Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/76a661-3edf-4a93-9912-4a4e339822f6/1/S0heTP8p1gHfeeLwUOp0uVhopg4.mft
File:                     S0heTP8p1gHfeeLwUOp0uVhopg4.mft (raw, json)
Hash identifier:          ein34nNYOIunS6BmNrCIRJ53okCi5IKMY6IbjSrjLBY=
Subject key identifier:   7A:D5:C7:68:49:65:F0:B0:5C:9C:61:DC:39:94:94:5D:54:B0:04:8D
Authority key identifier: 4B:48:5E:4C:FF:29:D6:01:DF:79:E2:F0:50:EA:74:B9:58:68:A6:0E
Certificate issuer:       /CN=4b485e4cff29d601df79e2f050ea74b95868a60e
Certificate serial:       018F87B6635C21CC0B3D30864759A02EE851
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S0heTP8p1gHfeeLwUOp0uVhopg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/76a661-3edf-4a93-9912-4a4e339822f6/1/S0heTP8p1gHfeeLwUOp0uVhopg4.mft
Manifest number:          0632
Signing time:             Fri 17 May 2024 18:00:28 +0000
Manifest this update:     Fri 17 May 2024 18:00:28 +0000
Manifest next update:     Sat 18 May 2024 18:00:28 +0000
Files and hashes:         1: S0heTP8p1gHfeeLwUOp0uVhopg4.crl (hash: 0vqVdb9uuy1PNMGvXkqATvdaZPHjRz3rt9iqKVZJTRg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/76a661-3edf-4a93-9912-4a4e339822f6/1/S0heTP8p1gHfeeLwUOp0uVhopg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/76a661-3edf-4a93-9912-4a4e339822f6/1/S0heTP8p1gHfeeLwUOp0uVhopg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S0heTP8p1gHfeeLwUOp0uVhopg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:63:5c:21:cc:0b:3d:30:86:47:59:a0:2e:e8:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b485e4cff29d601df79e2f050ea74b95868a60e
        Validity
            Not Before: May 17 18:00:28 2024 GMT
            Not After : May 18 18:00:28 2024 GMT
        Subject: CN=7ad5c7684965f0b05c9c61dc3994945d54b0048d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:29:76:89:7b:c4:58:da:8b:04:e5:51:da:
                    d1:83:6c:8a:d1:95:48:b5:0b:e2:d7:16:8e:e8:a6:
                    70:f7:68:60:d2:d5:21:83:49:c8:da:e8:ae:57:b8:
                    7f:cd:b6:10:60:55:63:92:ba:91:30:d2:cc:8a:7b:
                    b8:4b:63:61:64:94:fe:c5:3e:a6:60:49:52:54:f8:
                    8b:c0:b9:be:e1:1e:e6:16:47:be:c2:f3:cc:85:bb:
                    0b:d5:ed:80:64:8c:ad:23:83:37:3a:87:de:98:b7:
                    d6:7e:ac:05:c0:4d:db:64:2a:7b:19:d6:9f:44:cd:
                    e1:b7:dc:61:10:78:9e:a3:0d:6c:40:ed:17:fa:e3:
                    da:bf:89:67:90:2d:aa:a3:15:33:c9:93:3b:d6:4a:
                    c6:cb:5f:2d:57:5b:af:8b:5a:aa:2d:07:01:38:3c:
                    b5:08:ef:56:90:e1:f9:ac:31:fa:c9:f8:6c:bc:d4:
                    17:0f:95:ff:4a:ee:6c:c5:6c:13:88:39:27:b0:1c:
                    a8:fb:49:b1:2d:a9:2b:84:7c:46:d4:46:24:67:13:
                    8c:1f:4d:5c:0c:f0:58:7e:f5:be:49:bd:78:b6:12:
                    e8:34:8e:c6:e6:a3:f8:52:a5:2f:64:e1:91:96:07:
                    c2:6c:da:03:df:32:2c:5c:0b:f5:db:30:57:38:1f:
                    87:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D5:C7:68:49:65:F0:B0:5C:9C:61:DC:39:94:94:5D:54:B0:04:8D
            X509v3 Authority Key Identifier:
                keyid:4B:48:5E:4C:FF:29:D6:01:DF:79:E2:F0:50:EA:74:B9:58:68:A6:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0heTP8p1gHfeeLwUOp0uVhopg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/76a661-3edf-4a93-9912-4a4e339822f6/1/S0heTP8p1gHfeeLwUOp0uVhopg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/76a661-3edf-4a93-9912-4a4e339822f6/1/S0heTP8p1gHfeeLwUOp0uVhopg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f1:c5:0d:2f:4b:c7:06:94:ad:be:6a:43:3f:d4:5d:cb:a5:
         ff:18:0d:af:03:4d:0b:c5:cf:41:d5:06:65:84:8d:9a:0f:19:
         2f:94:0b:18:34:a0:4e:f2:cc:e7:06:c3:ea:3f:a9:45:5c:6d:
         c4:1a:e8:61:d8:14:55:d8:bd:64:f7:00:1f:4e:a3:05:4d:9f:
         de:19:f6:47:ed:db:10:32:d5:a4:e7:e4:1f:bc:66:41:0e:06:
         0c:8b:cb:59:62:99:4a:f2:c1:f6:09:f1:d2:50:7a:95:34:22:
         26:ef:3a:e0:6f:75:ef:df:29:57:da:2d:7b:67:f7:88:46:f2:
         6e:2c:e6:58:b3:f8:dd:b3:c6:ca:d8:ff:99:75:8e:ce:90:04:
         ed:c6:d4:41:89:14:8c:94:09:8e:91:58:c0:3b:da:d0:ae:23:
         5b:05:97:e8:79:29:7b:72:bf:38:d2:8f:e2:3a:bd:b8:56:ad:
         1d:49:a1:0d:d3:4e:db:b5:9c:38:b3:34:0d:70:4c:f0:2f:89:
         81:fc:b1:3e:1a:a1:38:6e:b5:e3:97:79:35:23:dd:fd:6e:96:
         17:9c:fd:57:67:6b:c3:a4:6e:66:6f:58:84:87:86:c9:65:46:
         41:94:0e:1d:38:b1:b6:ca:3c:27:c7:7a:d7:de:8e:c3:c6:be:
         0f:31:e7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----