Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
File:                     JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft (raw, json)
Hash identifier:          o1UJxoyXBPE05PP7GXDOybuRPEG/G/h4TcmRPWFFU5A=
Subject key identifier:   6A:F4:6A:51:27:E7:6E:8C:32:52:43:45:7B:65:C2:63:7F:EB:B1:9D
Authority key identifier: 24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84
Certificate issuer:       /CN=24d26a5146996d220461081072c76396582fca84
Certificate serial:       018F87EDC38998472BDB39499CE4AC97A4B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
Manifest number:          0388
Signing time:             Fri 17 May 2024 19:00:57 +0000
Manifest this update:     Fri 17 May 2024 19:00:57 +0000
Manifest next update:     Sat 18 May 2024 19:00:57 +0000
Files and hashes:         1: JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl (hash: phUAk1rE158EH8y/yu4QDq+jGtOOaBYJ9oCmubvWUB8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:c3:89:98:47:2b:db:39:49:9c:e4:ac:97:a4:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d26a5146996d220461081072c76396582fca84
        Validity
            Not Before: May 17 19:00:57 2024 GMT
            Not After : May 18 19:00:57 2024 GMT
        Subject: CN=6af46a5127e76e8c325243457b65c2637febb19d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:10:dd:d2:6f:d8:0a:de:c0:6b:7e:1c:4b:8c:
                    15:b4:40:c4:cd:5b:4f:88:b4:81:26:2b:cf:1f:8b:
                    75:42:c5:73:24:04:e4:64:16:59:cb:0c:9a:71:a8:
                    8e:20:fe:98:49:19:dd:5b:65:3c:36:41:d0:31:9e:
                    f7:0c:94:74:db:b8:5d:5e:35:78:41:e4:ff:5b:54:
                    cd:21:e1:9b:d4:4d:be:3e:3d:40:2b:6b:37:f8:c1:
                    de:65:7f:bb:09:16:58:08:36:28:0c:4d:26:8f:a2:
                    cd:86:af:04:6c:53:eb:cf:39:f6:46:df:0b:e5:e8:
                    1d:75:da:cf:e5:e8:11:7a:83:86:77:bf:5f:78:17:
                    2f:24:ca:a8:d9:2b:17:7a:40:29:1a:2f:f2:e8:ad:
                    c8:df:3e:e2:1d:06:a2:05:10:4b:fd:f3:55:81:a8:
                    fa:28:f1:96:2e:a5:f5:64:0b:38:8b:c5:72:85:a4:
                    59:b3:04:f4:bb:62:aa:24:c1:e8:7f:af:85:ea:c1:
                    b2:91:6b:79:78:e7:f8:9a:6b:c7:b9:fc:8d:56:f8:
                    61:d9:22:53:11:ad:e2:9c:86:17:f7:6d:d4:53:c7:
                    d0:71:b1:83:0a:17:59:22:cb:b4:0b:54:8a:13:d5:
                    88:2e:50:07:3e:23:45:e4:29:2b:5f:fb:a0:b4:c7:
                    ff:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F4:6A:51:27:E7:6E:8C:32:52:43:45:7B:65:C2:63:7F:EB:B1:9D
            X509v3 Authority Key Identifier:
                keyid:24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:81:c4:be:f3:ff:30:a3:c6:4d:0c:8d:ef:bc:e7:8d:72:fa:
         a9:ec:78:55:63:65:43:1c:34:19:bf:3c:15:cc:1c:94:ee:6d:
         68:5c:8b:28:73:29:12:3c:5b:82:36:80:9f:b9:6e:4f:6e:fc:
         14:69:95:08:dd:f5:19:2b:b2:70:d7:2e:81:a7:a9:77:51:51:
         5c:bb:05:3f:c6:f2:f7:f9:2d:0b:3e:69:3e:66:f6:ff:6d:61:
         86:ca:92:88:61:fa:73:9f:c0:b8:25:be:f2:76:2b:84:ab:54:
         02:a7:cf:de:06:b2:ec:b3:30:e2:f5:89:cb:70:ad:fe:4f:84:
         ff:17:e4:f8:58:d2:fa:0b:95:b3:e8:67:64:b7:c8:ec:0a:2b:
         cd:b1:5e:23:57:5f:57:a8:81:db:65:0a:5f:8f:04:73:2a:65:
         19:13:8a:47:bd:ef:7e:cc:c1:ef:c6:7c:7f:19:92:86:00:23:
         f4:c8:22:50:39:78:d5:66:6a:9d:a7:57:d3:f2:e0:8b:73:55:
         ae:1b:fb:c5:a2:56:a1:53:17:ae:d7:70:36:93:c5:7d:e3:ad:
         4d:08:db:17:2e:73:ca:d5:64:15:51:86:20:27:d6:5e:4a:a5:
         cf:3b:ae:45:09:ae:9e:c0:0c:15:8c:3a:e1:b4:c0:a1:da:3f:
         e2:ae:c8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----