Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
File:                     fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft (raw, json)
Hash identifier:          YXpfg71FLIKAyvgBtvkEWjgeTdqBAnmitMZLp0ThcEE=
Subject key identifier:   C2:6A:BA:00:7B:D1:F5:AA:17:EE:A0:4D:B9:87:8B:A4:77:00:81:FA
Authority key identifier: 7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7
Certificate issuer:       /CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7
Certificate serial:       018F87B67CD0927680FDB7A5F085410188DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
Manifest number:          0875
Signing time:             Fri 17 May 2024 18:00:34 +0000
Manifest this update:     Fri 17 May 2024 18:00:34 +0000
Manifest next update:     Sat 18 May 2024 18:00:34 +0000
Files and hashes:         1: fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl (hash: tjDLtYSP5jR8LxArKeIkiQ+WB4bZG5jEJ743K1gs7vw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:7c:d0:92:76:80:fd:b7:a5:f0:85:41:01:88:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7
        Validity
            Not Before: May 17 18:00:34 2024 GMT
            Not After : May 18 18:00:34 2024 GMT
        Subject: CN=c26aba007bd1f5aa17eea04db9878ba4770081fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:18:da:5b:76:a2:35:f4:f7:21:bf:92:8e:41:
                    b4:9f:c0:27:d1:84:8c:1d:7b:d1:d4:8e:b1:b8:ab:
                    56:93:e4:ea:27:9f:cc:9c:35:a6:3b:40:c3:fe:0a:
                    7c:64:6e:0b:5a:72:d1:68:3e:70:c2:b8:95:b2:e1:
                    d5:78:9f:ec:87:5f:18:00:04:4d:ab:cc:a7:8f:8c:
                    78:00:45:c3:57:ad:4c:76:ae:49:7d:09:fa:5a:09:
                    64:f8:21:2b:97:10:45:bd:3f:c1:dc:e1:d7:08:f3:
                    a2:ec:6e:61:94:6d:ec:78:b5:a9:76:46:26:7c:2b:
                    77:a6:bc:7b:0b:cd:0a:40:cf:26:3b:8b:84:29:d4:
                    67:3a:7e:7d:f3:8e:ab:37:4a:67:76:f5:d4:7a:ef:
                    78:8d:3b:88:6f:35:7f:75:0a:fe:7f:61:d9:9d:3e:
                    6b:7a:41:9c:16:aa:84:bf:95:d8:0f:30:b4:4b:88:
                    1b:2b:67:da:ce:aa:d6:14:c6:d2:9c:49:1c:9f:20:
                    a2:e6:af:6e:bd:d6:c5:c5:52:1a:74:12:73:08:71:
                    03:86:0e:2e:cc:18:31:e6:44:a9:b1:55:39:27:9b:
                    8f:0f:bb:4d:0a:e8:f5:6d:fe:c8:79:ea:13:90:e1:
                    5b:93:6d:c0:2f:5f:69:48:c3:3d:92:d8:12:ef:d7:
                    db:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6A:BA:00:7B:D1:F5:AA:17:EE:A0:4D:B9:87:8B:A4:77:00:81:FA
            X509v3 Authority Key Identifier:
                keyid:7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:d4:a5:c0:38:0b:e5:f0:38:4b:e5:9d:58:76:c4:e5:b0:8f:
         72:97:0c:1a:20:e3:1a:da:2e:c9:3a:77:90:3f:9c:18:91:b6:
         81:61:92:30:06:ea:28:9a:0c:a6:6c:57:95:03:fb:56:29:aa:
         bc:d1:65:0f:d1:99:5a:56:dc:dd:0f:92:f2:43:82:ae:de:7e:
         6b:b5:ec:6c:f0:83:d9:62:56:dc:c0:09:e4:83:95:da:88:8e:
         72:89:18:ba:37:6a:d1:06:0f:04:9e:b5:80:16:bc:2a:94:1e:
         c4:a9:b6:c0:70:1c:25:cf:83:85:6e:67:24:be:7e:ce:6a:fd:
         f1:aa:b6:a8:7a:00:94:5b:61:9a:d5:aa:80:99:ff:2b:d6:be:
         df:66:90:e6:a1:a1:f8:70:c6:38:04:1e:a8:3d:35:1f:be:32:
         71:ce:68:c6:62:97:7e:e9:48:05:d1:91:92:22:26:72:cb:f9:
         e2:42:ed:b5:a9:37:ef:50:e3:3d:6c:60:50:b6:fd:d7:ce:5d:
         1c:14:9c:11:cc:0c:88:35:54:da:d4:3c:dd:d0:b1:d3:4f:b6:
         f7:57:cf:27:c8:af:51:c1:19:05:0a:29:0c:1f:5f:cf:d9:b5:
         a9:11:a7:ff:d9:96:27:89:1a:e0:a2:4b:f2:2a:0d:9a:8f:28:
         d5:15:82:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----