Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4c1ea0-53ce-4e26-a179-47b75d9ec027/1/gyxFCE2JZP84XnJ0YuSBE6aZrOQ.mft
File:                     gyxFCE2JZP84XnJ0YuSBE6aZrOQ.mft (raw, json)
Hash identifier:          s3W0mZHVYtUnKU80mRBSXuKGXVYgQ3cOQ0AMtkTrDVI=
Subject key identifier:   4D:F1:9B:19:C8:45:2D:3D:7F:10:32:F2:5D:57:8D:71:5B:FF:FF:01
Authority key identifier: 83:2C:45:08:4D:89:64:FF:38:5E:72:74:62:E4:81:13:A6:99:AC:E4
Certificate issuer:       /CN=832c45084d8964ff385e727462e48113a699ace4
Certificate serial:       018F8748361849C1D78E1BD8D33FA7516F93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gyxFCE2JZP84XnJ0YuSBE6aZrOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/4c1ea0-53ce-4e26-a179-47b75d9ec027/1/gyxFCE2JZP84XnJ0YuSBE6aZrOQ.mft
Manifest number:          0505
Signing time:             Fri 17 May 2024 16:00:07 +0000
Manifest this update:     Fri 17 May 2024 16:00:07 +0000
Manifest next update:     Sat 18 May 2024 16:00:07 +0000
Files and hashes:         1: gyxFCE2JZP84XnJ0YuSBE6aZrOQ.crl (hash: gpuCHOxdM0pC8WI9UOMdunC6FHmxquBjQ3BV/fvnNqA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/4c1ea0-53ce-4e26-a179-47b75d9ec027/1/gyxFCE2JZP84XnJ0YuSBE6aZrOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/4c1ea0-53ce-4e26-a179-47b75d9ec027/1/gyxFCE2JZP84XnJ0YuSBE6aZrOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gyxFCE2JZP84XnJ0YuSBE6aZrOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:36:18:49:c1:d7:8e:1b:d8:d3:3f:a7:51:6f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832c45084d8964ff385e727462e48113a699ace4
        Validity
            Not Before: May 17 16:00:07 2024 GMT
            Not After : May 18 16:00:07 2024 GMT
        Subject: CN=4df19b19c8452d3d7f1032f25d578d715bffff01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:01:9c:17:6e:2e:72:00:5a:84:d8:18:94:60:
                    81:5f:4a:55:9f:9e:c4:f0:18:48:5d:1c:3a:22:3c:
                    c2:ab:e3:86:23:f2:17:31:41:67:3f:78:6a:43:16:
                    e7:b9:e7:a6:2f:94:91:14:9a:54:d5:21:39:c6:67:
                    a7:1c:cd:7d:21:85:e4:e4:bf:f6:b0:be:d0:0c:f5:
                    61:22:13:82:be:54:73:3b:73:88:0b:f8:c2:90:30:
                    56:73:24:f2:9e:dd:9c:ae:a3:bd:e5:bb:35:33:e2:
                    e5:5c:f5:08:23:c7:c2:37:ff:77:70:6a:b8:de:00:
                    19:a1:76:d8:55:0b:a0:32:f0:6f:93:fc:a0:e5:68:
                    67:bc:51:c1:c6:e2:6b:90:11:a7:36:c3:62:3f:89:
                    41:39:c7:3c:1a:32:2a:d3:24:7b:00:8a:ad:ce:22:
                    42:b1:81:f4:5c:95:38:18:71:47:d6:2f:61:13:e3:
                    4b:09:5c:02:7d:26:89:69:6e:2c:bf:65:ad:f0:77:
                    89:c9:d9:31:b2:63:d3:26:94:3d:57:20:07:b8:12:
                    07:1a:39:a1:76:1c:d8:7d:49:7a:19:ff:35:17:bd:
                    a5:64:0a:73:fd:cf:ab:73:4a:9c:c4:43:3e:56:d0:
                    cd:f8:71:6f:e6:d7:96:d9:90:64:fb:03:78:d4:a4:
                    2f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F1:9B:19:C8:45:2D:3D:7F:10:32:F2:5D:57:8D:71:5B:FF:FF:01
            X509v3 Authority Key Identifier:
                keyid:83:2C:45:08:4D:89:64:FF:38:5E:72:74:62:E4:81:13:A6:99:AC:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyxFCE2JZP84XnJ0YuSBE6aZrOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4c1ea0-53ce-4e26-a179-47b75d9ec027/1/gyxFCE2JZP84XnJ0YuSBE6aZrOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4c1ea0-53ce-4e26-a179-47b75d9ec027/1/gyxFCE2JZP84XnJ0YuSBE6aZrOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ac:6a:b0:df:31:1f:c1:1e:bf:bb:05:25:d4:5b:f1:ad:c2:
         91:18:7a:82:b8:ca:f2:d8:d9:8b:9b:c4:5d:1e:48:81:ad:32:
         fb:d4:f7:d8:dc:78:82:b5:74:32:92:9a:fb:5f:a6:81:0e:c2:
         14:da:ef:a0:0b:a2:f1:b8:71:33:fd:ac:9d:33:22:98:14:c0:
         f8:54:6f:df:85:fb:9a:00:d2:10:46:95:07:3c:dc:2b:d2:51:
         5d:78:01:e7:8f:5d:5a:8a:2a:17:d0:7e:18:6a:80:4c:75:15:
         e4:7c:86:7c:34:2b:bf:29:29:99:12:80:ff:e7:99:21:e4:0d:
         ad:a6:50:c8:c1:ac:e7:e1:1f:33:1d:5f:fc:ac:1a:51:34:9b:
         b0:14:c5:ba:43:2f:0d:c7:54:b9:1c:ac:20:83:ce:66:de:19:
         3f:4c:bb:39:56:0e:da:9f:72:36:f2:f3:66:cf:ed:a4:29:c2:
         8a:8e:32:d0:90:30:ed:33:7b:20:40:5b:a2:55:43:2c:54:bf:
         ea:7d:d0:c2:4f:70:59:4b:41:5d:5d:c5:18:bb:ba:c1:ec:23:
         11:0a:1c:cb:19:93:5f:5b:66:46:99:5b:fd:04:ff:ca:16:3c:
         5f:e1:49:a2:d3:12:c6:88:8a:e1:4c:f0:09:2d:8c:f2:5c:22:
         1c:87:8e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----