Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
File:                     TeztaXzW72A8kPgBiBg7zjAgQOE.mft (raw, json)
Hash identifier:          VdMofFaKLPJDd73l6wEMupmc4EtyBAAx7vvrfBBXjwI=
Subject key identifier:   8F:0B:9E:D6:0A:89:E9:52:76:47:85:21:48:43:CB:50:8C:E5:E2:50
Authority key identifier: 4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1
Certificate issuer:       /CN=4deced697cd6ef603c90f80188183bce302040e1
Certificate serial:       018F87EDC45DF8A7B3BD385E4568111199BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
Manifest number:          0116
Signing time:             Fri 17 May 2024 19:00:57 +0000
Manifest this update:     Fri 17 May 2024 19:00:57 +0000
Manifest next update:     Sat 18 May 2024 19:00:57 +0000
Files and hashes:         1: TeztaXzW72A8kPgBiBg7zjAgQOE.crl (hash: QlPVWT5wQqKM3fNxSW1UcaG9/Nvpex4ZUWkcYcATzUg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:c4:5d:f8:a7:b3:bd:38:5e:45:68:11:11:99:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4deced697cd6ef603c90f80188183bce302040e1
        Validity
            Not Before: May 17 19:00:57 2024 GMT
            Not After : May 18 19:00:57 2024 GMT
        Subject: CN=8f0b9ed60a89e952764785214843cb508ce5e250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:84:6b:d7:7c:af:22:41:68:1d:dd:59:18:e7:
                    3f:33:48:86:0f:68:02:d6:92:f1:3c:5a:6a:05:a3:
                    96:c4:5d:e5:c3:49:bf:b9:5d:23:9f:ec:a6:5c:b7:
                    7d:31:67:17:3a:b4:44:1e:0a:da:c8:01:a1:2a:5f:
                    22:1e:58:4f:b1:1a:04:37:12:80:8b:c7:21:36:2a:
                    91:ca:ef:db:83:03:b0:56:ad:11:f0:35:53:c3:1f:
                    eb:bc:98:c9:09:a2:04:96:ac:87:e6:ac:bf:0a:b6:
                    e7:08:ba:60:aa:2b:22:c1:22:46:90:e7:3e:b0:64:
                    d6:6b:8d:88:82:8a:8f:5a:33:09:ec:3e:8c:c0:bc:
                    9b:11:4b:5b:1b:74:0a:76:ad:22:2c:e5:52:70:74:
                    10:a4:86:06:ad:e9:a2:bd:2f:e8:12:08:3f:f9:a8:
                    d6:f7:4e:e4:96:b4:3f:a2:87:14:b3:f3:9a:02:7f:
                    0e:e2:2a:a3:c0:a4:e4:e4:a0:93:27:19:fb:7b:69:
                    02:e3:3c:e9:9d:0a:53:40:7d:ae:b0:9a:e1:a2:3a:
                    b3:ff:3e:15:21:2e:01:18:1c:10:af:d1:81:41:70:
                    35:be:16:79:eb:51:f5:8b:6a:a8:36:f3:d9:95:33:
                    53:95:ce:85:bb:b9:16:05:19:13:fd:04:11:91:4b:
                    e0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0B:9E:D6:0A:89:E9:52:76:47:85:21:48:43:CB:50:8C:E5:E2:50
            X509v3 Authority Key Identifier:
                keyid:4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:16:9c:c3:bf:70:85:aa:96:c6:c7:66:41:4b:5b:ec:d8:38:
         ba:03:fc:95:4f:d5:58:53:aa:62:60:fe:19:e9:f4:69:c8:f3:
         88:03:05:66:77:d1:14:7e:50:ec:1d:2b:17:dc:81:5b:0b:c6:
         74:78:54:83:29:a6:94:f8:bb:fe:1b:66:36:93:eb:fd:72:7f:
         fb:4f:48:0a:62:b5:b3:ec:18:cc:af:ad:34:f1:bf:be:8f:04:
         6d:17:04:95:f1:8f:96:5d:4a:ca:eb:6d:dd:6f:44:e6:e1:04:
         63:85:73:d5:2b:6e:2c:48:38:c0:8e:7f:c5:af:41:bf:5f:1c:
         22:48:78:67:3b:30:55:8c:ef:23:c3:1f:de:70:69:96:d8:f8:
         af:9a:48:af:9c:3d:be:7b:5c:2c:c3:3a:5c:f0:e7:36:28:d8:
         df:1b:a0:fb:51:1d:ce:27:0b:67:70:a0:a9:e4:58:e2:fe:70:
         18:e1:e8:3e:23:54:bc:fc:99:66:21:49:9b:ef:6b:76:b9:a3:
         e4:06:10:36:7c:a9:e4:72:e5:5f:b8:4e:a2:eb:c2:4e:8c:d5:
         4f:5a:4f:6c:77:d2:bc:95:43:2a:65:26:98:c4:00:99:8b:66:
         b4:dc:b5:03:ba:43:1a:82:e8:d3:5f:24:33:9b:24:a9:fb:38:
         70:4f:84:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----