Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
File:                     SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft (raw, json)
Hash identifier:          M1Lrfb0eg7OPc7AJaVEOWN33oRzEI79brclykE7Xaf0=
Subject key identifier:   E9:65:17:05:08:34:50:B2:E6:DD:E6:37:C3:F5:E1:DE:DD:7F:A5:30
Authority key identifier: 4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6
Certificate issuer:       /CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6
Certificate serial:       018F88246C328DC244ACA2E1B13BF8792EBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
Manifest number:          0756
Signing time:             Fri 17 May 2024 20:00:39 +0000
Manifest this update:     Fri 17 May 2024 20:00:39 +0000
Manifest next update:     Sat 18 May 2024 20:00:39 +0000
Files and hashes:         1: SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl (hash: 3A+RMMaa9GpK9IVtsNNa3HBKkY0UY3m7tcmmyUuwEuQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:6c:32:8d:c2:44:ac:a2:e1:b1:3b:f8:79:2e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6
        Validity
            Not Before: May 17 20:00:39 2024 GMT
            Not After : May 18 20:00:39 2024 GMT
        Subject: CN=e9651705083450b2e6dde637c3f5e1dedd7fa530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:08:00:1f:e9:4b:17:fc:ac:f7:b6:ed:17:
                    94:5a:b7:e6:e0:70:5a:05:66:dd:39:1d:8b:b2:70:
                    6c:28:61:7b:e7:94:0a:8a:70:0c:fa:99:aa:24:4f:
                    60:2e:7d:17:58:86:90:27:ba:01:3a:25:72:99:1d:
                    60:18:2f:e1:c7:4a:d9:77:6a:8e:bb:53:3b:0e:14:
                    2c:74:67:b6:18:bb:f2:08:5a:f5:16:55:95:9a:02:
                    59:15:12:92:38:92:1e:e8:75:c1:3f:6c:c3:80:8f:
                    3e:93:09:e2:f0:1f:4f:47:b3:0a:49:ba:be:58:ab:
                    c3:ec:46:97:b7:f2:08:79:7d:e7:72:2c:5b:c4:44:
                    60:a1:28:ce:45:1d:6a:58:b3:ee:11:9d:df:d5:c3:
                    07:16:25:88:5e:cb:94:e0:12:00:c4:36:52:c4:8c:
                    31:c3:28:78:81:0f:c8:4c:03:a3:1a:35:51:09:84:
                    33:33:04:f0:f7:ff:ba:8e:07:5e:5c:dd:39:57:08:
                    9e:36:04:85:73:04:be:64:af:5b:d9:a7:3c:a6:21:
                    05:06:9f:e3:99:bb:38:ab:0a:a0:9a:84:1f:91:47:
                    62:a1:7c:f0:47:de:e5:6b:37:f4:0d:16:12:2d:8a:
                    72:91:20:7a:f4:98:11:16:40:eb:5a:09:0c:ed:e4:
                    91:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:65:17:05:08:34:50:B2:E6:DD:E6:37:C3:F5:E1:DE:DD:7F:A5:30
            X509v3 Authority Key Identifier:
                keyid:4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:72:97:c4:0c:51:5f:3b:5e:81:8c:2a:51:74:9c:79:20:67:
         76:eb:a7:0e:55:47:38:b6:37:4e:ad:5e:f7:e9:d5:3e:68:52:
         5b:7d:54:dd:01:83:31:13:98:95:ce:6d:48:42:7e:c4:dd:3c:
         2b:30:15:70:16:2e:27:65:9d:eb:59:e3:86:42:c8:2b:1a:52:
         3e:e0:2f:06:d4:f4:b3:74:4e:8e:ef:ce:3b:8b:33:75:8f:c1:
         8c:25:2f:a0:34:31:1b:18:eb:6e:35:a5:bc:44:7c:e0:4c:e8:
         5d:7b:a0:85:57:ea:e1:d0:6c:7c:86:77:3b:7d:4b:19:a8:2c:
         6e:95:8c:68:10:5b:ff:30:df:72:78:e3:83:4f:5c:b5:e4:1e:
         28:bf:4f:99:4e:ac:d4:fe:d7:81:8c:75:28:df:8d:e7:05:c4:
         dd:cd:28:3e:18:ba:58:c4:6a:19:a9:b9:ac:ec:31:37:aa:ce:
         44:32:cc:57:17:e4:87:38:55:30:ec:e7:94:02:fe:25:45:b3:
         47:fd:dd:d9:91:19:da:f2:8d:f0:2c:04:d5:04:e7:31:4b:19:
         f8:52:c9:bc:1a:b7:38:0b:71:d8:a6:18:01:b7:52:23:c5:26:
         a6:aa:9e:88:67:1f:b0:b5:3e:79:02:9b:9a:45:13:99:81:f3:
         1c:56:26:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----