Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
File:                     7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft (raw, json)
Hash identifier:          xSMiGVWzCFXd97t7LqTq6HJTig6AxSlWaER9bE3/vtw=
Subject key identifier:   9F:FE:75:45:B6:42:B9:EF:C5:92:92:94:2C:8D:98:1F:B5:1B:C1:D3
Authority key identifier: ED:FF:33:E8:A3:BA:AE:2D:8D:85:60:01:0C:97:C7:6F:3B:19:FA:C9
Certificate issuer:       /CN=edff33e8a3baae2d8d8560010c97c76f3b19fac9
Certificate serial:       018F4B6B4E744BFB9F53E6E82C9C30940FA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
Manifest number:          0F94
Signing time:             Mon 06 May 2024 01:01:14 +0000
Manifest this update:     Mon 06 May 2024 01:01:14 +0000
Manifest next update:     Tue 07 May 2024 01:01:14 +0000
Files and hashes:         1: 7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl (hash: UrWqNCEp3I0t4yTpeUlc1TqkhJMzNqmhXDWsuA5TXSI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6b:4e:74:4b:fb:9f:53:e6:e8:2c:9c:30:94:0f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff33e8a3baae2d8d8560010c97c76f3b19fac9
        Validity
            Not Before: May  6 01:01:14 2024 GMT
            Not After : May  7 01:01:14 2024 GMT
        Subject: CN=9ffe7545b642b9efc59292942c8d981fb51bc1d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f2:dc:5b:13:da:43:ee:ec:1c:db:cc:d8:fd:
                    21:53:3e:93:b1:e6:bb:32:4e:1f:69:a9:82:46:83:
                    18:f3:13:37:63:37:52:e1:36:e4:cd:7c:c2:f3:99:
                    ab:6b:e2:9e:54:01:43:95:9e:b9:d4:08:d0:b8:4a:
                    de:cc:29:5f:ed:5c:37:3f:6a:ff:ae:fe:18:0d:55:
                    c1:19:55:93:09:5e:21:fc:01:20:a9:c5:5d:d0:5d:
                    28:b5:b3:5b:c5:b8:1c:23:59:76:00:18:67:14:53:
                    a5:d0:fa:68:68:ef:a1:9f:0b:e4:ee:9e:22:97:6f:
                    f7:14:ae:3f:92:57:74:37:67:2f:16:56:02:6e:d7:
                    87:02:a8:ec:93:67:45:2a:93:cd:64:d2:ec:9b:b2:
                    52:04:ef:ab:91:4b:ab:1a:5d:02:18:3f:c1:b3:2e:
                    d0:fe:c6:70:4d:90:ce:fe:7d:98:18:19:3c:ff:df:
                    59:0f:65:a8:7b:8f:07:09:83:d1:20:68:e4:ab:12:
                    95:6c:5a:d1:a4:d4:4d:ea:16:1e:20:69:3d:e6:48:
                    a2:73:1d:2a:90:f2:93:7e:c7:aa:c8:05:04:cb:6d:
                    c2:13:9b:e9:60:d7:ee:e2:e8:bb:b7:9d:7e:f2:81:
                    d3:b4:5d:8e:90:50:52:b9:76:22:14:be:f6:0f:ec:
                    37:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FE:75:45:B6:42:B9:EF:C5:92:92:94:2C:8D:98:1F:B5:1B:C1:D3
            X509v3 Authority Key Identifier:
                keyid:ED:FF:33:E8:A3:BA:AE:2D:8D:85:60:01:0C:97:C7:6F:3B:19:FA:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:dd:2a:12:cc:78:7b:a9:08:23:84:d4:3c:3f:79:5c:c5:2c:
         cb:cb:5e:4f:94:f1:09:eb:70:70:42:1b:ec:44:97:b2:c4:b1:
         35:67:09:e5:52:a4:45:5b:c4:14:c6:26:4a:78:46:d6:ea:f6:
         bb:84:33:e9:2c:ad:d9:fc:b6:ca:c5:92:c2:0f:b9:2a:45:66:
         83:e5:b1:95:41:e7:48:cd:9b:97:d8:aa:75:98:8e:14:24:25:
         9f:5d:e6:5e:00:05:98:52:ac:23:f8:de:5f:58:d6:7b:5d:6e:
         67:49:ce:dd:09:dc:91:a7:d3:09:3e:cb:1b:a3:cb:18:a5:84:
         1c:64:09:29:12:d4:04:4a:55:3f:22:eb:e8:f0:85:1f:f1:63:
         24:ac:99:38:a2:08:4c:a1:1c:3f:49:5e:bb:29:0f:20:ff:fc:
         8a:32:b3:db:2d:ef:db:f1:e7:d5:40:54:9e:ab:3a:38:f1:9c:
         3a:49:3f:20:81:45:d6:28:88:d0:f2:cb:12:d7:88:ff:0a:d1:
         a3:02:42:86:c5:50:76:c0:dc:6a:95:c9:84:4d:df:3c:76:00:
         9e:79:d4:12:80:2e:25:62:38:b1:be:96:3f:98:78:26:8b:b0:
         11:0e:de:be:9c:e1:93:73:b1:ca:e6:a4:9c:8f:c7:60:82:a1:
         e0:9c:89:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----