Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
File:                     wrAFQRuLMhCDQsn3BZUCIGuYJME.mft (raw, json)
Hash identifier:          2EAX6d+QpxxkwB4QrQEx6L8VKMDy3iNnto3/fSF2vfI=
Subject key identifier:   21:0C:1B:69:11:07:3D:D3:AF:10:00:5D:A2:60:25:D7:28:47:BF:8E
Authority key identifier: C2:B0:05:41:1B:8B:32:10:83:42:C9:F7:05:95:02:20:6B:98:24:C1
Certificate issuer:       /CN=c2b005411b8b32108342c9f7059502206b9824c1
Certificate serial:       018F87B69F033ECF54EEE0FCCA8AD9FEB208
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 18:00:43 +0000
Manifest this update:     Fri 17 May 2024 18:00:43 +0000
Manifest next update:     Sat 18 May 2024 18:00:43 +0000
Files and hashes:         1: wrAFQRuLMhCDQsn3BZUCIGuYJME.crl (hash: VfdwLtgNRev9N4Sc5OXkU9F9noKc2CExxCN18NjL7xU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:9f:03:3e:cf:54:ee:e0:fc:ca:8a:d9:fe:b2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2b005411b8b32108342c9f7059502206b9824c1
        Validity
            Not Before: May 17 18:00:43 2024 GMT
            Not After : May 18 18:00:43 2024 GMT
        Subject: CN=210c1b6911073dd3af10005da26025d72847bf8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0a:a9:55:dd:89:52:b1:02:4c:84:15:2c:62:
                    a6:0d:ca:f1:00:45:41:b3:5d:67:9e:ee:c5:4d:9a:
                    46:d7:2e:ae:d3:95:84:0a:7a:b5:1b:bd:58:f7:15:
                    e9:cc:6e:88:41:1b:d3:22:6d:46:63:fa:c1:76:a0:
                    d1:85:45:14:1b:24:c2:50:eb:10:67:40:7a:fa:df:
                    95:c3:59:9e:2a:87:cb:29:5a:9f:4a:8f:eb:cf:69:
                    69:e4:56:7f:46:90:5f:ac:80:5e:45:74:da:a5:fd:
                    23:05:c8:97:a9:ee:58:bd:c9:88:7c:23:df:ce:16:
                    45:be:33:bc:c6:5c:96:42:38:99:c1:46:5a:84:44:
                    0b:18:6a:62:bb:71:f0:4b:63:a0:14:20:53:08:5f:
                    45:69:9c:11:df:20:d0:ba:10:ad:1a:d4:e9:2d:94:
                    dd:24:33:15:7b:37:bb:e8:90:af:8a:7e:a7:bb:4d:
                    29:c4:d6:92:cf:d0:40:2a:0b:13:c2:cd:c3:eb:2d:
                    f2:87:29:30:9e:b3:19:d7:f3:81:df:cd:bd:58:58:
                    95:f4:11:79:c8:e8:9e:2d:4c:6d:4c:45:1a:f6:00:
                    0f:f4:cd:af:d8:13:d1:4a:d8:1e:b5:d4:28:0c:fd:
                    7a:e3:f1:f8:0d:74:fc:71:d9:6a:4a:00:66:6a:d5:
                    46:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0C:1B:69:11:07:3D:D3:AF:10:00:5D:A2:60:25:D7:28:47:BF:8E
            X509v3 Authority Key Identifier:
                keyid:C2:B0:05:41:1B:8B:32:10:83:42:C9:F7:05:95:02:20:6B:98:24:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:c6:7b:f2:f2:6c:da:5f:c0:bd:c9:ce:1a:0f:81:48:02:0d:
         88:42:90:cb:55:7a:0b:47:8c:7f:68:39:0f:1b:27:d8:a0:2a:
         6b:9c:3f:21:d4:e7:96:05:50:53:07:3b:82:15:53:74:5b:e5:
         9c:0d:9e:cf:70:3e:cb:a9:c5:88:36:b6:c8:2d:bb:b1:01:be:
         12:f6:53:95:d9:4b:55:c6:47:b3:12:3e:71:8c:58:97:e1:dc:
         02:e2:ba:b2:6b:91:22:76:6d:87:b9:71:54:b5:61:1c:c4:69:
         21:18:a6:c6:02:50:b8:3a:1f:a8:18:64:4f:4b:b3:2f:b5:09:
         10:91:c3:a5:bf:a6:83:35:ab:c2:5b:12:a7:8c:b1:bb:3c:5e:
         8c:fb:49:bc:2c:4e:a7:0b:da:0a:b3:42:5e:1b:c4:df:91:f7:
         80:fc:4d:e1:57:97:a9:3d:90:53:c7:e1:64:3c:fa:90:54:b7:
         89:8d:0a:91:c6:60:70:d0:4f:03:d4:fb:bf:c8:4f:3a:3d:c9:
         f1:c6:21:2a:3d:b6:ca:31:1a:7a:e7:8a:76:ca:e7:2d:3e:1b:
         9c:74:7f:fe:c4:0b:e8:9b:66:5b:e4:e3:90:99:0d:ee:25:f8:
         d3:be:29:6e:ae:07:8c:17:5b:6d:b2:a0:36:70:dc:0d:40:e8:
         75:fe:06:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----