Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
File:                     ofM67NjVmmpPBWkszHLitxOeF8w.mft (raw, json)
Hash identifier:          ecH5eRe9Cq/kKEwkNw3uMdjq926dfX2S4HREm1Jr7t4=
Subject key identifier:   6C:A2:5F:C3:E3:BF:98:8E:7D:A3:FC:19:18:85:37:3C:B9:CA:6B:6A
Authority key identifier: A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
Certificate issuer:       /CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Certificate serial:       018F87B6EB071933B660BFB749E18786DAA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
Manifest number:          0858
Signing time:             Fri 17 May 2024 18:01:02 +0000
Manifest this update:     Fri 17 May 2024 18:01:02 +0000
Manifest next update:     Sat 18 May 2024 18:01:02 +0000
Files and hashes:         1: ofM67NjVmmpPBWkszHLitxOeF8w.crl (hash: fTyGoIa8bM0rt5eRAOqHdPRu+AIgZTFcRRTtDQcgyMo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:eb:07:19:33:b6:60:bf:b7:49:e1:87:86:da:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
        Validity
            Not Before: May 17 18:01:02 2024 GMT
            Not After : May 18 18:01:02 2024 GMT
        Subject: CN=6ca25fc3e3bf988e7da3fc191885373cb9ca6b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ab:55:aa:6f:7d:36:6c:07:f1:02:69:a4:7c:
                    7d:d4:07:d4:5e:25:19:25:fe:57:da:3c:ae:74:1f:
                    22:3f:22:3a:47:93:5f:cb:e3:b9:06:0a:fd:26:54:
                    5c:2e:58:d6:9b:96:8d:47:fb:c5:f7:89:df:da:4e:
                    04:62:3f:54:29:22:0f:f5:3a:d0:6d:d1:b1:b5:4c:
                    ce:d1:31:f3:b0:d4:14:cc:cf:39:7c:c8:3b:2f:13:
                    57:59:3d:58:1c:41:57:61:74:b2:25:40:b8:59:4a:
                    9f:10:59:14:dc:91:aa:9b:90:2e:81:39:27:c5:84:
                    e6:71:51:35:49:93:c9:e8:7a:f3:73:e6:2c:a1:be:
                    7a:e5:f4:fa:d8:e1:3b:c3:01:bc:f0:5b:1c:1f:31:
                    67:d7:52:5c:8d:d7:07:c3:3a:3d:04:27:43:e1:74:
                    0b:83:dc:83:98:dc:50:15:ac:36:63:fa:95:f0:32:
                    15:5b:80:90:b5:e6:76:33:89:a6:e4:6f:d3:98:f2:
                    96:44:34:52:06:8c:f2:ed:6c:c0:a6:0f:84:eb:a6:
                    4b:ec:fe:92:49:f0:be:73:65:75:a7:72:50:01:6b:
                    fa:7e:4f:b2:40:70:67:14:7a:d0:71:9e:c2:3b:bf:
                    32:78:c4:0f:ea:94:16:03:da:70:ee:62:7f:6c:4b:
                    11:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A2:5F:C3:E3:BF:98:8E:7D:A3:FC:19:18:85:37:3C:B9:CA:6B:6A
            X509v3 Authority Key Identifier:
                keyid:A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:1a:bb:c3:43:3c:ce:a6:b3:df:ab:30:39:5f:e6:46:27:a2:
         cb:9c:cb:43:f3:67:73:27:32:7f:ea:ac:96:03:de:04:4c:66:
         08:d2:55:59:53:46:15:65:6a:87:e7:d7:7b:1d:a7:26:61:b8:
         13:fa:47:2b:57:77:ca:a1:38:85:33:14:c5:d3:0f:3d:8a:7e:
         01:bb:04:cc:30:6c:88:ba:ef:c5:d4:14:64:f7:69:33:11:7d:
         9d:8f:fc:df:be:38:93:57:ac:a9:5f:62:00:05:67:3c:ff:51:
         a0:f9:f1:5a:a0:09:06:b2:93:b0:26:47:75:3c:47:a0:a5:84:
         b1:96:1b:66:19:91:97:6d:4f:3f:5c:43:24:98:47:51:92:4a:
         d8:00:5e:9c:77:80:94:47:69:5b:06:9c:35:0c:12:a4:ea:04:
         4c:cb:7c:c8:05:ca:ca:e6:3c:fd:69:d8:9f:7b:f7:07:02:46:
         59:4d:96:3e:2f:3f:50:a1:78:b0:ce:34:21:e2:04:21:a3:84:
         56:df:06:8d:36:8c:1d:3e:58:ee:f9:91:2c:0c:46:07:2e:93:
         b1:d2:23:50:2b:07:82:99:d0:87:d1:d7:1c:34:00:35:9f:c1:
         37:29:67:47:1f:f5:3d:70:c9:01:52:0f:65:91:23:10:9d:ac:
         63:73:88:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----