Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
File:                     K1ATo25hvsQKEqDkHEjxkYYwca8.mft (raw, json)
Hash identifier:          ubGK/BAUAbtUMIHTjZkt1n1MMw1TRYczAZaeo2yQttY=
Subject key identifier:   4D:C0:EA:84:D2:FC:BF:B2:2D:E9:E9:48:D0:98:9F:6A:30:98:11:72
Authority key identifier: 2B:50:13:A3:6E:61:BE:C4:0A:12:A0:E4:1C:48:F1:91:86:30:71:AF
Certificate issuer:       /CN=2b5013a36e61bec40a12a0e41c48f191863071af
Certificate serial:       018F8749F1971D0D994B607469182C7F7CCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:02:01 +0000
Manifest this update:     Fri 17 May 2024 16:02:01 +0000
Manifest next update:     Sat 18 May 2024 16:02:01 +0000
Files and hashes:         1: K1ATo25hvsQKEqDkHEjxkYYwca8.crl (hash: oR1EPlFsiMFp3g7j3euM1vfvXs25Hym8Hf8xcAH3u9Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:f1:97:1d:0d:99:4b:60:74:69:18:2c:7f:7c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b5013a36e61bec40a12a0e41c48f191863071af
        Validity
            Not Before: May 17 16:02:01 2024 GMT
            Not After : May 18 16:02:01 2024 GMT
        Subject: CN=4dc0ea84d2fcbfb22de9e948d0989f6a30981172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7d:24:33:26:a5:e3:dd:18:7f:d4:66:ae:73:
                    d4:aa:b1:59:6c:84:49:b7:64:7a:19:ed:23:65:bf:
                    84:bb:24:b0:79:b2:e8:1d:26:dd:f2:ae:18:91:09:
                    e7:47:47:f8:02:00:1a:9a:27:b1:99:ad:5c:11:38:
                    90:51:a0:c2:3a:cd:5a:30:f8:c8:ce:eb:e4:c7:73:
                    5b:e8:12:3c:c4:e8:73:66:24:cc:ea:31:4a:39:78:
                    3c:43:94:82:00:6e:ce:8a:bb:b7:ed:9c:dd:46:91:
                    61:4f:24:d9:e9:1c:d8:20:4d:a3:d6:54:1d:28:6e:
                    17:c2:d7:2c:0d:8c:e6:0c:e8:09:12:86:8c:69:f0:
                    e1:a7:6c:27:22:04:e8:cd:e3:23:15:3c:5f:54:c2:
                    68:7d:55:5c:4c:f8:ea:3c:1c:1f:3b:dc:88:8f:c6:
                    88:ca:cc:4c:bb:1e:5b:8f:94:d0:48:90:a6:fa:7d:
                    4a:70:03:1a:cd:2f:df:24:00:d5:4a:db:16:f3:a3:
                    32:2d:f7:eb:49:f4:40:05:e9:50:d8:cf:b8:f2:95:
                    a9:a1:41:8a:39:0a:1a:ff:a1:09:1f:a6:e0:16:5c:
                    be:55:e6:a5:2d:6b:a5:c7:e9:31:c3:99:2b:31:4c:
                    1c:6b:ec:a2:9d:fe:a3:44:de:ca:fc:f8:9d:20:e5:
                    c2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C0:EA:84:D2:FC:BF:B2:2D:E9:E9:48:D0:98:9F:6A:30:98:11:72
            X509v3 Authority Key Identifier:
                keyid:2B:50:13:A3:6E:61:BE:C4:0A:12:A0:E4:1C:48:F1:91:86:30:71:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:93:63:b0:01:61:1c:54:9f:72:03:ae:a5:04:08:ff:ae:e2:
         ac:55:f2:47:e3:e0:8c:15:36:ed:37:e2:3f:e2:d9:41:7b:9c:
         09:93:4e:66:08:1a:91:0c:f6:c8:c3:cc:04:d3:ef:b3:fe:f7:
         fa:9b:bf:c1:5d:39:33:84:91:28:0d:16:4a:29:59:8e:f9:56:
         9d:1d:66:33:d4:a8:9d:a5:5f:f0:45:92:1b:1e:4c:74:d7:07:
         64:01:90:d6:68:36:62:7e:a7:07:c9:5d:e4:cf:dd:9f:00:0a:
         b6:7c:2c:96:9d:a4:7c:38:8b:b5:21:40:6e:a1:6b:88:d1:c9:
         e8:40:9c:c3:2a:63:e1:13:8a:c3:10:36:26:96:59:a4:3b:a4:
         7f:c5:2e:4c:05:69:c3:93:ec:fa:40:7b:5a:39:78:16:74:39:
         10:a5:4b:a7:31:db:01:b7:ff:8a:55:d3:98:43:c6:4a:b3:50:
         1e:e5:38:a5:6f:57:9f:b7:5c:59:ae:2b:bd:5f:28:1b:45:ba:
         5e:34:d9:5c:07:53:ab:8b:cc:70:31:bb:9e:68:66:ed:04:ed:
         a4:42:01:e8:8d:e8:c7:87:d0:5c:f2:dc:9d:12:7f:75:23:46:
         0f:aa:22:9a:f2:8e:13:ec:15:92:81:e6:34:14:74:a5:32:42:
         6a:7f:83:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----