Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft
File:                     lkyqlAOgjTc7kLcQpW0-roE5T_A.mft (raw, json)
Hash identifier:          nKt2fpUs1/4sAYK5wIkRk/G9el7PpIwzdsMKNq0L99U=
Subject key identifier:   B2:04:04:CE:99:73:42:D7:B7:C6:49:E2:B7:7F:7F:A3:8D:0F:B4:CA
Authority key identifier: 96:4C:AA:94:03:A0:8D:37:3B:90:B7:10:A5:6D:3E:AE:81:39:4F:F0
Certificate issuer:       /CN=964caa9403a08d373b90b710a56d3eae81394ff0
Certificate serial:       018F87B653A890763E78C2F69051EF3680DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lkyqlAOgjTc7kLcQpW0-roE5T_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft
Manifest number:          1105
Signing time:             Fri 17 May 2024 18:00:24 +0000
Manifest this update:     Fri 17 May 2024 18:00:24 +0000
Manifest next update:     Sat 18 May 2024 18:00:24 +0000
Files and hashes:         1: lkyqlAOgjTc7kLcQpW0-roE5T_A.crl (hash: IDGnqstUn6VDah5TGwl8CZFQucnBq9yhBkf/eq+eZ14=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lkyqlAOgjTc7kLcQpW0-roE5T_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:53:a8:90:76:3e:78:c2:f6:90:51:ef:36:80:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=964caa9403a08d373b90b710a56d3eae81394ff0
        Validity
            Not Before: May 17 18:00:24 2024 GMT
            Not After : May 18 18:00:24 2024 GMT
        Subject: CN=b20404ce997342d7b7c649e2b77f7fa38d0fb4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:27:78:7a:77:70:4b:a8:2f:98:f8:e6:ea:c5:
                    35:3f:85:0a:2e:96:57:3e:af:93:8e:eb:2d:8b:2f:
                    fc:92:76:21:f7:64:73:7e:c5:98:06:f3:7f:67:7f:
                    52:b5:2b:36:f4:bf:e0:75:01:09:e9:81:ec:7a:6c:
                    2a:c7:c1:17:f8:bc:50:ae:f5:1d:77:a7:8d:c3:5d:
                    2c:2f:81:56:b1:4d:e6:e9:46:40:ce:55:28:9b:7b:
                    12:b6:8e:8f:8d:79:67:43:7c:c7:8d:3a:27:d1:9f:
                    18:d5:03:40:b7:5d:f0:f5:b4:20:76:3b:e9:ac:32:
                    b7:c8:23:69:68:2f:44:5b:c9:a0:94:e3:2f:4d:38:
                    3c:e1:27:c1:eb:ba:56:6e:f0:ff:d8:66:55:da:ef:
                    59:17:04:f1:5c:f1:3c:51:56:4a:dc:82:5d:25:ab:
                    af:1f:13:43:7e:ad:43:44:f6:fd:e7:fc:4a:ea:37:
                    be:89:87:06:78:27:c6:90:70:5b:62:85:6f:a8:62:
                    6d:b3:b8:d8:33:6c:6c:ef:ef:27:6c:36:16:79:79:
                    7a:bb:34:40:67:64:85:50:56:af:bf:72:11:82:c6:
                    04:c8:2e:2e:3f:72:2e:3f:a8:47:7c:db:cf:2c:ce:
                    cd:d3:19:36:df:b7:39:0a:8f:32:a0:a2:d6:0f:03:
                    76:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:04:04:CE:99:73:42:D7:B7:C6:49:E2:B7:7F:7F:A3:8D:0F:B4:CA
            X509v3 Authority Key Identifier:
                keyid:96:4C:AA:94:03:A0:8D:37:3B:90:B7:10:A5:6D:3E:AE:81:39:4F:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkyqlAOgjTc7kLcQpW0-roE5T_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:21:cb:97:74:af:f6:9a:b8:be:8f:f3:f9:66:f0:74:37:fe:
         35:bf:88:f8:ed:d0:32:a6:9e:fe:7b:c2:b5:a7:61:3d:9b:65:
         b8:bf:1e:e4:28:3a:ef:63:a9:1b:4c:09:87:5d:b6:85:7b:ad:
         f0:87:d7:4a:9c:f2:ed:f8:f6:40:c1:1c:d0:51:bd:ea:d7:b7:
         59:27:f7:70:54:98:62:11:f9:82:8b:c3:a6:68:98:a3:5a:e1:
         14:7c:b6:f0:a0:b7:21:f7:e8:92:8c:4b:de:63:a8:a7:c6:80:
         82:f2:8d:57:f7:07:a9:30:18:de:b8:37:a1:72:7c:43:53:f8:
         9f:0d:b1:2f:8b:e0:02:7e:7f:74:c1:4c:26:b7:32:6c:07:74:
         3c:32:2e:a5:6b:8e:bd:74:d6:73:2c:2e:6c:d2:39:fe:1c:b7:
         fc:29:29:4e:ed:d0:a2:10:05:2f:0e:54:e2:0a:81:70:b2:90:
         8b:c9:64:6b:6b:6e:c4:18:ad:1a:65:87:a5:13:c3:85:86:bd:
         a1:da:8c:3b:bb:b9:4a:b8:ad:18:6f:a2:ae:d8:1a:f5:94:4a:
         52:29:54:00:f0:87:64:58:fa:b1:d9:ab:e7:fd:01:96:11:96:
         c1:86:0f:b1:55:3b:7a:6c:cd:fe:08:50:bd:94:c0:d6:d0:f0:
         05:e2:ff:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----