Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
File:                     7O2DGd7RXV8LarRBAJ3hmxnRUps.mft (raw, json)
Hash identifier:          r5Pz6VOlFABbYekvPc3/C2jtG+TmJVdWbHOwxHhts1k=
Subject key identifier:   89:5F:9B:35:99:95:6E:8C:14:68:07:74:01:6B:15:5E:C0:8D:19:0B
Authority key identifier: EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B
Certificate issuer:       /CN=eced8319ded15d5f0b6ab441009de19b19d1529b
Certificate serial:       018F87ED3F5AE485CDA43372053D16B37E2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
Manifest number:          017D
Signing time:             Fri 17 May 2024 19:00:23 +0000
Manifest this update:     Fri 17 May 2024 19:00:23 +0000
Manifest next update:     Sat 18 May 2024 19:00:23 +0000
Files and hashes:         1: 7O2DGd7RXV8LarRBAJ3hmxnRUps.crl (hash: EiQsUFu5pHFc5Rq5DYY+ZrY3kHeCQg55yrNhGIkPJGs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:3f:5a:e4:85:cd:a4:33:72:05:3d:16:b3:7e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eced8319ded15d5f0b6ab441009de19b19d1529b
        Validity
            Not Before: May 17 19:00:23 2024 GMT
            Not After : May 18 19:00:23 2024 GMT
        Subject: CN=895f9b3599956e8c14680774016b155ec08d190b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:ae:b8:8b:a7:2d:9f:3f:6b:66:51:bf:ed:
                    db:d3:ef:7b:1c:0d:e5:4f:68:41:1d:ca:f4:99:1d:
                    07:45:82:7d:a7:35:27:c5:6a:e5:a7:e8:ba:c0:78:
                    d6:19:92:a4:f5:39:ae:dd:bc:37:7c:89:74:3e:d4:
                    24:fb:65:a3:5d:f8:1d:d9:df:31:87:63:8b:37:fa:
                    f7:56:b5:d3:4f:0c:dd:06:28:08:0f:e4:79:80:c8:
                    d1:11:b5:fe:c0:56:09:5a:50:79:85:55:38:2a:f5:
                    a0:26:65:fe:16:de:7a:3f:bc:8b:1d:42:3c:eb:5f:
                    09:19:cd:79:6d:26:ee:e1:0f:47:d0:05:85:94:5b:
                    13:0d:aa:46:13:19:07:60:a3:e2:43:fc:65:66:68:
                    7e:b9:c9:3b:46:e0:ee:25:fe:2e:1c:0a:ec:19:40:
                    63:f3:67:31:44:3c:c2:96:74:eb:f6:ac:25:c3:fc:
                    d8:d2:f9:ba:26:e3:dc:cd:8c:98:31:cb:a1:3d:2c:
                    b5:0b:ba:eb:93:9b:cd:cd:b0:03:14:ee:a5:e3:2d:
                    99:48:1a:19:6a:32:c0:8a:14:16:7c:82:20:dc:41:
                    19:19:1b:3c:d8:99:6f:84:38:61:62:21:7c:0e:84:
                    cc:4b:c2:a2:b6:7f:e3:ac:60:60:67:f3:72:27:41:
                    70:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5F:9B:35:99:95:6E:8C:14:68:07:74:01:6B:15:5E:C0:8D:19:0B
            X509v3 Authority Key Identifier:
                keyid:EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:af:c5:66:1b:63:61:a7:95:41:64:41:4a:30:63:cf:40:0f:
         37:31:df:31:4f:c6:b1:49:27:14:44:6f:1d:4e:8e:c0:22:2e:
         15:8b:bb:a0:6f:b2:7e:b1:bb:8f:96:30:3f:41:c4:44:af:c1:
         09:24:6c:bb:a8:2a:18:36:d2:78:95:72:c1:8d:8b:dc:80:4b:
         bf:a8:39:9d:70:0b:6b:6c:e1:76:8a:48:fb:26:c9:e7:b3:16:
         f3:60:90:e1:23:4d:63:f8:19:4c:4d:8e:30:fb:f9:b8:63:c1:
         58:54:d1:c6:99:38:07:bc:da:95:98:1c:8e:dc:25:4d:d9:2d:
         ac:4a:e2:49:e2:34:59:87:48:8b:c7:f9:38:48:7a:af:1e:21:
         28:8f:2a:b9:ac:ec:3b:8e:3d:b7:7e:2e:af:1f:a5:c7:19:4a:
         03:1f:62:60:a5:fa:7a:43:ef:1f:e5:b7:cb:96:cf:b3:a4:55:
         6f:4b:38:5e:6f:68:52:23:71:9e:cd:42:c4:07:8c:96:bd:b2:
         80:ca:68:d3:ae:ca:b6:6b:7b:97:53:c5:a5:75:ec:c1:ef:94:
         9d:b8:9a:ff:8f:b8:99:3d:97:97:e7:46:38:a3:47:5d:92:f7:
         c8:9b:4d:1a:6d:ba:9e:fb:20:83:c3:24:04:83:b4:dd:b0:05:
         41:5e:2a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----