Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft
File:                     d6dcTie5EIG4MB56fE_ZA-AmGGI.mft (raw, json)
Hash identifier:          I8yk1WfAo34H1Ce342IDVNdp/jVPAq3Bq9lCc/GvxdA=
Subject key identifier:   41:F2:E2:DA:C0:58:94:EC:BD:3B:49:F5:59:DD:DD:6C:39:1B:61:A5
Authority key identifier: 77:A7:5C:4E:27:B9:10:81:B8:30:1E:7A:7C:4F:D9:03:E0:26:18:62
Certificate issuer:       /CN=77a75c4e27b91081b8301e7a7c4fd903e0261862
Certificate serial:       018F8749C511E2C27256812921FF0E2DFD94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6dcTie5EIG4MB56fE_ZA-AmGGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft
Manifest number:          F7
Signing time:             Fri 17 May 2024 16:01:49 +0000
Manifest this update:     Fri 17 May 2024 16:01:49 +0000
Manifest next update:     Sat 18 May 2024 16:01:49 +0000
Files and hashes:         1: d6dcTie5EIG4MB56fE_ZA-AmGGI.crl (hash: wPbT2Jvad0Ijnlg/O/cc/WAIIat7gqlv1eByrgw9f/0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6dcTie5EIG4MB56fE_ZA-AmGGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:c5:11:e2:c2:72:56:81:29:21:ff:0e:2d:fd:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a75c4e27b91081b8301e7a7c4fd903e0261862
        Validity
            Not Before: May 17 16:01:49 2024 GMT
            Not After : May 18 16:01:49 2024 GMT
        Subject: CN=41f2e2dac05894ecbd3b49f559dddd6c391b61a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cf:f8:ad:38:e1:cb:e1:6e:4c:c9:e5:14:f0:
                    26:eb:df:73:0f:6a:3e:1a:e4:80:ed:ff:c4:81:73:
                    76:10:92:32:81:d0:34:a5:d9:2f:26:38:65:48:fa:
                    eb:47:45:ee:f5:25:5c:f8:ae:34:a7:e2:64:bf:33:
                    6b:44:19:57:51:4c:6f:0c:17:e1:1b:59:6d:35:d5:
                    23:2a:0a:ad:10:e9:92:28:09:7c:c3:24:0a:74:ae:
                    0b:87:91:20:93:74:25:60:27:35:8d:09:d0:f3:c8:
                    e8:9a:14:eb:2f:d6:80:d2:7a:3b:2a:f4:16:23:b4:
                    ab:88:bb:96:5b:38:3f:ed:94:24:98:cb:84:20:73:
                    2d:58:d7:58:ea:ec:51:24:fa:0d:fd:37:1f:36:0f:
                    58:2e:c6:af:ba:7c:02:f3:55:fe:6b:23:b6:04:60:
                    34:0f:2e:57:ea:72:15:be:16:1e:96:ee:43:2a:19:
                    2d:97:d7:02:79:61:28:08:19:47:3b:c0:42:af:a2:
                    c2:51:fc:91:42:85:3b:54:30:e4:e9:82:cf:a9:92:
                    70:ce:cf:e6:3f:79:52:ce:41:27:a5:ae:42:3c:96:
                    4c:b8:2e:ad:e5:72:3f:11:1e:23:5b:91:6c:64:ce:
                    35:3d:0b:bb:a7:9d:ed:90:70:60:c9:0f:48:08:4d:
                    84:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F2:E2:DA:C0:58:94:EC:BD:3B:49:F5:59:DD:DD:6C:39:1B:61:A5
            X509v3 Authority Key Identifier:
                keyid:77:A7:5C:4E:27:B9:10:81:B8:30:1E:7A:7C:4F:D9:03:E0:26:18:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6dcTie5EIG4MB56fE_ZA-AmGGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:98:be:20:de:e5:12:ea:4e:08:98:f5:9a:b1:e5:fe:b5:d8:
         48:43:97:23:fd:85:e5:34:c4:49:62:90:4d:61:80:ea:e0:fa:
         ec:0a:01:37:2d:80:c1:97:e9:a4:bc:2a:0d:72:f7:e2:9d:57:
         9b:1b:7c:95:28:37:86:d1:4c:51:46:66:a6:74:3f:30:8f:e3:
         31:b5:6f:0e:7d:80:96:2f:b1:5e:33:77:1d:43:ab:5c:f1:14:
         7b:b1:34:6e:18:2a:cf:b5:a4:ec:9a:d1:3f:b5:be:43:d9:9f:
         32:51:8d:8c:71:b3:10:87:af:6a:eb:d2:17:a8:fe:58:b6:c1:
         29:95:15:83:80:59:d2:e2:46:a6:1a:f8:91:b9:da:79:b2:86:
         4e:44:53:89:db:f2:1a:33:e0:1a:b4:58:b2:98:1e:d8:e0:16:
         be:9a:7d:64:bf:73:ea:41:ac:86:ee:93:fa:c7:bf:5f:5f:a4:
         17:d9:7c:9f:bf:d2:75:1c:b8:ee:d6:46:2a:d3:59:1c:a0:77:
         b4:cd:9e:6d:fd:01:da:0d:58:11:a3:a8:56:19:00:f6:e6:5c:
         a9:a2:c7:fe:b9:ca:62:30:7b:f4:83:99:20:b5:40:69:4e:24:
         7e:c2:e5:da:e4:b1:3c:33:c5:b9:d8:53:34:fa:95:3b:94:49:
         a1:b7:f8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----