Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b6c7bb-fa8f-4145-adeb-f8675c5f220f/1/d6WLXdkHh5Mmv_V_tQXA0Bxfuro.mft
File:                     d6WLXdkHh5Mmv_V_tQXA0Bxfuro.mft (raw, json)
Hash identifier:          zuSDVckkK97WAvVcFgOnGqA6srtvJw+ZNGrZWtlOk3c=
Subject key identifier:   26:CF:EE:A4:56:7F:F5:53:2B:42:CE:09:A2:E5:44:F9:68:09:7D:ED
Authority key identifier: 77:A5:8B:5D:D9:07:87:93:26:BF:F5:7F:B5:05:C0:D0:1C:5F:BA:BA
Certificate issuer:       /CN=77a58b5dd907879326bff57fb505c0d01c5fbaba
Certificate serial:       018F885B0019004303FDF567324A2D4E8B2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6WLXdkHh5Mmv_V_tQXA0Bxfuro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/b6c7bb-fa8f-4145-adeb-f8675c5f220f/1/d6WLXdkHh5Mmv_V_tQXA0Bxfuro.mft
Manifest number:          5F
Signing time:             Fri 17 May 2024 21:00:16 +0000
Manifest this update:     Fri 17 May 2024 21:00:16 +0000
Manifest next update:     Sat 18 May 2024 21:00:16 +0000
Files and hashes:         1: d6WLXdkHh5Mmv_V_tQXA0Bxfuro.crl (hash: GHba2Z2yPJYmVJT5gw1Nhw+dBvPjoQuhyBP+z+OADx8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/b6c7bb-fa8f-4145-adeb-f8675c5f220f/1/d6WLXdkHh5Mmv_V_tQXA0Bxfuro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/b6c7bb-fa8f-4145-adeb-f8675c5f220f/1/d6WLXdkHh5Mmv_V_tQXA0Bxfuro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6WLXdkHh5Mmv_V_tQXA0Bxfuro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:00:19:00:43:03:fd:f5:67:32:4a:2d:4e:8b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a58b5dd907879326bff57fb505c0d01c5fbaba
        Validity
            Not Before: May 17 21:00:16 2024 GMT
            Not After : May 18 21:00:16 2024 GMT
        Subject: CN=26cfeea4567ff5532b42ce09a2e544f968097ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1b:d5:78:d7:e6:02:59:da:24:a4:25:5f:e5:
                    11:c7:29:b1:54:2e:e6:ad:6e:74:13:db:da:ec:1c:
                    2f:05:b3:cf:8f:b5:64:52:10:e5:09:b5:b5:97:3c:
                    2a:ca:82:d2:22:e7:a7:0a:27:f3:79:c8:90:c9:15:
                    29:45:c8:ce:08:5c:0b:8e:c8:e8:8c:2d:ba:76:93:
                    a2:59:af:54:be:ed:6c:2a:23:9f:da:64:00:db:cb:
                    05:b9:30:10:23:55:02:53:85:f0:54:5f:64:1d:ae:
                    17:cb:2e:ab:3f:9b:d7:92:db:48:af:e4:a9:96:7c:
                    68:92:bf:16:04:13:24:43:fa:7c:89:c4:77:1a:5a:
                    bd:75:3f:e2:b4:25:f6:e6:dc:41:d4:db:64:64:df:
                    a3:aa:02:e6:f3:d3:d3:91:7d:b7:8a:f6:90:6d:c2:
                    df:f9:a3:bd:37:47:a1:90:be:82:14:a8:d1:26:c5:
                    b9:fc:8f:58:a7:27:e7:5b:a4:f0:0a:cf:64:e6:fb:
                    00:f3:8c:1a:dd:15:95:21:5c:ba:20:21:3f:43:eb:
                    64:1c:64:8c:5a:47:1d:dc:a5:92:b0:32:2a:35:d7:
                    99:85:36:8c:58:8b:59:c4:73:f4:83:34:0d:15:46:
                    08:a3:75:b8:28:7c:e9:66:56:e5:e0:5b:e4:e5:1f:
                    63:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CF:EE:A4:56:7F:F5:53:2B:42:CE:09:A2:E5:44:F9:68:09:7D:ED
            X509v3 Authority Key Identifier:
                keyid:77:A5:8B:5D:D9:07:87:93:26:BF:F5:7F:B5:05:C0:D0:1C:5F:BA:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6WLXdkHh5Mmv_V_tQXA0Bxfuro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b6c7bb-fa8f-4145-adeb-f8675c5f220f/1/d6WLXdkHh5Mmv_V_tQXA0Bxfuro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b6c7bb-fa8f-4145-adeb-f8675c5f220f/1/d6WLXdkHh5Mmv_V_tQXA0Bxfuro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e2:54:e5:cb:65:9b:d9:35:bb:e2:ca:96:9f:e1:a0:e2:2c:
         50:5d:e7:05:bc:af:2b:c2:f4:10:a4:48:f1:6a:74:4c:63:81:
         94:0b:81:32:77:46:ae:4a:98:8f:f2:6c:5c:6e:18:d1:ec:cb:
         32:e7:b6:e2:27:19:99:b9:ad:68:16:11:83:19:71:a2:86:70:
         d1:7c:e4:48:16:9b:33:dc:8f:44:39:df:88:2f:4f:d7:e6:9d:
         03:b4:92:24:e5:6f:2a:86:b8:07:a9:14:12:23:e0:92:07:c6:
         ef:4f:bb:3f:bb:24:38:c8:4e:ad:dc:06:39:c6:b6:8f:19:84:
         5e:42:14:2a:1b:34:d1:0d:aa:ff:3d:6a:2e:d1:55:c1:37:1d:
         d7:59:ab:1f:3b:d5:23:de:66:37:7d:87:3e:20:6d:d2:0b:b3:
         c1:5b:54:72:79:d3:25:4d:08:a1:9f:9e:18:6f:e9:1f:f2:b3:
         bc:51:72:12:6c:bd:0f:8c:37:92:07:58:83:0b:00:37:22:65:
         08:32:ef:7f:bc:3d:c7:f5:e8:75:cf:9e:79:9a:1f:66:be:bd:
         e2:bb:b1:2d:cd:16:3b:d0:4b:1a:59:1b:d7:85:24:c6:fb:28:
         5c:db:ca:fe:7c:11:e0:ae:9a:9c:ac:91:7b:04:cf:35:5c:8b:
         b0:c5:33:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----