Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
File:                     pcatcQWg6X4ZLw6I5mgYq2D33sg.mft (raw, json)
Hash identifier:          4q3tefbQanAGoDx3yR7JmppoGj8g+PAmlSnWhGmPdhU=
Subject key identifier:   97:20:B7:81:2D:08:EF:34:44:82:69:63:A2:01:83:90:FF:2D:98:90
Authority key identifier: A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8
Certificate issuer:       /CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
Certificate serial:       018F89391DB902AC811649A397B45DCC201F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
Manifest number:          1175
Signing time:             Sat 18 May 2024 01:02:52 +0000
Manifest this update:     Sat 18 May 2024 01:02:52 +0000
Manifest next update:     Sun 19 May 2024 01:02:52 +0000
Files and hashes:         1: pcatcQWg6X4ZLw6I5mgYq2D33sg.crl (hash: oZ3L/Lb+6i9/XpW3/27IWdW9QL8COCcK5Io+pQXq82k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:39:1d:b9:02:ac:81:16:49:a3:97:b4:5d:cc:20:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
        Validity
            Not Before: May 18 01:02:52 2024 GMT
            Not After : May 19 01:02:52 2024 GMT
        Subject: CN=9720b7812d08ef3444826963a2018390ff2d9890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f6:be:38:a6:96:c8:45:a0:76:70:55:bc:7c:
                    73:cc:74:80:0a:a9:27:d9:89:ec:3c:2d:af:9a:49:
                    c0:c5:ec:fe:d7:fc:ae:a9:24:c2:2d:17:b7:7f:a7:
                    78:47:d9:6a:01:66:bb:00:2d:ca:8f:af:9e:b9:60:
                    77:bf:7f:c4:10:f5:9c:c3:8d:49:3b:90:b8:97:60:
                    90:30:87:b9:f7:a0:bb:78:f5:85:88:7f:4d:d5:0a:
                    50:a8:18:7c:5e:68:eb:20:54:78:2c:a3:7e:40:7c:
                    b6:84:68:88:f0:f4:c4:e4:c4:ec:81:ca:41:84:4e:
                    54:ba:b5:d6:17:1e:b2:66:3f:56:1c:bd:b4:6b:84:
                    df:00:a0:b4:14:fc:c0:d7:08:42:40:88:cf:8c:01:
                    a2:d3:28:ac:1f:f8:b6:53:1a:7c:14:cf:52:fd:84:
                    9f:c3:eb:9f:22:45:fa:bb:18:ee:6d:cc:65:e8:50:
                    28:54:e6:ae:d8:27:c7:d2:f6:59:54:be:d1:12:3b:
                    47:6f:4e:0b:4b:d2:3e:d6:4b:c0:a9:e4:e8:35:e0:
                    49:7f:d8:eb:63:17:3b:8b:48:3c:52:7b:46:3d:47:
                    39:84:43:d0:07:df:e6:96:20:f3:72:84:39:5b:1f:
                    71:58:d2:4b:d5:6c:08:94:a9:99:b2:7c:2e:ce:9d:
                    e0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:20:B7:81:2D:08:EF:34:44:82:69:63:A2:01:83:90:FF:2D:98:90
            X509v3 Authority Key Identifier:
                keyid:A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:69:e2:25:bb:7f:f1:66:d2:c8:f5:9a:b9:54:f1:3b:ab:72:
         55:bb:8b:e9:db:90:01:64:11:65:70:86:56:ab:6a:bd:da:82:
         60:57:92:73:ce:ba:77:01:c3:b4:06:d6:e6:67:d8:3a:a9:0e:
         20:d0:0d:a2:7e:af:eb:38:fe:47:cb:42:01:c2:2e:57:55:f2:
         eb:ec:92:bc:cd:1e:49:e7:b9:16:f4:fd:bb:0c:8d:36:e2:66:
         0b:c1:33:6c:32:d3:1e:20:eb:b5:49:d0:fe:1f:98:55:fa:dd:
         6f:68:b1:97:e5:50:c9:3c:67:22:78:63:bb:0f:8d:2b:8e:22:
         64:55:fc:7b:87:76:42:5e:95:a1:c4:2d:e1:a3:5d:99:94:64:
         5f:ab:f2:8c:4f:90:44:99:83:af:5c:52:28:1f:d0:f2:88:34:
         2e:f1:85:67:0b:47:67:26:95:f7:de:1c:13:3b:51:8d:31:eb:
         68:49:36:5d:b1:cc:80:ab:a8:a0:fd:c1:f2:b8:b7:e9:05:d5:
         1f:21:fd:f7:5a:b6:3a:67:13:bb:d4:08:bb:7b:69:86:41:66:
         16:d1:da:1c:e1:d4:b5:5f:c9:df:ef:de:fb:fd:46:3a:a1:50:
         d9:f8:6d:4d:cf:de:e8:76:2f:f7:60:93:ab:c8:8e:d1:f0:46:
         23:af:3e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----