Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
File:                     AhaSppUBf7XEv4wjgHjzA9j78Ic.mft (raw, json)
Hash identifier:          40lnQ7tOl08sHFKf4iI3nCemJdq6sR0k8y8eXJ5NA24=
Subject key identifier:   52:FE:C1:69:EB:73:39:5C:3C:F9:3B:16:AD:F5:E2:2A:C4:81:5C:C5
Authority key identifier: 02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
Certificate issuer:       /CN=021692a695017fb5c4bf8c238078f303d8fbf087
Certificate serial:       018F20EF60BBABE09479914606E333AD1021
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
Manifest number:          113F
Signing time:             Sat 27 Apr 2024 19:01:49 +0000
Manifest this update:     Sat 27 Apr 2024 19:01:49 +0000
Manifest next update:     Sun 28 Apr 2024 19:01:49 +0000
Files and hashes:         1: AhaSppUBf7XEv4wjgHjzA9j78Ic.crl (hash: AxeqYZss5NB95YweEdddwWPkT7YS8he32Xzp1Wmf9gw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:20:ef:60:bb:ab:e0:94:79:91:46:06:e3:33:ad:10:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021692a695017fb5c4bf8c238078f303d8fbf087
        Validity
            Not Before: Apr 27 19:01:49 2024 GMT
            Not After : Apr 28 19:01:49 2024 GMT
        Subject: CN=52fec169eb73395c3cf93b16adf5e22ac4815cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:64:03:d7:5b:8b:ca:b3:a0:72:dc:f9:8c:e4:
                    bb:ae:03:bf:7b:a9:99:aa:0e:b9:18:d3:e6:c5:ce:
                    63:74:20:31:e8:db:3c:72:57:c5:b4:a9:88:cf:f2:
                    69:4c:13:fc:47:12:a4:2f:94:79:62:91:77:73:f3:
                    b1:fa:e5:ae:36:ca:23:1c:4c:57:1d:7e:fa:06:40:
                    59:d6:de:0f:d4:08:3b:6c:fe:d2:51:8c:22:a9:f0:
                    c0:a9:79:8c:83:d3:03:bf:b7:bf:83:cf:77:ca:93:
                    08:bc:b7:52:7e:b0:21:29:cc:a8:95:d3:c7:18:db:
                    e8:01:31:06:1c:72:0a:b6:f3:04:e4:d3:bb:1d:85:
                    19:68:bb:2b:20:fd:0e:dc:a6:00:c5:ff:93:07:55:
                    f7:32:d9:6c:f6:08:db:62:d3:ef:08:fc:d8:ec:5a:
                    3f:68:66:1c:f4:63:49:15:bc:c2:70:84:ba:f8:45:
                    d3:2d:43:40:f7:ab:25:9c:bb:7b:6c:43:0f:da:03:
                    5a:8c:02:44:4d:b8:63:17:7e:67:f1:59:9f:48:8b:
                    3b:03:37:31:1b:c9:f5:d2:48:54:9a:d2:11:af:fd:
                    dc:71:11:92:6d:8d:7e:1f:9a:70:d9:22:df:19:e6:
                    bb:af:a8:d5:6f:06:36:12:84:1f:c0:8d:32:09:ec:
                    b1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FE:C1:69:EB:73:39:5C:3C:F9:3B:16:AD:F5:E2:2A:C4:81:5C:C5
            X509v3 Authority Key Identifier:
                keyid:02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:55:62:31:b4:28:30:9b:ba:cb:eb:b0:90:0c:21:43:2f:64:
         ec:87:a9:20:cf:c7:f1:88:55:10:9b:ad:77:48:6f:b4:07:fd:
         71:51:5b:44:78:51:37:74:f6:c6:45:55:2d:0d:f2:57:86:71:
         63:6f:5b:8f:30:bf:ec:a6:59:29:9e:53:15:e6:85:8e:3b:93:
         59:61:fb:67:59:57:14:2d:a0:67:eb:71:21:27:d6:64:3f:42:
         9a:20:6d:2c:7b:b5:60:f5:d4:94:c8:ba:df:cc:e6:0d:88:54:
         b5:92:71:93:5f:14:78:ca:16:82:d0:53:93:92:15:ca:47:3d:
         23:a0:66:be:4f:19:de:e8:03:fd:a9:39:f1:8a:8b:56:65:b8:
         1d:2a:8f:b9:01:dd:41:d1:98:63:0f:68:e5:4f:5a:c0:f5:54:
         27:f0:d2:62:c5:ec:79:ef:cf:b7:ce:ca:4d:6b:e5:9e:35:35:
         ed:13:db:98:7f:7f:c9:4d:00:09:1f:82:b6:e0:ac:a6:23:8f:
         6d:2e:37:78:3c:cd:2b:bc:3c:34:0c:b1:ab:02:95:8f:29:c1:
         7b:d0:05:3e:05:ee:ac:d4:c7:4f:46:4d:66:9f:e0:91:a3:ca:
         56:b0:b7:2e:66:59:a2:14:81:be:fa:77:fe:bb:7c:00:3f:17:
         3e:af:22:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----