Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.mft
File:                     8MFXiVlhvE-EwCh7KZu-H4ql9ho.mft (raw, json)
Hash identifier:          Y6tj0dWRuboSSnKBKf19lPYOLeuDH46sEas8Eqkz1Es=
Subject key identifier:   09:07:F9:C1:D8:28:7F:4A:63:A8:FA:0E:68:19:E2:74:A7:1F:C5:13
Authority key identifier: F0:C1:57:89:59:61:BC:4F:84:C0:28:7B:29:9B:BE:1F:8A:A5:F6:1A
Certificate issuer:       /CN=f0c157895961bc4f84c0287b299bbe1f8aa5f61a
Certificate serial:       018F874A66B8C3A0A7E43B1BAD09F415F066
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8MFXiVlhvE-EwCh7KZu-H4ql9ho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.mft
Manifest number:          027E
Signing time:             Fri 17 May 2024 16:02:31 +0000
Manifest this update:     Fri 17 May 2024 16:02:31 +0000
Manifest next update:     Sat 18 May 2024 16:02:31 +0000
Files and hashes:         1: 8MFXiVlhvE-EwCh7KZu-H4ql9ho.crl (hash: DHCrRkAhj5OLwyO2WspOKk2Be6PW+wDNU3ef0OyQ5AU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8MFXiVlhvE-EwCh7KZu-H4ql9ho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:66:b8:c3:a0:a7:e4:3b:1b:ad:09:f4:15:f0:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c157895961bc4f84c0287b299bbe1f8aa5f61a
        Validity
            Not Before: May 17 16:02:31 2024 GMT
            Not After : May 18 16:02:31 2024 GMT
        Subject: CN=0907f9c1d8287f4a63a8fa0e6819e274a71fc513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e7:59:cc:3f:45:d3:22:7b:08:2a:d7:9f:bb:
                    31:23:ad:4f:1c:fc:52:a7:d8:11:57:58:38:4f:5c:
                    3f:e9:64:78:da:3c:2f:b9:03:2a:d6:a8:34:95:32:
                    3d:06:11:cb:e5:35:d3:f7:34:0c:48:a8:a1:3a:d9:
                    8a:28:87:f0:9b:ba:c6:cc:56:9f:83:1f:35:12:ad:
                    18:3f:fe:7d:a2:b8:50:f0:82:0d:be:e6:90:05:ca:
                    27:5a:27:06:38:aa:24:8f:df:fe:ba:9e:50:72:14:
                    be:13:f4:2e:40:63:26:92:16:1d:6c:65:f0:3c:90:
                    26:32:f8:86:04:ee:f6:3c:f5:50:44:73:9c:68:af:
                    fe:26:bd:5b:e6:fc:eb:05:ea:f0:80:75:61:c2:3f:
                    6c:39:42:eb:6e:42:b0:aa:6d:44:79:81:de:87:57:
                    11:1a:9e:3a:8c:d6:4c:28:40:a8:b2:8e:16:55:b5:
                    9e:a4:ef:4d:eb:ed:c3:12:23:b5:5a:34:d7:8b:04:
                    cd:78:b6:e1:76:63:56:36:04:68:32:4d:fb:12:62:
                    b9:e2:d9:7d:bd:ca:63:20:8a:f3:c1:0f:95:8a:94:
                    ba:a9:70:85:b7:f5:ff:f1:29:57:4b:38:ec:86:88:
                    24:cc:bc:13:4a:ed:62:47:2c:60:15:7d:ae:53:b5:
                    0c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:07:F9:C1:D8:28:7F:4A:63:A8:FA:0E:68:19:E2:74:A7:1F:C5:13
            X509v3 Authority Key Identifier:
                keyid:F0:C1:57:89:59:61:BC:4F:84:C0:28:7B:29:9B:BE:1F:8A:A5:F6:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MFXiVlhvE-EwCh7KZu-H4ql9ho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:1e:d0:09:7b:54:de:5a:c0:29:f6:0a:3e:3e:8e:b1:15:f3:
         a0:36:d9:df:81:f3:0a:93:58:22:51:68:84:84:5b:24:93:60:
         33:63:d2:78:f0:ec:1b:d5:a2:5e:02:5b:8c:5a:12:08:00:19:
         f9:03:23:84:53:f5:e9:f9:88:a6:38:d1:c7:f7:2a:07:50:be:
         d6:bc:a9:62:31:ac:16:57:5b:6a:b5:08:12:ac:bf:95:d7:6b:
         99:b1:0e:98:68:96:12:6d:bc:22:d8:1c:81:db:5e:b3:91:1d:
         a4:20:f5:b8:c9:c9:8d:9b:0e:07:4d:f0:00:f8:64:a8:92:49:
         c8:b2:f6:89:7f:56:c2:75:62:d9:be:2e:e2:7b:5c:53:06:a1:
         85:72:f9:32:b3:50:22:20:e8:fc:59:4e:66:f9:a9:8c:81:21:
         2a:86:e6:12:b5:8b:7c:4d:19:3c:1b:0e:51:13:6e:0a:43:8a:
         5a:ce:1b:a5:c3:51:ef:b5:22:bf:9f:49:9e:c9:02:db:c9:17:
         c6:c7:00:29:1b:e2:da:7c:b4:1b:e3:37:82:ca:28:d7:7f:e5:
         cf:55:8f:55:c9:69:78:0f:6f:58:5c:39:f8:e1:61:e4:de:a0:
         5a:8b:d5:a1:8d:3c:f0:13:c6:8e:ca:f1:c6:74:f7:dd:a7:d4:
         91:35:cc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----