Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
File:                     Fhw-D9hiGXEWBK524iPPC3MM37c.mft (raw, json)
Hash identifier:          aC/CgNfrjqgEvXVrBE1G8NDgd85H4Lztr6cNhi64WJ8=
Subject key identifier:   C9:F2:07:4B:3F:64:FA:EC:0D:DC:FA:C2:A7:FA:14:6B:9A:A2:E1:DB
Authority key identifier: 16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7
Certificate issuer:       /CN=161c3e0fd86219711604ae76e223cf0b730cdfb7
Certificate serial:       018F1E5B2F056852AD074B839B5D54384E2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
Manifest number:          0D11
Signing time:             Sat 27 Apr 2024 07:00:43 +0000
Manifest this update:     Sat 27 Apr 2024 07:00:43 +0000
Manifest next update:     Sun 28 Apr 2024 07:00:43 +0000
Files and hashes:         1: Fhw-D9hiGXEWBK524iPPC3MM37c.crl (hash: iuJKGmlLO9DXJ4hXsAxxwTHnflaCVz0JoM6vX9I0pH0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 07:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1e:5b:2f:05:68:52:ad:07:4b:83:9b:5d:54:38:4e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=161c3e0fd86219711604ae76e223cf0b730cdfb7
        Validity
            Not Before: Apr 27 07:00:43 2024 GMT
            Not After : Apr 28 07:00:43 2024 GMT
        Subject: CN=c9f2074b3f64faec0ddcfac2a7fa146b9aa2e1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9c:9d:26:b4:ba:79:b6:47:57:d5:0d:9d:9b:
                    fa:c5:97:1d:3c:b0:90:01:21:4d:1a:ee:e7:74:7b:
                    85:68:74:b5:60:29:6d:d5:d1:88:a5:a2:ed:42:ab:
                    5b:ed:20:f9:1b:37:56:66:27:f5:41:ab:d1:53:e1:
                    93:06:52:b8:97:04:c5:1a:13:d0:19:3e:d2:97:de:
                    90:52:cf:e7:c1:73:57:a9:b5:90:33:17:ae:9b:2b:
                    31:20:45:2d:05:13:eb:ec:10:73:ef:74:23:c7:81:
                    04:d1:e3:28:2b:77:8a:94:12:bf:98:09:4e:02:4c:
                    3e:63:6a:88:b6:ec:89:8e:f1:c1:98:fb:cd:f0:70:
                    46:7f:7c:50:27:15:83:8c:64:b0:f9:b0:7a:5c:c9:
                    37:17:bb:56:00:ba:16:23:92:76:28:72:ee:51:af:
                    f0:36:a9:52:89:52:4e:40:12:ff:fe:56:73:60:a6:
                    be:fa:cd:58:bd:77:48:af:cf:e0:86:15:38:d9:6d:
                    31:6a:09:a6:89:f2:99:fa:ad:8b:18:57:3d:d7:a1:
                    af:a7:6e:cb:1d:61:b0:76:d7:d5:cc:7d:0a:75:c8:
                    ca:0b:2c:05:d2:c2:d0:dc:04:d0:fb:96:42:d4:ef:
                    07:ec:16:21:36:52:49:5f:b5:69:60:1b:84:56:c3:
                    11:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F2:07:4B:3F:64:FA:EC:0D:DC:FA:C2:A7:FA:14:6B:9A:A2:E1:DB
            X509v3 Authority Key Identifier:
                keyid:16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:6d:65:e3:11:96:41:21:b5:1a:bf:e7:76:0a:9f:00:38:5e:
         95:75:bf:4e:6a:10:d5:20:fd:77:65:5c:93:8b:63:24:e0:a4:
         56:d5:64:21:43:56:f0:53:c7:4c:ac:88:9a:85:c1:97:e3:88:
         3d:79:fb:f9:09:2a:e8:23:c1:f3:7c:b1:2d:7b:00:0d:b8:9c:
         91:33:0b:80:2d:1d:ef:94:47:bd:71:87:7e:f7:40:ca:0d:9e:
         8b:e2:62:0d:51:74:d8:15:36:2d:8a:6c:fd:3f:d1:1e:d3:e2:
         15:c7:8a:08:ed:fb:87:5d:12:07:ea:ad:5e:13:74:51:45:3b:
         24:4f:f3:76:01:b4:21:f1:ce:96:fc:bd:1a:fe:1f:2b:44:62:
         80:97:57:c9:70:6f:ff:70:74:80:fa:f3:8e:39:ed:6a:ec:33:
         77:18:98:56:aa:f1:51:37:2f:0c:dc:84:39:d9:58:89:61:a0:
         87:53:08:90:e1:2b:71:6c:fe:6c:6f:14:04:12:36:b2:ee:00:
         83:e5:05:da:25:66:3e:cf:dc:e6:ce:73:be:65:ac:0b:0b:0a:
         25:2f:bc:e5:44:a5:47:a4:51:e4:6a:cd:90:27:26:7c:9a:26:
         85:20:27:0f:b4:0e:b5:64:3b:21:4b:2e:6c:b2:d9:87:27:3d:
         5c:6d:c4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----