Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File:                     cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier:          Zt8r4Nx3/mv18J7p5PTQz36wJecdxC24QR+pemZsaWc=
Subject key identifier:   99:4A:02:4D:16:2C:F6:5E:F8:42:69:8F:71:5D:B9:7A:0A:0D:1F:CA
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer:       /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial:       018F87B62AEFCF6F9ECB2F7EDCD4DFA7BA48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number:          04B7
Signing time:             Fri 17 May 2024 18:00:13 +0000
Manifest this update:     Fri 17 May 2024 18:00:13 +0000
Manifest next update:     Sat 18 May 2024 18:00:13 +0000
Files and hashes:         1: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: mdf3v8RIRMz8P7LYkR80utt6dBjO8fnBpp7CH4x20TI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:2a:ef:cf:6f:9e:cb:2f:7e:dc:d4:df:a7:ba:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
        Validity
            Not Before: May 17 18:00:13 2024 GMT
            Not After : May 18 18:00:13 2024 GMT
        Subject: CN=994a024d162cf65ef842698f715db97a0a0d1fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:2e:c0:5b:97:6e:fd:36:79:da:b9:c1:97:c0:
                    71:f6:b3:1d:45:25:c5:6d:35:b5:e8:52:e1:e3:62:
                    48:e5:13:20:2a:9f:d3:12:f4:66:3c:88:9e:99:a6:
                    c7:56:1f:66:5e:43:60:de:c5:e4:21:59:24:10:9e:
                    7c:a2:73:bc:69:c6:3d:a0:20:3b:62:a2:c1:ea:ec:
                    cd:fa:45:29:d2:38:46:50:6f:fa:ef:fb:7f:31:6d:
                    9f:26:91:4b:19:87:d3:aa:79:e4:c3:ca:ac:2c:24:
                    1e:b0:b8:ed:99:eb:4f:56:81:76:54:f3:d5:55:9d:
                    aa:3f:98:6d:3b:71:e6:57:b8:d6:29:ac:93:6d:e0:
                    57:9d:8e:77:be:fc:2d:49:a9:b9:f3:21:5f:f3:ea:
                    aa:ca:c1:9a:a2:4e:f2:be:cb:40:eb:57:4e:7e:ec:
                    c2:82:91:8e:77:21:2b:de:0f:0f:88:23:84:75:5a:
                    a0:6b:e3:80:1f:18:4e:fb:22:60:b6:19:f6:c9:86:
                    b3:21:af:cf:33:e5:d7:e7:fb:18:0b:36:04:c9:dd:
                    be:06:00:cc:03:9b:8f:b7:8e:7b:dd:e9:9d:28:15:
                    2f:2a:a9:a9:2a:08:ed:48:7e:16:8b:86:d3:2c:e3:
                    45:84:df:ed:64:18:d8:14:5b:02:d1:03:5e:93:6a:
                    d1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4A:02:4D:16:2C:F6:5E:F8:42:69:8F:71:5D:B9:7A:0A:0D:1F:CA
            X509v3 Authority Key Identifier:
                keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:9b:79:4b:9a:53:7f:b5:1c:8c:2b:1b:27:62:10:61:fb:b3:
         76:85:e5:af:9e:82:8f:f1:28:31:ee:22:35:79:94:8a:f5:d5:
         a5:6f:d9:7d:04:23:25:b9:f1:1a:2f:fa:82:c3:69:79:66:2e:
         b2:bf:32:86:e0:53:1d:c2:74:5e:45:3a:1c:f7:ee:90:4b:18:
         5d:0a:56:2d:0e:6d:c7:8f:6a:54:0c:b1:f8:96:96:f9:2a:7b:
         2f:fc:ad:af:70:11:94:77:c1:88:ce:e6:ea:48:1b:5b:2b:a0:
         f2:b5:dc:4f:bc:72:27:c7:2c:2a:53:78:13:ba:4b:63:05:24:
         b6:52:73:09:a8:68:5d:7c:1b:71:f7:9b:5b:2f:c5:7f:2f:8d:
         e4:03:53:4e:0d:87:17:c5:d2:8a:31:8c:a9:b8:84:d4:74:5b:
         00:11:62:3e:33:7b:84:42:96:4f:dd:ed:b8:a2:81:33:f3:2c:
         43:cb:9f:05:c6:cd:18:8c:93:28:6a:13:85:c6:77:cb:09:16:
         bd:26:b6:0e:d6:10:ba:b2:e4:a6:26:79:08:ed:15:b9:c7:b2:
         f3:f6:3e:ca:bb:fa:15:73:d6:38:9d:7d:3f:f1:3d:fa:f5:64:
         3e:37:d0:54:20:bc:fc:c2:d8:b2:4c:f1:c4:4f:58:f6:e3:34:
         61:b5:7c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----