Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
File:                     O63rHzjiUanY1hTzLTbyat9P1YA.mft (raw, json)
Hash identifier:          yDFOoYc6kixNaqOBe8Tyb/VrMi+b7cynHxiYdBOv+84=
Subject key identifier:   28:57:D3:CD:79:74:E5:39:53:B8:56:D8:16:BA:32:E0:FB:72:18:E7
Authority key identifier: 3B:AD:EB:1F:38:E2:51:A9:D8:D6:14:F3:2D:36:F2:6A:DF:4F:D5:80
Certificate issuer:       /CN=3badeb1f38e251a9d8d614f32d36f26adf4fd580
Certificate serial:       018F87B637FD7BD728141F5B3E307A5489C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
Manifest number:          0923
Signing time:             Fri 17 May 2024 18:00:16 +0000
Manifest this update:     Fri 17 May 2024 18:00:16 +0000
Manifest next update:     Sat 18 May 2024 18:00:16 +0000
Files and hashes:         1: O63rHzjiUanY1hTzLTbyat9P1YA.crl (hash: zcMzvLu0PdgigK40Lat4VQK8XfQkUsxM6b5fuGCkGZM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:37:fd:7b:d7:28:14:1f:5b:3e:30:7a:54:89:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3badeb1f38e251a9d8d614f32d36f26adf4fd580
        Validity
            Not Before: May 17 18:00:16 2024 GMT
            Not After : May 18 18:00:16 2024 GMT
        Subject: CN=2857d3cd7974e53953b856d816ba32e0fb7218e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:75:2b:a4:d4:9f:18:98:fa:63:c1:82:4a:55:
                    7b:da:f4:69:3d:af:aa:4f:9e:3a:82:55:a6:6c:e6:
                    77:0e:5f:0b:85:df:b8:17:e7:c4:a7:49:7f:b7:ec:
                    c6:ec:db:ef:9d:d8:10:e0:ce:1b:4b:91:a8:15:0f:
                    90:11:03:d0:ab:b2:de:e1:4f:ff:3a:58:e1:70:d9:
                    09:38:f5:0a:70:ba:d1:f1:b1:67:89:cd:e3:6d:6d:
                    02:02:e2:7d:7c:2c:cd:cd:cc:7e:a5:15:03:8e:a8:
                    c7:e5:7b:75:f8:8c:12:04:08:be:8e:ea:74:0c:cc:
                    d7:b7:25:1c:62:99:d1:d5:2a:68:11:ed:36:ec:eb:
                    d0:31:a2:3f:76:e2:34:66:ff:f9:18:f2:de:21:ca:
                    ed:80:41:70:c6:67:3f:8b:dc:19:5c:1b:d5:ca:06:
                    16:9c:f8:b6:f4:8a:2d:90:76:9f:8b:5b:7f:11:97:
                    24:41:77:1e:3a:eb:87:01:00:c4:4f:d7:be:53:f7:
                    0c:77:c1:22:44:ed:b1:df:ac:0f:04:37:5f:c2:89:
                    be:96:f7:c7:00:94:58:d1:12:71:9b:9d:98:ae:3e:
                    b6:e1:f9:b8:a5:38:eb:e6:ab:39:f7:1a:3a:94:15:
                    5b:fa:87:cb:39:20:d7:5d:9b:14:66:9d:57:01:f3:
                    15:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:57:D3:CD:79:74:E5:39:53:B8:56:D8:16:BA:32:E0:FB:72:18:E7
            X509v3 Authority Key Identifier:
                keyid:3B:AD:EB:1F:38:E2:51:A9:D8:D6:14:F3:2D:36:F2:6A:DF:4F:D5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:27:66:4e:8b:35:d4:e4:e0:60:16:e5:8b:08:2d:54:12:9d:
         38:5a:50:b6:69:1f:4a:6f:fc:e6:1b:70:dc:c9:72:34:af:db:
         47:da:b3:c4:ef:9a:80:99:81:99:e2:42:26:dc:2b:6f:ff:7f:
         78:d9:b1:4a:c7:f5:1d:0a:e5:dd:d8:7c:b7:19:f8:2b:49:2d:
         89:9a:0c:88:c9:8b:e1:d1:05:6b:34:89:80:79:5e:e3:00:b5:
         b2:6d:07:70:e4:c5:4c:19:38:31:9a:ce:ce:10:b4:b2:25:fd:
         d1:d5:c9:7c:67:25:f3:02:6b:e3:ee:e7:35:95:f9:a0:27:6e:
         d0:26:b3:79:a3:46:98:82:de:9f:67:10:fa:f2:df:f0:fc:b4:
         49:71:3e:bf:c0:73:53:9f:c0:7b:80:b2:54:a7:dc:16:c2:19:
         bb:71:7b:72:7c:78:32:b2:27:bd:3b:39:53:91:2a:2c:d8:c7:
         cd:e7:d4:51:8c:ab:9c:a1:a7:26:27:39:09:fe:7f:d1:fe:31:
         89:be:a9:f6:9a:f2:e1:a3:08:91:70:7c:75:e6:29:22:c1:0b:
         b4:17:c3:1b:9c:3f:a1:b0:af:db:62:91:ea:cc:bc:91:e6:a2:
         af:08:64:1a:42:e9:73:c2:33:0d:61:2d:a4:fb:34:df:dd:a7:
         91:b0:79:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----