Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.mft
File:                     1R31-9viXy1eU4x53RjD1sQualU.mft (raw, json)
Hash identifier:          psyy//szdjMLXQokoa0twtiww3KF47QSkbYFArL1Uxw=
Subject key identifier:   BB:31:97:2B:5B:EB:F7:22:77:1D:8B:0A:FF:42:8A:68:9C:19:F9:CB
Authority key identifier: D5:1D:F5:FB:DB:E2:5F:2D:5E:53:8C:79:DD:18:C3:D6:C4:2E:6A:55
Certificate issuer:       /CN=d51df5fbdbe25f2d5e538c79dd18c3d6c42e6a55
Certificate serial:       018F1E5B779C3A813BECD29D21DBC50F00D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1R31-9viXy1eU4x53RjD1sQualU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.mft
Manifest number:          113D
Signing time:             Sat 27 Apr 2024 07:01:01 +0000
Manifest this update:     Sat 27 Apr 2024 07:01:01 +0000
Manifest next update:     Sun 28 Apr 2024 07:01:01 +0000
Files and hashes:         1: 1R31-9viXy1eU4x53RjD1sQualU.crl (hash: Q00AkCp4T9EJzoWwEbwPiwRZQQ8heVUqKuwmlwo7C9o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1R31-9viXy1eU4x53RjD1sQualU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1e:5b:77:9c:3a:81:3b:ec:d2:9d:21:db:c5:0f:00:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d51df5fbdbe25f2d5e538c79dd18c3d6c42e6a55
        Validity
            Not Before: Apr 27 07:01:01 2024 GMT
            Not After : Apr 28 07:01:01 2024 GMT
        Subject: CN=bb31972b5bebf722771d8b0aff428a689c19f9cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:12:f8:1e:28:50:e4:d5:b1:e0:27:31:08:23:
                    d0:3f:0b:99:84:57:ec:e0:d3:d5:22:69:85:05:be:
                    75:ad:e5:c8:7f:6a:97:cb:5b:c4:3a:cc:04:ad:3e:
                    48:2d:ad:25:44:c8:16:8f:fe:d7:6a:7e:4f:93:3a:
                    d3:c9:75:fa:79:48:2e:38:43:e0:4f:02:d5:84:e6:
                    4f:ad:49:8d:5c:6d:13:9b:5c:4d:98:d2:4a:7e:99:
                    dd:9b:a9:d6:d3:b9:8a:eb:66:03:13:54:f4:a1:db:
                    ee:07:b9:37:3e:82:6b:5b:8f:80:21:c9:9c:7c:64:
                    cc:58:31:c9:5c:f5:b5:b2:5a:1a:c8:96:20:55:7b:
                    48:c4:96:3d:d5:eb:97:60:d5:eb:54:b0:92:63:8f:
                    b3:c1:d3:77:be:6b:4d:a2:48:36:f4:45:34:58:29:
                    e6:60:4c:c8:e7:8b:a0:a7:e3:82:b0:3d:93:e2:8f:
                    23:81:98:c2:57:53:d9:fc:5a:92:84:b6:5a:30:f0:
                    3c:57:79:1f:7c:56:7e:0a:80:ec:e8:92:fe:ca:43:
                    a9:45:fd:93:fb:3e:0e:f8:ec:a7:0d:7a:6f:b7:ca:
                    1f:c1:79:54:97:a9:0a:ea:2d:97:fc:2a:2c:55:1a:
                    de:a1:24:6d:50:fe:0b:bc:f6:3e:63:27:e3:07:ef:
                    ae:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:31:97:2B:5B:EB:F7:22:77:1D:8B:0A:FF:42:8A:68:9C:19:F9:CB
            X509v3 Authority Key Identifier:
                keyid:D5:1D:F5:FB:DB:E2:5F:2D:5E:53:8C:79:DD:18:C3:D6:C4:2E:6A:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R31-9viXy1eU4x53RjD1sQualU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:5a:0d:8c:2f:df:05:1c:57:39:40:b6:7f:21:fb:97:c6:8f:
         cd:19:56:17:34:5b:50:6b:19:d2:7a:5a:05:dd:31:d5:59:6f:
         02:64:d6:03:c6:f8:51:fd:f4:68:92:31:21:c4:c7:8d:05:07:
         ca:45:43:84:34:3b:43:e6:4e:a8:90:96:21:3a:e1:5b:68:26:
         eb:c0:a7:ff:8a:03:83:f1:94:b2:83:75:62:ca:66:c2:dc:81:
         76:ae:d4:69:2f:41:19:18:64:89:7c:fd:55:88:c1:2d:39:07:
         25:98:b2:15:58:97:74:a8:e2:12:db:f1:f2:fb:24:2b:9e:e6:
         c5:04:ba:d6:ba:2d:03:71:5a:4b:e0:65:8c:80:f5:b0:14:1c:
         5c:72:7f:5a:44:fd:be:c6:b8:9e:09:d8:7f:98:58:71:0a:7a:
         4b:6a:32:2d:84:35:95:c3:8e:20:cf:12:a9:8f:7b:30:b1:ca:
         dd:98:2f:cc:1a:22:db:e7:ca:f5:1a:4d:90:6d:5d:95:33:a1:
         45:18:57:c1:ba:fa:db:dc:2a:cd:b2:cf:93:fd:1d:ed:aa:50:
         c1:e6:35:3c:bb:e3:bf:e8:1e:5f:c0:cc:eb:a8:82:c9:06:cb:
         2e:56:08:ab:36:45:a6:29:2b:f4:20:33:43:ba:0b:37:c4:2d:
         9e:47:e6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----