Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
File:                     vC92jP44T5-M2QPGh9hlKsVOdJU.mft (raw, json)
Hash identifier:          8AKnoY0Gy1Ec7vrLWt634UP5QGPumC2lkw/WvCAGaXQ=
Subject key identifier:   7D:AD:52:56:BA:98:5C:64:80:57:6B:EB:EC:AD:A4:CD:60:82:C7:E5
Authority key identifier: BC:2F:76:8C:FE:38:4F:9F:8C:D9:03:C6:87:D8:65:2A:C5:4E:74:95
Certificate issuer:       /CN=bc2f768cfe384f9f8cd903c687d8652ac54e7495
Certificate serial:       018F874AD59A44677D0DD64951A28B2AB0CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
Manifest number:          F7
Signing time:             Fri 17 May 2024 16:02:59 +0000
Manifest this update:     Fri 17 May 2024 16:02:59 +0000
Manifest next update:     Sat 18 May 2024 16:02:59 +0000
Files and hashes:         1: vC92jP44T5-M2QPGh9hlKsVOdJU.crl (hash: SGlihZdY0QEhYLAU2+fKdtrVLQIlc28h6OZ9uIvufk0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:d5:9a:44:67:7d:0d:d6:49:51:a2:8b:2a:b0:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc2f768cfe384f9f8cd903c687d8652ac54e7495
        Validity
            Not Before: May 17 16:02:59 2024 GMT
            Not After : May 18 16:02:59 2024 GMT
        Subject: CN=7dad5256ba985c6480576bebecada4cd6082c7e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:95:dc:fc:da:5c:92:f2:7d:c1:95:89:9f:ad:
                    93:40:50:0c:68:f9:87:5c:76:0a:8d:50:6e:30:23:
                    9c:8f:44:c6:30:7a:2a:22:73:2c:d2:d9:eb:7b:0e:
                    9c:b2:03:8e:54:0a:c0:8a:1f:d8:9c:f1:ac:df:a7:
                    60:b3:1b:2b:56:c6:86:df:50:85:92:06:1c:37:16:
                    ad:38:c8:a5:69:1c:98:1b:91:47:46:8e:29:bf:4a:
                    89:f2:e5:e1:0f:0d:05:eb:5f:87:93:a1:e6:04:97:
                    e9:f1:8b:66:95:78:90:46:bc:6f:1c:37:aa:e4:36:
                    6e:b9:12:1e:92:55:1b:9d:26:a9:54:2f:ff:37:73:
                    b4:90:9b:9b:a0:e0:4e:bc:25:f7:7b:ba:6e:1e:e7:
                    00:10:7a:28:37:4d:ff:ee:5b:cb:80:42:fc:cb:c6:
                    08:b2:a1:68:82:58:68:3a:e8:c8:0e:2c:cb:c0:c2:
                    74:09:24:b5:ff:1d:e2:fa:a1:08:32:1d:18:ea:94:
                    a7:5c:f3:d2:9b:0d:59:9d:53:bf:42:15:97:bb:92:
                    fb:58:0d:fb:26:9a:fa:7d:61:08:f1:99:ba:c5:fa:
                    41:36:27:41:5c:7a:9b:00:14:8b:b1:b9:2a:f1:75:
                    74:2c:b2:d0:ad:c2:b4:fd:92:d6:a2:3d:00:80:66:
                    bb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AD:52:56:BA:98:5C:64:80:57:6B:EB:EC:AD:A4:CD:60:82:C7:E5
            X509v3 Authority Key Identifier:
                keyid:BC:2F:76:8C:FE:38:4F:9F:8C:D9:03:C6:87:D8:65:2A:C5:4E:74:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:31:1f:30:ed:34:bd:84:38:c7:75:d9:38:36:53:3e:10:7d:
         7e:28:3e:bc:8f:3c:77:04:84:a1:30:cf:a5:87:84:51:1d:24:
         e9:b6:d3:49:59:04:0d:17:72:c8:33:8b:de:d1:ea:d5:3a:50:
         0c:ba:47:78:ff:7e:f1:14:94:99:a8:91:45:b0:56:c9:1f:68:
         f6:ce:18:52:32:0a:d0:b5:b1:e2:e1:cc:e4:14:52:d4:2d:d8:
         e6:4e:82:ce:46:f9:fa:82:fc:cc:b8:13:ec:27:91:41:7c:24:
         26:ef:f6:f7:9d:13:a9:57:ad:0f:c5:17:f0:f5:b7:91:36:f8:
         26:81:94:82:80:f0:f7:f2:d9:ae:e4:de:23:70:5e:3b:b3:f8:
         49:59:75:e7:d0:a2:1a:11:ef:40:fd:0b:c5:f5:5b:31:ee:4b:
         57:2c:81:00:08:ac:39:a6:3f:09:12:7c:aa:fc:03:e9:98:f6:
         13:7b:ac:08:78:92:05:a0:90:30:da:a6:90:7e:75:1b:b5:d7:
         90:ce:39:91:ca:52:98:2b:da:2f:d9:d6:0a:65:43:16:89:fd:
         7d:c6:d0:5b:01:93:b8:2b:af:13:f7:6f:e0:e6:00:de:d3:35:
         84:ae:c0:41:ab:5c:25:29:b7:a3:b7:f7:35:c9:16:25:24:09:
         ee:67:c0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----