Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.mft
File:                     0z3ubd_dv6ge6rxEHFPnAvklgWU.mft (raw, json)
Hash identifier:          LD864SwgYn/NjWxaCzpp6w6KiIlUa/qF/NXTu4s77pk=
Subject key identifier:   87:4F:AB:28:DC:4D:D6:04:4D:90:12:79:72:5A:4B:AA:83:56:C6:5C
Authority key identifier: D3:3D:EE:6D:DF:DD:BF:A8:1E:EA:BC:44:1C:53:E7:02:F9:25:81:65
Certificate issuer:       /CN=d33dee6ddfddbfa81eeabc441c53e702f9258165
Certificate serial:       018F23817F24CC66F66E6A7D90C03C8C75B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0z3ubd_dv6ge6rxEHFPnAvklgWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.mft
Manifest number:          0F06
Signing time:             Sun 28 Apr 2024 07:00:40 +0000
Manifest this update:     Sun 28 Apr 2024 07:00:40 +0000
Manifest next update:     Mon 29 Apr 2024 07:00:40 +0000
Files and hashes:         1: 0z3ubd_dv6ge6rxEHFPnAvklgWU.crl (hash: 6rRV6stxt8ZmDIC8HtiwH6xtEIsNEM06PqinGJMV1+Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0z3ubd_dv6ge6rxEHFPnAvklgWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:23:81:7f:24:cc:66:f6:6e:6a:7d:90:c0:3c:8c:75:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d33dee6ddfddbfa81eeabc441c53e702f9258165
        Validity
            Not Before: Apr 28 07:00:40 2024 GMT
            Not After : Apr 29 07:00:40 2024 GMT
        Subject: CN=874fab28dc4dd6044d901279725a4baa8356c65c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:8f:3c:b9:48:8d:99:f3:b2:0f:95:c2:e0:35:
                    08:20:ef:9e:1b:0d:50:6b:86:0a:86:ab:9e:f5:ad:
                    d3:97:bf:4d:50:3e:3c:30:af:24:cd:95:96:85:16:
                    01:f0:70:a6:c5:db:8a:0b:96:2d:8a:a8:e9:d5:55:
                    a9:ca:f2:25:0e:ea:d6:d7:22:9f:a6:64:1f:a9:49:
                    03:62:66:22:9c:98:be:40:a7:01:de:69:ee:ce:55:
                    3c:a6:08:82:d1:9c:c3:6d:7f:06:12:f6:07:cc:e5:
                    0e:33:3c:fe:69:f2:28:be:27:e9:f8:6e:e5:50:3e:
                    56:19:d7:29:f3:60:48:30:d7:12:e6:4b:7f:88:5a:
                    a5:2e:d7:42:a9:a0:af:b6:54:50:6a:8a:67:fa:72:
                    ae:c2:0d:69:a4:1a:75:48:53:c8:08:dc:57:85:61:
                    3b:39:ab:27:9a:2e:51:50:0c:ec:7c:b8:bb:b4:65:
                    07:c7:6b:8e:a7:f3:9f:30:70:90:61:f5:b2:06:00:
                    70:d9:18:55:04:2a:85:7d:b1:be:98:46:55:be:68:
                    c9:03:34:3b:c2:94:f3:3e:2e:87:66:a9:11:a8:99:
                    f3:2f:3d:c1:3f:e0:fa:de:08:a0:8c:a4:40:cf:6d:
                    aa:c4:bc:a8:f7:17:31:c6:b6:60:e9:17:db:78:0e:
                    16:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4F:AB:28:DC:4D:D6:04:4D:90:12:79:72:5A:4B:AA:83:56:C6:5C
            X509v3 Authority Key Identifier:
                keyid:D3:3D:EE:6D:DF:DD:BF:A8:1E:EA:BC:44:1C:53:E7:02:F9:25:81:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z3ubd_dv6ge6rxEHFPnAvklgWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:32:3b:2f:1e:b7:2f:80:60:ea:02:02:8d:c7:af:f0:87:79:
         33:fb:12:b7:83:14:60:c9:4b:e4:f4:11:43:84:8f:65:82:56:
         ac:54:46:6d:92:ce:3a:b8:9c:1f:b1:88:5a:92:06:ea:30:05:
         bc:61:e3:fd:ba:ca:1f:8d:4d:ee:22:c0:4e:38:14:0b:68:da:
         dd:fb:c2:85:36:ba:08:e5:0f:60:c0:24:ba:a0:4d:92:28:9b:
         63:fc:e0:39:9c:a0:93:03:3b:a8:50:8a:fb:b2:78:8e:65:fe:
         43:0a:45:ee:78:62:f4:81:99:e5:b9:91:52:c3:22:bb:72:b4:
         22:fa:46:b9:bf:7f:d9:a9:21:3b:c6:10:30:12:42:ac:a2:48:
         31:28:13:f4:31:12:e3:cf:f6:d9:e4:ff:b3:1b:0c:c9:0c:20:
         b7:1f:df:63:fb:09:e6:fc:c2:3c:94:a1:bc:1d:dd:fa:be:c5:
         de:ce:a1:93:10:68:22:cd:b1:83:70:7b:2c:2a:70:7e:75:71:
         bf:d9:4a:e8:09:13:9f:d9:57:7f:44:bf:ff:4f:f9:b8:2e:75:
         51:1f:ff:88:1b:39:f0:38:29:eb:ce:f9:15:13:16:7b:86:8c:
         9a:a7:4e:4b:52:02:5e:d5:38:17:71:f4:f8:99:85:99:66:bb:
         9b:56:2f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----