Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
File:                     o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft (raw, json)
Hash identifier:          jcZDnP+JKhx143Dlzyj04CwmHKGa7E5cA5ALTgLIXSc=
Subject key identifier:   01:5A:25:EA:9A:A0:B0:47:A9:02:C7:CE:50:F6:7E:4B:85:59:71:0E
Authority key identifier: A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63
Certificate issuer:       /CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
Certificate serial:       018F8749EF9D3E6F12B8BBDC3DF36176852B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 16:02:00 +0000
Manifest this update:     Fri 17 May 2024 16:02:00 +0000
Manifest next update:     Sat 18 May 2024 16:02:00 +0000
Files and hashes:         1: o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl (hash: FLWmNHSOAG/qmOexT36KWk7MkxPjSh2BxZ7vY72h3N0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:ef:9d:3e:6f:12:b8:bb:dc:3d:f3:61:76:85:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
        Validity
            Not Before: May 17 16:02:00 2024 GMT
            Not After : May 18 16:02:00 2024 GMT
        Subject: CN=015a25ea9aa0b047a902c7ce50f67e4b8559710e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:77:24:0e:0a:7d:71:1f:c0:d1:56:5d:6a:50:
                    05:59:b2:4d:3c:f5:ef:6d:a0:e2:00:e6:57:3e:9e:
                    f8:d6:ea:35:d2:49:9d:13:28:1a:e8:b9:19:0d:56:
                    3a:f3:be:d9:2e:60:c0:c2:0e:aa:dc:ab:f2:a6:30:
                    e0:58:0b:53:c4:a9:0f:26:78:44:16:63:6f:70:31:
                    e5:6f:39:03:7a:dd:e1:d4:1f:4c:7b:ec:17:ea:d0:
                    a3:78:8c:67:1e:43:a6:3d:12:4d:d8:c4:55:ad:b4:
                    aa:a0:ae:65:6f:fc:9e:bc:5c:4f:07:f2:de:ea:34:
                    12:6d:43:06:a5:db:9e:6b:4a:3e:61:a6:1e:63:43:
                    03:8b:a0:9e:7f:c9:11:a9:df:d2:98:89:58:80:02:
                    e8:69:a8:e8:3c:9b:84:eb:4c:6d:9b:40:ec:8e:4c:
                    56:82:21:ca:fd:37:d9:29:5f:8e:ce:b3:f3:82:ca:
                    8d:1d:6e:aa:fc:6c:00:6d:5a:b6:e0:40:75:1d:c7:
                    be:06:35:a9:f1:2b:65:0a:bd:57:e9:6b:05:2a:df:
                    1e:81:87:4b:fc:82:72:91:8d:16:cb:bc:68:48:30:
                    c4:26:7b:27:84:20:46:4e:ea:69:c7:11:5f:b8:af:
                    21:ca:a3:a3:05:d3:43:3e:8a:47:18:37:f4:f1:23:
                    43:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5A:25:EA:9A:A0:B0:47:A9:02:C7:CE:50:F6:7E:4B:85:59:71:0E
            X509v3 Authority Key Identifier:
                keyid:A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:74:84:e5:cf:69:9f:a7:ae:9b:d7:c3:e5:a5:1f:cf:17:9e:
         6c:11:f8:44:89:eb:6f:98:a9:1b:9b:16:cd:c6:e0:7f:d4:64:
         e6:61:3c:7e:38:9c:c0:fb:54:fe:42:06:28:e5:13:dc:9e:b0:
         0d:38:01:eb:1e:8a:16:4c:09:6a:f0:6e:61:c2:ac:bd:ef:db:
         db:1d:90:82:16:99:f9:87:0a:bc:db:66:e4:a0:20:b2:d7:e1:
         da:8c:77:75:78:12:26:d7:cf:5e:a8:70:95:0d:ca:5b:f0:f6:
         f5:e7:37:11:cc:f3:fd:82:7a:59:75:ee:f4:c1:b6:14:32:09:
         4b:a5:da:bf:c6:20:f2:24:3c:82:fb:14:cb:92:d2:5d:6b:99:
         26:9b:b9:f0:02:84:b3:15:45:71:96:78:03:a8:3d:d0:df:e1:
         d6:f4:aa:fd:83:cd:b0:66:4d:86:45:f6:8e:08:5b:51:ec:0d:
         89:f6:fd:19:60:66:11:29:cc:7a:c7:00:a5:39:00:cb:b5:a3:
         c6:bd:9e:41:69:a5:05:89:73:e5:48:f1:c1:c4:95:60:b5:95:
         0a:e5:5a:43:68:22:a9:e9:5f:09:1a:69:40:75:10:87:cb:63:
         ae:3b:9e:1b:78:95:cd:ba:4f:06:60:06:95:6b:88:60:48:31:
         45:53:61:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----