Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft
File:                     wwvzI77VsMENPzevDrNjrafKxKs.mft (raw, json)
Hash identifier:          yc+KpjHD2ZCMbj1xEIyJ1fmLJ0YaK9y2c8upEhesIpE=
Subject key identifier:   6D:B1:84:67:4D:4F:0F:14:AD:F6:19:83:B0:08:54:81:46:98:5D:4A
Authority key identifier: C3:0B:F3:23:BE:D5:B0:C1:0D:3F:37:AF:0E:B3:63:AD:A7:CA:C4:AB
Certificate issuer:       /CN=c30bf323bed5b0c10d3f37af0eb363ada7cac4ab
Certificate serial:       018F87492D13B345CB9B57255400074F7F5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwvzI77VsMENPzevDrNjrafKxKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft
Manifest number:          04B9
Signing time:             Fri 17 May 2024 16:01:10 +0000
Manifest this update:     Fri 17 May 2024 16:01:10 +0000
Manifest next update:     Sat 18 May 2024 16:01:10 +0000
Files and hashes:         1: wwvzI77VsMENPzevDrNjrafKxKs.crl (hash: aV0D/Ww3adrXpGyVrQR+ZoDXNmGnhQBqT9dU8gUsJrY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wwvzI77VsMENPzevDrNjrafKxKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:2d:13:b3:45:cb:9b:57:25:54:00:07:4f:7f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c30bf323bed5b0c10d3f37af0eb363ada7cac4ab
        Validity
            Not Before: May 17 16:01:10 2024 GMT
            Not After : May 18 16:01:10 2024 GMT
        Subject: CN=6db184674d4f0f14adf61983b008548146985d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:29:06:89:1a:b9:b4:2e:01:a1:fe:7b:ad:55:
                    78:f0:f7:4d:9d:c1:e4:0b:3d:d1:e2:0f:42:e5:14:
                    7e:0c:52:91:12:20:20:e0:92:90:f1:88:4f:9b:03:
                    3f:1c:47:fb:23:a1:4d:f9:79:63:61:30:75:8a:2a:
                    cf:97:c2:ba:96:f1:b3:40:9f:53:e3:98:23:b3:ab:
                    ac:2b:6b:a8:7b:5f:f6:4c:18:db:7e:bf:be:2a:5d:
                    37:0f:20:10:e9:19:68:6b:8e:26:6b:28:6a:ca:26:
                    bf:60:cd:e7:83:32:5b:c1:aa:1a:c4:e5:cc:15:ef:
                    e6:92:eb:0b:ae:c2:06:f8:fa:37:16:79:e2:71:ec:
                    55:25:c9:3a:b8:12:36:06:7e:61:44:c2:6a:37:6e:
                    85:59:43:0f:44:b2:c7:48:5d:4b:dc:7b:2f:a0:dd:
                    85:4f:31:ac:87:bb:f5:86:a9:53:85:75:02:df:f3:
                    55:86:77:75:5a:b2:9b:6e:51:2f:95:59:a2:75:07:
                    73:07:fd:74:53:7f:ff:bb:76:77:42:d3:af:39:50:
                    1e:76:61:b4:c8:08:13:04:2c:b9:01:f2:43:c5:d9:
                    d5:ed:86:73:fe:df:ca:45:22:e1:5a:73:c3:d2:26:
                    e3:5f:79:8e:d8:41:e6:00:da:41:05:5e:6b:f7:aa:
                    40:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B1:84:67:4D:4F:0F:14:AD:F6:19:83:B0:08:54:81:46:98:5D:4A
            X509v3 Authority Key Identifier:
                keyid:C3:0B:F3:23:BE:D5:B0:C1:0D:3F:37:AF:0E:B3:63:AD:A7:CA:C4:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwvzI77VsMENPzevDrNjrafKxKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:47:70:35:d9:7c:75:ed:53:25:98:6c:e1:f4:51:4e:0a:a6:
         06:0d:8b:be:39:7e:ba:06:ab:eb:f2:35:01:31:6e:e3:ed:01:
         dc:45:6e:d4:64:1d:81:e5:41:77:1e:dc:ff:77:4f:b1:77:5a:
         0a:27:6f:24:c1:8c:10:ea:be:9b:87:01:c9:47:f2:1b:5f:4c:
         5e:39:5c:39:5a:be:37:c6:c3:62:bb:33:f8:40:cf:ad:71:a3:
         7b:e7:51:a2:3e:6d:71:d4:c7:19:03:dc:2c:82:d5:09:89:01:
         10:bc:23:25:4f:8b:fa:a9:04:6f:1c:d0:ad:a2:e3:b8:90:33:
         78:00:cf:0b:f2:ce:9f:68:97:cf:df:d8:32:05:7e:b4:f0:de:
         ab:96:9e:23:1d:c3:46:eb:22:42:8c:60:54:c6:c5:aa:3c:ae:
         fc:6e:51:9f:06:60:32:cb:7c:a1:4f:b8:7a:25:01:0a:39:8b:
         36:e3:a3:42:b2:81:2e:76:89:65:98:0d:80:66:0d:45:e3:d6:
         68:c1:fc:45:1e:d7:a3:02:7d:b6:7b:77:fb:0c:0f:45:50:30:
         97:41:d4:70:f2:e3:b0:dd:57:5a:7c:14:9e:e1:5b:df:95:79:
         7f:04:70:52:90:d0:9a:12:7a:ef:67:28:d1:b4:53:cc:e2:39:
         3a:89:a6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----