Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.mft
File:                     d_M68l-VqylxEYjp_-pQzMshHXY.mft (raw, json)
Hash identifier:          BfSjMLKljCjV+vOwLckP8oAMHjF4fOXdmrjE6soXKN4=
Subject key identifier:   A2:45:51:DC:3E:68:0F:E3:58:F5:F2:E3:25:E4:C1:AE:6E:1C:48:31
Authority key identifier: 77:F3:3A:F2:5F:95:AB:29:71:11:88:E9:FF:EA:50:CC:CB:21:1D:76
Certificate issuer:       /CN=77f33af25f95ab29711188e9ffea50cccb211d76
Certificate serial:       018F889203038F5DD5D5AD84249572646046
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_M68l-VqylxEYjp_-pQzMshHXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.mft
Manifest number:          08EE
Signing time:             Fri 17 May 2024 22:00:21 +0000
Manifest this update:     Fri 17 May 2024 22:00:21 +0000
Manifest next update:     Sat 18 May 2024 22:00:21 +0000
Files and hashes:         1: d_M68l-VqylxEYjp_-pQzMshHXY.crl (hash: m47X/ct8/oV75QsZ1AHwGtmEixDFgopXXAjEi6WqqOM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d_M68l-VqylxEYjp_-pQzMshHXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:03:03:8f:5d:d5:d5:ad:84:24:95:72:64:60:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f33af25f95ab29711188e9ffea50cccb211d76
        Validity
            Not Before: May 17 22:00:21 2024 GMT
            Not After : May 18 22:00:21 2024 GMT
        Subject: CN=a24551dc3e680fe358f5f2e325e4c1ae6e1c4831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:8f:55:d9:66:2c:52:7c:97:ca:3a:a7:76:bd:
                    98:d3:20:99:7a:9b:07:10:db:c0:41:4a:65:2e:92:
                    5e:7f:e8:c2:15:2d:2b:99:9b:b6:2e:48:47:4f:1c:
                    0e:05:77:87:90:64:2a:c3:b3:2a:86:36:b8:d4:09:
                    f4:1d:05:ba:86:fc:82:ab:44:51:07:68:9f:f9:f9:
                    77:ae:ab:51:ea:e8:37:0b:55:36:a3:ec:cd:db:6c:
                    09:4a:59:c5:37:cf:3c:18:94:a5:0c:f9:ed:7c:96:
                    e7:09:58:ee:99:3b:8d:a7:d2:f1:af:55:3f:97:87:
                    be:ef:d8:89:77:bb:3a:a3:25:98:06:ca:41:4d:d5:
                    37:54:e1:f0:2e:13:68:19:35:0b:a4:d2:51:3d:51:
                    b8:ad:94:40:8c:60:ef:f9:28:4d:91:29:5d:11:b2:
                    c4:2c:15:83:95:cf:03:c5:4b:92:e5:29:71:1f:fa:
                    e1:06:6d:3f:dd:02:0b:36:2f:08:3b:b4:6e:b5:97:
                    ab:cd:e6:ca:08:90:86:1f:a8:3b:7c:8a:ad:2f:55:
                    d7:b7:c2:b0:0f:7c:86:e0:1e:e4:e7:67:c8:48:4e:
                    76:f3:ad:58:cd:8f:ea:08:49:5a:6b:2d:f2:92:81:
                    b8:04:a7:96:1b:9b:b6:9e:ea:15:05:a3:30:50:74:
                    cd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:45:51:DC:3E:68:0F:E3:58:F5:F2:E3:25:E4:C1:AE:6E:1C:48:31
            X509v3 Authority Key Identifier:
                keyid:77:F3:3A:F2:5F:95:AB:29:71:11:88:E9:FF:EA:50:CC:CB:21:1D:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_M68l-VqylxEYjp_-pQzMshHXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e2:d7:eb:73:35:f9:06:bf:9a:5f:f0:7e:2b:08:ba:0d:b7:
         9e:2e:04:7e:e6:22:1b:e1:cd:9d:b9:90:6c:fc:bd:f3:e9:eb:
         d8:fe:c2:66:15:0e:01:07:46:8d:e0:87:23:eb:5f:7c:29:65:
         90:fd:b7:e3:5b:13:29:73:14:7a:17:de:f8:b7:6f:54:5b:cd:
         e2:93:28:15:62:0b:6a:eb:e4:22:c3:30:97:e7:d5:70:2d:ab:
         c5:51:42:05:1d:c3:13:9e:b2:2e:8a:24:c6:1c:1b:a6:7c:f6:
         4b:af:76:13:70:bf:e1:52:4e:6a:dc:f6:ce:91:23:1d:1d:78:
         88:40:39:98:ff:12:68:4f:16:30:b5:d0:c8:a7:1f:7c:2a:17:
         d9:ea:d8:9c:0a:5f:77:8c:78:c4:51:9f:c5:c6:e2:c3:ef:82:
         66:3a:ab:49:c0:b8:93:6e:4d:bd:8e:81:27:1b:47:e1:94:8e:
         bf:57:a3:34:0f:e2:0c:20:e8:3e:c7:e7:86:de:2e:89:f1:e9:
         23:ff:00:aa:fc:c5:a8:e9:48:3a:18:61:72:26:9e:0b:6b:04:
         63:87:04:d4:0e:61:b3:9f:5d:c7:8b:c3:3b:60:30:85:9d:3f:
         d7:f0:15:f4:09:f4:b8:8b:a4:b1:19:73:8d:62:80:78:00:6e:
         f2:ad:bc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----