Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a11ee6-8e6c-4350-a6ed-afe37f83c333/1/fuLzqD3DWwNrO_QBTTMNkE8GfoI.mft
File:                     fuLzqD3DWwNrO_QBTTMNkE8GfoI.mft (raw, json)
Hash identifier:          x1Sbx1/pZlJzacev8Jck1GRHLmknJo18GZu3uYxONqs=
Subject key identifier:   CD:9E:65:95:2C:E5:07:EB:7E:E8:90:3D:8D:E9:0C:8E:A1:5D:E0:60
Authority key identifier: 7E:E2:F3:A8:3D:C3:5B:03:6B:3B:F4:01:4D:33:0D:90:4F:06:7E:82
Certificate issuer:       /CN=7ee2f3a83dc35b036b3bf4014d330d904f067e82
Certificate serial:       018F93834BE7D1602289A5AAE975B294FA9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuLzqD3DWwNrO_QBTTMNkE8GfoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/a11ee6-8e6c-4350-a6ed-afe37f83c333/1/fuLzqD3DWwNrO_QBTTMNkE8GfoI.mft
Manifest number:          92
Signing time:             Mon 20 May 2024 01:00:06 +0000
Manifest this update:     Mon 20 May 2024 01:00:06 +0000
Manifest next update:     Tue 21 May 2024 01:00:06 +0000
Files and hashes:         1: fuLzqD3DWwNrO_QBTTMNkE8GfoI.crl (hash: gjQOBtuz9UGFjyDWMFrut5z9c1oz4Usets5QjBHziGY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/a11ee6-8e6c-4350-a6ed-afe37f83c333/1/fuLzqD3DWwNrO_QBTTMNkE8GfoI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/a11ee6-8e6c-4350-a6ed-afe37f83c333/1/fuLzqD3DWwNrO_QBTTMNkE8GfoI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fuLzqD3DWwNrO_QBTTMNkE8GfoI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:93:83:4b:e7:d1:60:22:89:a5:aa:e9:75:b2:94:fa:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee2f3a83dc35b036b3bf4014d330d904f067e82
        Validity
            Not Before: May 20 01:00:06 2024 GMT
            Not After : May 21 01:00:06 2024 GMT
        Subject: CN=cd9e65952ce507eb7ee8903d8de90c8ea15de060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:42:23:7b:5d:33:95:66:d7:df:0d:62:f6:75:
                    d6:b7:f4:33:b6:3d:51:89:b4:ef:d4:85:ae:19:54:
                    c7:86:d9:52:10:54:5f:fa:e0:0a:a9:e9:c7:3e:01:
                    25:30:ae:ec:43:fd:40:5c:2a:ea:0f:24:b1:81:05:
                    10:64:72:90:e9:dd:9f:eb:76:d0:5c:b0:c0:f7:7a:
                    9d:79:cd:78:66:c9:c3:e8:78:d6:f8:0a:66:2a:a6:
                    98:06:7a:a6:f2:6b:29:cf:69:22:a7:37:a7:50:0c:
                    9d:fe:be:ec:4c:36:58:65:a2:4d:52:3f:95:15:7a:
                    ad:55:e7:9d:d4:6a:09:5a:c8:f3:5e:d9:39:58:24:
                    3f:0a:fb:e9:18:39:6f:49:90:40:53:05:c0:49:45:
                    51:35:6b:05:fe:44:ee:cc:47:23:a3:00:76:bf:96:
                    ba:9e:a3:0e:d6:06:0a:44:51:65:fc:bb:49:96:23:
                    a2:a1:8c:19:69:ae:6c:b1:2a:c8:f3:9e:4f:43:80:
                    c8:b3:10:f2:f4:66:c6:9c:cc:66:54:88:46:8b:00:
                    1d:87:a6:9a:c8:37:83:c6:e3:1b:e1:0d:9b:32:11:
                    bc:df:66:b8:bb:3d:3d:b9:5a:36:ec:e4:e0:95:f6:
                    46:b1:0a:95:31:db:41:ca:a2:f6:1c:a5:c4:e8:73:
                    a1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9E:65:95:2C:E5:07:EB:7E:E8:90:3D:8D:E9:0C:8E:A1:5D:E0:60
            X509v3 Authority Key Identifier:
                keyid:7E:E2:F3:A8:3D:C3:5B:03:6B:3B:F4:01:4D:33:0D:90:4F:06:7E:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuLzqD3DWwNrO_QBTTMNkE8GfoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a11ee6-8e6c-4350-a6ed-afe37f83c333/1/fuLzqD3DWwNrO_QBTTMNkE8GfoI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a11ee6-8e6c-4350-a6ed-afe37f83c333/1/fuLzqD3DWwNrO_QBTTMNkE8GfoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c7:73:f9:34:8b:ff:17:10:3a:4b:3c:62:13:14:6b:e2:b6:
         b4:2a:66:ea:53:28:59:47:ab:59:75:29:2c:6e:21:1c:44:e7:
         ec:f3:d2:a9:9e:c7:53:1e:0d:28:39:cd:6a:d2:f7:75:86:0b:
         06:83:e9:6e:1a:84:b1:d7:9e:b5:20:c4:76:0b:af:ea:f0:be:
         ef:dc:3b:70:43:86:2d:53:87:55:1d:57:b4:46:fb:fd:a8:94:
         f7:83:20:07:a5:32:47:98:cd:1f:e6:b2:e0:af:d1:07:81:c3:
         cf:a8:9c:77:ac:07:73:34:65:a9:fa:76:ad:8a:10:5f:c2:4c:
         49:14:2c:66:29:5f:d3:f8:90:b2:03:03:e6:e2:98:3e:0a:09:
         2c:34:17:4a:a4:5b:93:1e:e7:02:28:d0:16:b6:ba:9b:8b:e8:
         d9:5d:b8:1f:f2:f8:aa:a8:cc:43:bf:a4:94:f8:36:49:f2:7c:
         ba:ac:43:27:40:c0:a7:75:28:82:09:be:bc:a8:5b:4d:90:21:
         c7:81:30:fe:9b:77:4a:c7:af:df:01:51:c7:0b:ec:fc:5b:0a:
         5d:3b:8b:35:91:f3:54:f9:44:57:65:c1:f6:d9:fe:0e:6b:8c:
         4c:94:3d:1c:76:70:4b:d2:4d:1c:d2:56:31:39:b0:a6:84:0f:
         ef:92:95:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----