Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
File:                     ZtYtu574eixrGodeUq8TKIRpclo.mft (raw, json)
Hash identifier:          WrN4udTR7pzLFj8mZuyimJFHgy7ytjvroNqxpLfBP5g=
Subject key identifier:   B6:C8:AB:BA:A9:78:2B:6B:7D:0E:F4:36:50:18:2C:18:80:EC:47:3F
Authority key identifier: 66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A
Certificate issuer:       /CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
Certificate serial:       018F87B6E2B02F1A4022DFC38E829AE2B73D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
Manifest number:          1173
Signing time:             Fri 17 May 2024 18:01:00 +0000
Manifest this update:     Fri 17 May 2024 18:01:00 +0000
Manifest next update:     Sat 18 May 2024 18:01:00 +0000
Files and hashes:         1: ZtYtu574eixrGodeUq8TKIRpclo.crl (hash: 4hkpAUlQvmGYzDtT2YbrFMISL5JdWrKtUQVJb+gc4mY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:e2:b0:2f:1a:40:22:df:c3:8e:82:9a:e2:b7:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
        Validity
            Not Before: May 17 18:01:00 2024 GMT
            Not After : May 18 18:01:00 2024 GMT
        Subject: CN=b6c8abbaa9782b6b7d0ef43650182c1880ec473f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:dc:7c:ca:4f:4c:db:4c:3e:e1:91:fc:19:bb:
                    b2:c6:5f:fc:fd:ca:4a:fd:f7:11:1d:c5:51:62:42:
                    90:19:28:dc:fd:5c:59:4d:e2:15:aa:3d:07:3e:70:
                    2d:ef:cd:c3:70:04:df:79:a7:34:9f:fd:4e:17:0e:
                    1d:b3:50:7e:63:30:58:10:2d:f7:2f:6c:f7:95:f5:
                    4b:01:e5:6d:79:c2:f2:a0:77:97:54:97:51:74:49:
                    de:b4:34:41:f5:c4:2b:f1:94:1d:de:3d:50:58:51:
                    c3:27:52:80:96:0a:d4:22:4b:ec:b5:4a:78:8c:92:
                    cd:fa:e6:12:af:1a:4c:4b:12:d6:84:98:ab:7e:6e:
                    08:db:d7:f1:37:86:f7:d4:ac:58:8b:5d:53:09:9b:
                    8d:64:f3:9e:e6:1c:26:9b:a4:96:66:e5:75:90:74:
                    90:21:d1:36:02:c0:fb:f2:a2:a2:b9:22:e2:64:4c:
                    20:93:a3:9d:5a:91:40:bc:ce:a0:2c:79:53:75:5a:
                    96:47:57:22:42:1b:5e:24:86:02:c5:9d:e3:fe:01:
                    2f:bd:8e:41:ca:4a:b7:95:5f:50:99:e6:67:6d:bd:
                    24:12:b8:a9:82:6f:dd:c5:b1:69:c3:73:bb:3b:f8:
                    3c:71:c1:c8:6f:63:29:4d:44:92:d5:e5:cb:fd:97:
                    93:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C8:AB:BA:A9:78:2B:6B:7D:0E:F4:36:50:18:2C:18:80:EC:47:3F
            X509v3 Authority Key Identifier:
                keyid:66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:dc:da:4d:66:f7:03:35:4b:4f:7b:eb:c8:ee:99:2e:ea:bc:
         2e:47:dc:3d:fb:12:56:36:ea:c6:27:a1:dc:08:e1:48:04:7e:
         74:17:63:2c:2d:58:c9:f7:89:cb:69:67:4f:14:d4:04:cd:ba:
         fc:28:5d:af:4d:4b:d6:e4:cc:9c:18:a7:4f:0a:92:86:9b:2d:
         cb:6c:f1:a4:44:dc:02:c0:7d:77:e2:eb:5e:1e:ed:e9:ce:34:
         74:18:ee:82:c1:d6:cd:02:c7:d9:b4:93:78:0b:3b:82:dc:e6:
         6a:56:db:04:31:42:8b:6d:d3:86:38:7a:f2:c5:22:da:68:5b:
         2a:95:76:9d:84:44:78:b1:d6:d3:1a:33:76:6e:46:45:6e:46:
         98:b2:43:e7:96:e6:7a:e3:82:99:31:b8:a7:f0:a6:8f:04:5d:
         05:de:0d:64:5e:e9:29:2f:a9:2c:10:eb:f3:10:a5:93:9e:11:
         1e:fc:17:3a:c0:77:1f:bc:f0:57:2a:fa:6f:34:3a:f1:36:05:
         f6:d7:6c:42:be:2e:48:7b:1e:b4:f3:11:d2:73:34:16:3e:b0:
         40:a6:8f:5c:c0:2a:54:3c:72:18:c8:a1:f1:41:97:61:82:a9:
         0e:76:e1:5e:ae:c3:72:6b:6e:aa:5e:7f:f6:30:00:46:1d:e0:
         50:2d:f4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----