Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/4ea6e9-7a4e-40c8-a816-9a4d88545029/1/Zj4tKnIU0qd-Lp_Oyy1kd_mgiHE.mft
File:                     Zj4tKnIU0qd-Lp_Oyy1kd_mgiHE.mft (raw, json)
Hash identifier:          phhRSQ66Sc7hflOk0gCIhZcNgClEPXSr7XcUz9ysheg=
Subject key identifier:   28:D1:D8:A2:0B:D8:D4:93:95:FE:BA:67:C9:89:AE:D2:D0:04:EA:13
Authority key identifier: 66:3E:2D:2A:72:14:D2:A7:7E:2E:9F:CE:CB:2D:64:77:F9:A0:88:71
Certificate issuer:       /CN=663e2d2a7214d2a77e2e9fcecb2d6477f9a08871
Certificate serial:       018F8749872EC3DD76247BD4F70ABD1A189F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zj4tKnIU0qd-Lp_Oyy1kd_mgiHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/4ea6e9-7a4e-40c8-a816-9a4d88545029/1/Zj4tKnIU0qd-Lp_Oyy1kd_mgiHE.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:01:33 +0000
Manifest this update:     Fri 17 May 2024 16:01:33 +0000
Manifest next update:     Sat 18 May 2024 16:01:33 +0000
Files and hashes:         1: Zj4tKnIU0qd-Lp_Oyy1kd_mgiHE.crl (hash: Xkgq0RbZru0sZ9gf0iBdPYGlLp+jeK8Y0dnRcInznjM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/4ea6e9-7a4e-40c8-a816-9a4d88545029/1/Zj4tKnIU0qd-Lp_Oyy1kd_mgiHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/4ea6e9-7a4e-40c8-a816-9a4d88545029/1/Zj4tKnIU0qd-Lp_Oyy1kd_mgiHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zj4tKnIU0qd-Lp_Oyy1kd_mgiHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:87:2e:c3:dd:76:24:7b:d4:f7:0a:bd:1a:18:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=663e2d2a7214d2a77e2e9fcecb2d6477f9a08871
        Validity
            Not Before: May 17 16:01:33 2024 GMT
            Not After : May 18 16:01:33 2024 GMT
        Subject: CN=28d1d8a20bd8d49395feba67c989aed2d004ea13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:30:b0:3f:e4:46:a5:eb:52:ac:95:40:ab:cb:
                    a0:c1:d7:02:51:01:70:d6:95:7c:c1:ce:95:96:ce:
                    be:be:b1:3f:18:b9:54:63:86:9d:c5:62:ba:54:6c:
                    3a:2a:0e:c4:c7:5c:a0:4d:ba:2b:2d:55:74:1f:e3:
                    65:99:ca:c0:31:fe:23:7a:fd:13:8f:d3:12:84:63:
                    1f:3a:62:b6:1a:4e:94:1c:6f:2c:c2:65:43:38:9b:
                    cc:13:80:37:75:5e:91:d8:cd:d3:83:ed:f5:06:12:
                    62:b2:27:49:0a:70:8c:ab:42:73:45:3a:d8:27:b5:
                    97:3a:b0:79:c4:3e:83:e1:9b:c3:79:e9:62:b9:9f:
                    84:dd:88:5d:91:3c:e6:17:86:c2:c6:73:d9:05:a7:
                    d4:5e:44:cb:c7:03:80:67:b1:8e:76:fa:0a:26:8c:
                    e9:b6:7f:48:45:f5:0b:cf:2a:3a:57:1f:59:d5:7f:
                    a7:1a:60:d6:3b:0a:70:dc:fc:5e:d8:10:1e:c6:84:
                    41:2d:d3:cd:d4:31:e5:54:01:a7:d6:dc:7d:03:4d:
                    06:97:d0:ca:93:6c:65:44:bb:d8:fc:12:25:52:9d:
                    b3:3b:fa:d8:ae:f5:52:0c:c9:54:1c:ea:cc:f0:f5:
                    68:40:6c:9b:58:8b:dc:5a:e6:72:fc:ea:31:48:61:
                    ed:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D1:D8:A2:0B:D8:D4:93:95:FE:BA:67:C9:89:AE:D2:D0:04:EA:13
            X509v3 Authority Key Identifier:
                keyid:66:3E:2D:2A:72:14:D2:A7:7E:2E:9F:CE:CB:2D:64:77:F9:A0:88:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zj4tKnIU0qd-Lp_Oyy1kd_mgiHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4ea6e9-7a4e-40c8-a816-9a4d88545029/1/Zj4tKnIU0qd-Lp_Oyy1kd_mgiHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4ea6e9-7a4e-40c8-a816-9a4d88545029/1/Zj4tKnIU0qd-Lp_Oyy1kd_mgiHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d5:fd:46:c5:9c:57:e3:f4:1f:df:92:e2:e8:ff:21:03:e3:
         4c:31:67:74:7f:d3:6e:d3:58:d4:3e:dc:93:f2:d0:59:ac:19:
         83:b7:b0:eb:78:08:6d:02:b1:08:c9:c9:4c:e2:48:49:bf:61:
         94:47:cf:7c:e6:9c:d4:6b:d9:02:ad:84:b5:85:a6:d5:6f:f8:
         ac:da:bc:29:60:46:98:95:c5:73:97:a6:72:91:4f:00:b4:5c:
         0f:3e:8b:1f:f2:e1:a5:f6:9b:4e:cf:bb:20:96:fa:8f:1b:8c:
         62:81:84:a4:b9:c0:0b:a4:f7:17:9c:cd:09:92:71:87:ee:e6:
         a6:d5:b0:86:e8:da:6f:18:fc:27:1e:69:91:e8:52:ca:ce:89:
         f1:20:f6:6a:54:ae:6d:ce:dc:84:80:e9:a4:bf:07:f8:a2:e0:
         83:f7:25:73:e4:e7:8b:a5:fe:4b:84:e6:41:e3:42:65:44:d9:
         f5:5c:46:35:17:0c:ca:2c:43:9f:b0:e3:58:8d:c2:d8:ee:a1:
         5d:85:29:b1:de:c9:73:9a:b4:14:14:9f:f6:a1:1c:b3:c5:5b:
         bb:2b:2b:d0:6f:f0:ec:39:89:36:cc:ab:f2:37:1c:f9:4f:23:
         2a:95:cb:f1:28:a8:bf:c4:11:4a:96:14:9e:cc:ec:4e:ff:ad:
         1d:22:d7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----