Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
File:                     GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft (raw, json)
Hash identifier:          256nixvNhmFKoMZAQyuSdMvhPU+rjeyAM008szfsWOo=
Subject key identifier:   54:FF:DE:25:46:39:BD:A8:95:7E:2E:A7:C6:32:84:78:4C:DD:3D:A1
Authority key identifier: 1A:6A:DD:3E:A1:59:F6:3F:F5:8D:6B:3D:FF:D2:CA:41:6A:C0:33:A2
Certificate issuer:       /CN=1a6add3ea159f63ff58d6b3dffd2ca416ac033a2
Certificate serial:       018F8749BC189E11951E423BB5703E9E7670
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
Manifest number:          015A
Signing time:             Fri 17 May 2024 16:01:47 +0000
Manifest this update:     Fri 17 May 2024 16:01:47 +0000
Manifest next update:     Sat 18 May 2024 16:01:47 +0000
Files and hashes:         1: GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl (hash: v5MwpI0avLBVDxjcAAxINHNU+VWpKQQGpLQicx+3KU8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:bc:18:9e:11:95:1e:42:3b:b5:70:3e:9e:76:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a6add3ea159f63ff58d6b3dffd2ca416ac033a2
        Validity
            Not Before: May 17 16:01:47 2024 GMT
            Not After : May 18 16:01:47 2024 GMT
        Subject: CN=54ffde254639bda8957e2ea7c63284784cdd3da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0c:39:16:1f:d0:3f:c0:4b:f8:95:4b:26:46:
                    f1:9d:5a:df:a2:8e:7c:dc:c3:cf:99:ca:f5:9d:96:
                    db:7a:45:dc:4b:cd:7a:1d:7f:d0:d6:d5:9e:19:31:
                    4a:87:36:d3:55:de:2c:c0:2a:25:0d:9a:d0:25:1b:
                    d2:77:4d:95:1e:37:f2:51:03:cd:89:0d:d3:b4:ee:
                    af:11:46:2a:f8:88:67:d5:0b:c3:d4:d1:ea:07:9b:
                    d0:a4:23:0f:9a:83:19:4d:d6:98:e0:1b:cb:a9:d9:
                    5d:2f:3e:c1:05:4f:a3:39:bc:7a:5c:ba:e7:e4:b0:
                    ad:d7:e4:af:5a:3b:53:d5:50:3c:12:1f:d2:0a:78:
                    2c:11:9f:11:3f:61:60:4c:a8:83:64:d8:21:d9:57:
                    c0:e6:a0:46:3c:c8:04:85:1b:ee:a8:4e:a6:a2:5b:
                    c7:00:f7:48:4e:f7:da:5b:47:0c:11:ad:70:57:e8:
                    b9:f7:67:08:5f:91:ed:04:37:bc:ed:09:48:d5:5e:
                    ec:8b:08:24:1b:be:01:72:fc:5e:75:43:45:f0:cf:
                    9e:96:02:5c:cc:4f:ca:a5:e6:70:00:76:86:9d:ea:
                    3e:a8:43:8a:1a:c5:9b:fa:51:af:41:b8:9b:d9:d7:
                    23:31:4e:0f:c2:ef:5f:0c:65:70:3c:0c:b0:bd:00:
                    29:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FF:DE:25:46:39:BD:A8:95:7E:2E:A7:C6:32:84:78:4C:DD:3D:A1
            X509v3 Authority Key Identifier:
                keyid:1A:6A:DD:3E:A1:59:F6:3F:F5:8D:6B:3D:FF:D2:CA:41:6A:C0:33:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:94:6c:96:8d:c7:ae:b3:59:79:38:bf:68:03:1d:a4:70:2e:
         6b:60:8b:52:cd:1c:75:c3:6e:f4:d3:16:3e:c7:06:d4:05:01:
         1b:9c:c4:c3:26:e3:9c:cc:40:68:f2:f1:79:3b:76:78:c0:e4:
         85:b4:d9:6d:68:c3:90:fd:87:49:59:27:45:8b:18:bb:0a:7d:
         9f:25:c8:0d:53:37:83:ca:70:d9:e8:e6:df:6d:67:c2:31:b3:
         1a:a9:32:19:ba:55:32:d3:19:74:09:c8:c3:49:39:10:fc:57:
         53:de:4d:fd:6b:fd:0d:82:24:0f:71:86:ee:66:d4:11:e1:95:
         16:2e:e4:27:9b:2c:48:22:a0:de:a8:10:27:0c:c3:64:ac:f6:
         10:09:c3:b1:49:75:e2:11:7c:88:7e:5e:54:37:0a:0f:4a:2c:
         23:16:22:3e:bc:ed:cf:04:b6:3d:ab:d2:4b:4d:ae:f6:40:6d:
         87:95:13:53:0b:aa:b1:38:a0:ea:ea:ca:fd:9e:66:43:27:4d:
         73:3d:80:b6:76:5b:a3:cf:2e:f8:af:89:f2:6a:3e:ad:5a:f6:
         00:6f:ad:c2:21:92:05:60:dc:27:9d:80:aa:17:35:51:e7:80:
         61:26:ca:ff:1d:68:26:e9:7e:34:82:7f:db:7c:31:3d:a4:9e:
         8a:39:98:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----