fd:d9:fb:a8:c9:
                    f3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B8:92:05:D7:2F:8D:E9:6A:F6:9D:3D:AE:0C:83:7E:15:EB:C3:2C
            X509v3 Authority Key Identifier:
                keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f4:fb:ff:8b:9e:ac:bb:e6:0f:29:a1:be:6a:8b:2c:27:35:
         c7:b6:5c:d5:ce:e8:d3:aa:57:8d:d5:7e:60:a5:60:99:3b:74:
         55:76:4e:98:96:3b:d4:42:ff:73:e8:f1:16:a7:02:92:51:ec:
         25:25:f5:ed:49:b9:f1:3b:a5:6f:e9:21:74:60:90:e8:5d:ac:
         b0:6d:76:6b:84:44:26:39:ed:18:3e:5c:0f:66:8c:84:34:48:
         fb:f1:58:d3:9e:c6:4b:45:15:8c:52:e3:51:38:14:57:e3:94:
         bf:70:7f:36:d4:87:d7:5d:a0:cb:51:31:52:3d:86:bf:d8:a0:
         c1:50:09:f9:e3:a1:40:44:e9:24:f7:b3:09:bd:ea:a7:88:76:
         57:2c:53:f0:cb:5d:02:70:7d:d3:cb:bf:13:1a:02:34:92:de:
         ce:d9:19:31:08:b2:2b:d7:00:65:42:45:5c:d4:4f:17:bd:b3:
         41:f0:be:de:9c:4e:11:3e:d3:af:2d:ee:21:fd:df:b8:aa:e8:
         11:a4:96:8d:73:09:b9:3b:38:72:23:c9:34:f4:89:23:4c:67:
         da:05:73:91:02:37:89:0d:9f:2b:cd:a8:50:3f:f4:d0:a0:94:
         64:35:80:15:89:da:fd:df:af:26:cb:4f:4c:1e:eb:ab:c4:1b:
         d7:eb:f0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----