Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
File:                     8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft (raw, json)
Hash identifier:          hqo8LB821sP78eiKjVK3i1VPpidFBQk6AbwNDZ26esA=
Subject key identifier:   19:BA:16:B8:7C:BA:E0:E0:BA:2D:E3:05:4F:FB:FA:D5:59:D5:28:4A
Authority key identifier: F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
Certificate issuer:       /CN=f0a95b78b0576501278efd7e020269ba1f06d386
Certificate serial:       018F7BB4E2D42022602FF39A599A869EB03C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
Manifest number:          0748
Signing time:             Wed 15 May 2024 10:03:23 +0000
Manifest this update:     Wed 15 May 2024 10:03:23 +0000
Manifest next update:     Thu 16 May 2024 10:03:23 +0000
Files and hashes:         1: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl (hash: ltrHk0ZWA3fnqsmd6ABmX4Ky1VtgXkIf6k7QTaUfkKU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 10:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7b:b4:e2:d4:20:22:60:2f:f3:9a:59:9a:86:9e:b0:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0a95b78b0576501278efd7e020269ba1f06d386
        Validity
            Not Before: May 15 10:03:23 2024 GMT
            Not After : May 16 10:03:23 2024 GMT
        Subject: CN=19ba16b87cbae0e0ba2de3054ffbfad559d5284a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e3:6c:dc:e7:17:7b:24:1f:0a:1c:68:48:fd:
                    4a:b0:51:e3:03:a0:68:20:e1:fd:08:06:77:b8:f1:
                    98:d5:0b:f8:65:8d:1f:a1:2f:b9:19:80:17:e5:2b:
                    1b:c6:f9:9d:00:b9:db:ca:7e:5d:d3:4c:e0:73:bc:
                    2e:ab:61:cd:da:1d:f7:c8:76:08:61:e2:7d:ff:9f:
                    22:63:9c:94:2b:6a:97:6e:30:5e:dc:45:27:f0:ad:
                    55:fe:51:85:84:74:4c:99:3e:45:6a:fa:e0:82:a8:
                    eb:e3:f6:47:a4:e0:8e:88:e7:b5:bd:dc:63:fd:fa:
                    4c:1a:9f:aa:c0:1f:7f:2d:2f:0c:1e:b4:67:54:17:
                    46:26:0b:cf:6b:68:eb:54:ab:7c:22:d1:e3:eb:59:
                    7c:cb:33:7a:64:ed:85:75:b6:2e:54:ca:44:9f:51:
                    74:37:6b:b7:0e:f6:5a:73:3c:e9:ba:27:a6:16:d1:
                    b2:ba:61:7e:53:ad:0e:8e:c2:e0:d1:ee:61:e5:5c:
                    77:54:2e:a8:5d:93:f5:ee:4a:5b:97:a1:60:9d:e5:
                    d7:00:56:7a:d2:e8:2c:06:44:01:b8:98:f9:29:6d:
                    65:bf:34:b1:2b:20:02:e7:7a:f1:0f:32:f6:5b:b4:
                    97:4b:5c:fb:af:f4:6d:67:10:b5:9e:76:70:1f:03:
                    4f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BA:16:B8:7C:BA:E0:E0:BA:2D:E3:05:4F:FB:FA:D5:59:D5:28:4A
            X509v3 Authority Key Identifier:
                keyid:F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:1e:13:ed:4f:9a:55:7c:5e:57:93:23:50:cc:8e:28:f7:99:
         7d:59:de:cc:73:46:5c:52:6c:95:36:b4:48:72:05:ae:d4:4d:
         71:11:53:d6:31:d1:e5:3a:ae:5e:c9:08:48:81:9c:af:12:e8:
         aa:1f:02:94:1b:df:83:6f:98:d5:0d:83:96:e6:c9:5e:d3:d7:
         76:be:54:99:fb:01:3f:22:89:0a:a7:41:50:d2:0e:de:d7:01:
         df:df:a4:30:40:51:97:c1:a6:44:7f:e7:ff:3d:04:df:c6:52:
         88:3c:04:2f:d2:ce:9b:94:df:39:de:21:40:0c:70:a9:76:dc:
         91:6e:cc:d4:15:d7:0e:8d:8a:b1:19:fb:67:a7:3b:ac:37:0c:
         ea:cd:de:94:42:a1:3b:b9:f9:b7:fa:66:2d:8f:a4:39:35:27:
         83:b8:34:f8:0a:9b:c2:82:51:20:e0:c2:89:6b:68:fb:ac:79:
         96:c9:8d:dd:1a:7b:c7:94:bf:91:15:cd:0e:7d:ab:7e:02:5c:
         f0:8d:96:26:1f:36:da:6b:ef:fc:31:50:c4:59:f7:b1:a1:07:
         64:ec:f1:62:65:5d:8b:56:3d:2d:33:b9:21:7c:14:c5:29:45:
         59:8e:4b:69:94:33:36:81:02:f6:7a:55:0f:68:34:1a:8a:ff:
         f3:3f:99:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----