Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
File:                     9E8rYv2EXJFI4OImQldIw8bpdTk.mft (raw, json)
Hash identifier:          xd+aubUpA4NjboE47hjOvTxWBrXH1wBe0cZn8vDi3iY=
Subject key identifier:   9E:6C:C9:B7:35:07:CD:FE:DE:86:CA:BC:8D:AA:9F:DD:B0:72:2E:D3
Authority key identifier: F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
Certificate issuer:       /CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Certificate serial:       018F885B6EDBB3A4B94DF6D64036EF6EDEE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
Manifest number:          FA
Signing time:             Fri 17 May 2024 21:00:44 +0000
Manifest this update:     Fri 17 May 2024 21:00:44 +0000
Manifest next update:     Sat 18 May 2024 21:00:44 +0000
Files and hashes:         1: 9E8rYv2EXJFI4OImQldIw8bpdTk.crl (hash: bko3ymSO9G7pmhszhi0J08/RxV3OSJE/I5RDuaTVz8s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:6e:db:b3:a4:b9:4d:f6:d6:40:36:ef:6e:de:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44f2b62fd845c9148e0e226425748c3c6e97539
        Validity
            Not Before: May 17 21:00:44 2024 GMT
            Not After : May 18 21:00:44 2024 GMT
        Subject: CN=9e6cc9b73507cdfede86cabc8daa9fddb0722ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b5:1d:e0:b7:f1:bb:24:ed:dd:96:ad:75:ea:
                    a7:4f:76:c3:68:31:6f:08:b6:19:22:dc:26:ef:84:
                    07:2e:7b:a2:84:6e:81:8e:61:91:ba:8e:2e:c1:80:
                    e3:55:2e:8f:f9:1d:50:be:3c:cf:68:40:4a:f1:e8:
                    8c:63:f4:1b:95:ba:ec:87:50:7d:80:81:28:9a:36:
                    e6:c1:ee:d8:d6:5c:23:87:ea:8c:c0:9e:69:f5:fc:
                    83:29:46:1d:8b:22:c3:1a:6a:24:e5:71:6e:e2:42:
                    7d:2a:80:ad:eb:30:a7:65:5f:fc:c0:b5:00:32:6f:
                    1f:63:e0:f6:a5:53:7d:48:79:a5:e5:30:84:22:19:
                    9f:ac:0a:78:f6:5d:ef:ed:86:da:cb:a6:40:16:d1:
                    5c:36:9b:e2:60:07:4a:5c:07:e3:8c:b0:7f:39:5b:
                    0c:66:f0:f7:e1:6d:2e:ef:ca:5a:f2:cb:23:db:34:
                    7c:19:07:d3:b8:a3:c4:63:75:81:0a:ef:18:55:aa:
                    7b:78:2d:31:89:12:77:f6:3a:49:98:0d:55:a6:6c:
                    7b:fb:8d:24:76:74:5e:f8:df:ec:c5:e7:12:71:b7:
                    12:a0:c5:31:23:ec:89:0f:3c:65:36:0e:b8:b6:e9:
                    19:b0:28:f3:49:02:d6:b5:78:f3:e4:a8:7c:a3:da:
                    52:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6C:C9:B7:35:07:CD:FE:DE:86:CA:BC:8D:AA:9F:DD:B0:72:2E:D3
            X509v3 Authority Key Identifier:
                keyid:F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:10:14:84:9d:13:99:10:d5:af:95:c5:dc:07:5b:93:8c:9a:
         b7:b5:7e:ce:5b:ce:46:94:ac:08:b2:5d:f6:42:91:14:fc:46:
         d5:91:48:bb:4a:f6:be:0b:92:52:be:31:af:d7:f8:cd:e6:af:
         16:ad:91:7b:81:af:bf:d6:45:16:c2:10:71:3f:59:41:cf:44:
         e7:d3:5b:3b:26:bc:92:70:61:87:cd:9c:ef:e1:11:f6:1a:54:
         81:3b:ec:eb:cb:2b:11:6d:d9:b8:2d:9a:cb:e2:09:7c:86:6e:
         ca:5c:7e:99:2d:ae:b2:3e:ce:15:ab:d7:58:76:d5:6d:f3:8a:
         d9:05:a9:75:80:2d:e8:9a:65:fd:04:5b:2f:b7:7a:f6:1c:3c:
         52:cb:e9:75:45:82:f9:68:77:6f:a6:3e:00:9f:c6:7c:40:40:
         f8:55:a8:6a:72:39:90:ba:b5:2e:99:47:e6:1f:a6:47:ff:0c:
         03:b2:51:fa:e9:34:e9:db:9a:1d:58:7e:6a:0a:97:b4:ca:be:
         13:25:56:8e:07:de:d2:77:29:8b:b2:23:5b:08:2f:23:5c:8f:
         98:f4:e0:71:0d:29:2b:23:f8:ae:39:48:8f:59:22:64:05:62:
         74:11:be:06:cb:90:24:c6:32:da:a6:9d:5f:df:eb:db:7f:c3:
         12:9f:bc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----