Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft
File:                     6zN-rWubk90NdYq_nXswMHKpnrk.mft (raw, json)
Hash identifier:          L4tCDRWN1lXaAFFyv7SJ1gPXQsRk9vIlzgo4d4sh7Vo=
Subject key identifier:   24:39:1B:9D:18:86:66:5F:86:CC:62:2B:75:37:65:C2:77:28:51:95
Authority key identifier: EB:33:7E:AD:6B:9B:93:DD:0D:75:8A:BF:9D:7B:30:30:72:A9:9E:B9
Certificate issuer:       /CN=eb337ead6b9b93dd0d758abf9d7b303072a99eb9
Certificate serial:       018F1F010A024753F8455624442563393418
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft
Manifest number:          1142
Signing time:             Sat 27 Apr 2024 10:01:52 +0000
Manifest this update:     Sat 27 Apr 2024 10:01:52 +0000
Manifest next update:     Sun 28 Apr 2024 10:01:52 +0000
Files and hashes:         1: 6zN-rWubk90NdYq_nXswMHKpnrk.crl (hash: eMZciUhLQPHN5hM+uysczXyAPwIlUkO/55TZShHFE80=)
                          2: AZ0EKMNhDgxkEtsjJqf4HzlBiow.roa (hash: Ptq0RvT2Z+dHBBjQcaKIh914MNARNUwFGCvxuidAjfA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 10:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1f:01:0a:02:47:53:f8:45:56:24:44:25:63:39:34:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb337ead6b9b93dd0d758abf9d7b303072a99eb9
        Validity
            Not Before: Apr 27 10:01:52 2024 GMT
            Not After : Apr 28 10:01:52 2024 GMT
        Subject: CN=24391b9d1886665f86cc622b753765c277285195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:72:e6:12:45:91:2c:f0:19:5a:d9:49:37:ac:
                    20:23:87:8f:5b:e4:17:49:23:82:06:a7:6e:61:2e:
                    c1:d3:8b:c6:60:b9:48:17:bc:bf:e4:10:32:0e:fb:
                    19:54:54:86:45:3d:17:bb:07:ad:d8:49:32:6f:50:
                    2c:f0:18:9a:d7:30:e2:40:2b:f8:df:3d:df:b1:0f:
                    36:83:38:32:83:5a:e8:03:cb:f1:f6:16:4e:01:d6:
                    b0:70:ad:be:59:3b:d9:0b:8e:7b:36:45:b6:eb:5f:
                    b1:b7:15:95:8b:e9:2a:c6:72:ac:1a:58:14:91:dc:
                    2d:08:96:6c:11:5d:27:52:e6:52:17:26:28:a2:99:
                    8a:d7:5f:d1:d4:7c:04:04:60:5b:1d:95:03:bc:4d:
                    7e:8c:78:cb:20:0e:85:2f:4b:05:98:3d:c1:de:bc:
                    1a:9e:ae:42:b1:28:ea:30:d2:16:0e:07:7e:70:f9:
                    c2:77:f5:3e:db:a1:4a:6f:d7:ff:fd:a2:41:21:7b:
                    5f:7a:ec:88:3a:09:43:94:64:13:ea:cd:e1:ed:7e:
                    7c:fc:b3:9b:01:05:75:e6:50:8a:dd:40:64:96:40:
                    83:44:99:46:2c:af:30:77:5d:0f:6b:d5:3c:a8:17:
                    3d:89:8e:68:80:3e:17:bb:34:62:4e:50:94:43:bf:
                    1c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:39:1B:9D:18:86:66:5F:86:CC:62:2B:75:37:65:C2:77:28:51:95
            X509v3 Authority Key Identifier:
                keyid:EB:33:7E:AD:6B:9B:93:DD:0D:75:8A:BF:9D:7B:30:30:72:A9:9E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:f2:80:13:a4:84:7f:58:90:26:ae:b6:ee:fc:c3:d1:81:d9:
         a9:58:3e:c6:36:81:62:9c:fb:c8:6a:d6:f3:c8:26:f3:c0:44:
         2b:6d:14:a7:ab:c8:c0:31:7f:43:81:3d:5e:c0:51:a9:c3:82:
         66:7d:21:4d:d3:95:60:57:34:b5:21:01:58:c6:ff:f2:b6:ae:
         f7:0a:94:ad:de:6f:4a:1e:a2:40:2f:d6:cb:01:51:c3:65:cf:
         7e:12:9f:51:85:d8:31:f2:1e:eb:20:7b:ba:c5:23:c6:4d:7e:
         e3:88:8c:a5:5f:23:42:e4:c3:10:7a:62:66:94:9a:59:ae:5f:
         92:2d:41:97:dc:44:6f:d3:44:cd:3b:58:cb:e9:7f:04:ed:27:
         54:80:48:34:b8:87:94:33:4f:92:c7:f8:30:f3:48:ce:5f:90:
         7f:93:e9:84:c5:c6:69:9c:bf:b0:76:9e:b0:7d:8e:8c:f3:61:
         05:b7:12:d8:37:7c:89:7b:7c:4e:ea:e4:52:4c:9d:b6:2a:58:
         b0:74:16:be:6d:07:cb:9f:22:ef:9e:5d:95:88:13:6d:82:18:
         09:96:67:3c:71:48:ea:04:31:8c:ab:72:31:06:2b:b5:c4:a0:
         42:4b:70:4c:2c:b0:f5:55:6f:1e:d8:0f:00:92:0a:b1:cf:f3:
         77:cf:d7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----