Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
File:                     kNRNBKKqhYbulMejNTbDaBatoWM.mft (raw, json)
Hash identifier:          n1VkZMTLRozVzVt29eZaAvw0hku0jHMYAu4mdEr0qOw=
Subject key identifier:   51:F9:D6:ED:97:8A:5E:A7:D9:64:11:82:F6:D9:36:F9:B7:44:ED:BA
Authority key identifier: 90:D4:4D:04:A2:AA:85:86:EE:94:C7:A3:35:36:C3:68:16:AD:A1:63
Certificate issuer:       /CN=90d44d04a2aa8586ee94c7a33536c36816ada163
Certificate serial:       018F87B6194A28F7C04F44AD289E5875BF13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 18:00:09 +0000
Manifest this update:     Fri 17 May 2024 18:00:09 +0000
Manifest next update:     Sat 18 May 2024 18:00:09 +0000
Files and hashes:         1: kNRNBKKqhYbulMejNTbDaBatoWM.crl (hash: EH4yHvl9XMJLAo3DsGFd+QRVW0u8cwVvuBW9ez6Hxds=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:19:4a:28:f7:c0:4f:44:ad:28:9e:58:75:bf:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90d44d04a2aa8586ee94c7a33536c36816ada163
        Validity
            Not Before: May 17 18:00:09 2024 GMT
            Not After : May 18 18:00:09 2024 GMT
        Subject: CN=51f9d6ed978a5ea7d9641182f6d936f9b744edba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8d:7f:75:74:38:eb:1d:c1:84:b4:08:c2:61:
                    27:c8:e9:28:84:11:bb:3d:d4:a0:7d:fc:22:c6:0d:
                    01:8f:4b:c1:21:54:2a:c6:15:48:10:c1:81:65:dc:
                    a6:e1:7f:f3:97:0e:35:2a:bf:bc:54:da:6b:68:be:
                    c3:1f:de:98:ce:d0:2a:fb:ee:ad:6d:57:aa:c5:8e:
                    bf:72:ae:92:91:b6:4c:04:31:42:9e:e9:35:3c:b1:
                    6b:f4:6f:2c:2c:37:8d:9c:f3:18:f2:e9:43:ec:e0:
                    3c:3a:a2:9c:05:8d:85:d1:5d:30:75:98:12:42:d8:
                    67:1c:a6:d2:e1:dd:0b:3b:59:f4:6a:cf:d8:82:e9:
                    c5:ee:64:c6:5c:dd:ce:c1:84:07:98:d2:c5:56:80:
                    bb:ad:f5:0b:92:6d:21:f6:6b:64:21:eb:b9:9a:a1:
                    50:be:32:b5:c3:e5:93:0b:df:a7:4d:50:29:2b:64:
                    28:f0:f9:4d:a4:45:c2:1f:09:0b:63:af:3e:aa:7d:
                    33:9b:b9:a7:70:47:6e:61:42:20:5c:f0:3b:97:4b:
                    3c:c9:98:62:4c:90:94:a0:4d:87:04:e7:fe:a6:ba:
                    ca:72:ec:1d:0c:ff:37:0e:c7:5d:6f:4c:aa:4e:ce:
                    4e:02:87:3f:d2:7d:79:d5:b7:0e:d3:eb:d1:40:d5:
                    0a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F9:D6:ED:97:8A:5E:A7:D9:64:11:82:F6:D9:36:F9:B7:44:ED:BA
            X509v3 Authority Key Identifier:
                keyid:90:D4:4D:04:A2:AA:85:86:EE:94:C7:A3:35:36:C3:68:16:AD:A1:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:c4:c6:a8:31:fe:e9:38:16:02:b1:1c:5a:02:a4:e5:75:68:
         c5:fd:4c:30:ae:d5:70:5f:74:90:5d:74:99:fa:91:87:07:52:
         2c:b8:6b:1e:ba:b0:7d:b0:fa:a1:e8:6f:80:86:3f:8b:d7:d1:
         7a:4f:8f:32:b8:16:7e:c7:b2:bf:bf:5b:66:ec:05:db:68:2a:
         7b:50:80:da:7b:03:df:62:29:1e:b5:f5:cd:1b:35:85:ba:6d:
         54:ac:ba:31:b9:c3:25:c2:da:d3:5c:2d:ac:38:6b:23:ac:f1:
         4b:c5:23:cd:68:c3:c0:f7:1f:0f:a9:6a:52:0b:a9:a6:7f:01:
         d6:e2:27:6d:cf:28:86:63:65:61:6e:55:df:6e:81:38:6f:7c:
         f6:da:fd:42:fd:c3:55:ad:43:bd:51:3e:aa:6f:9c:1e:08:49:
         86:11:6f:54:25:cc:42:a0:a5:a4:e9:fa:0b:fc:f2:cc:c7:60:
         c8:70:2e:ce:e7:a1:21:c2:2b:5d:68:ed:e1:f2:4e:94:18:a9:
         77:fc:45:c5:af:a2:95:73:44:0e:63:3f:4f:e7:eb:3e:04:9a:
         5c:49:59:7e:1a:62:a4:d9:ee:01:0d:de:66:4b:ce:57:b8:78:
         7e:e4:ca:0f:a3:a6:13:6f:5e:be:ce:a1:1b:dd:ca:bc:dd:3e:
         7a:bc:1d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----