Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
File:                     uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft (raw, json)
Hash identifier:          yoa1eRyOlnrxIw3j5f0bLM387uVMsAdwjVPMA0DLcAk=
Subject key identifier:   F8:02:AF:28:1D:D5:1B:17:C3:97:25:C8:91:C2:B1:C2:20:F5:E4:9A
Authority key identifier: B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC
Certificate issuer:       /CN=b84b63058658a59ecbbf44395bf16f780dc929cc
Certificate serial:       018F87B619AF1519CAD6623B1901425789C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 18:00:09 +0000
Manifest this update:     Fri 17 May 2024 18:00:09 +0000
Manifest next update:     Sat 18 May 2024 18:00:09 +0000
Files and hashes:         1: uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl (hash: XrPHJ9r4wiAIevXlT73Ls5t+w6BWdH27Ib/RFiE4OR4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:19:af:15:19:ca:d6:62:3b:19:01:42:57:89:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84b63058658a59ecbbf44395bf16f780dc929cc
        Validity
            Not Before: May 17 18:00:09 2024 GMT
            Not After : May 18 18:00:09 2024 GMT
        Subject: CN=f802af281dd51b17c39725c891c2b1c220f5e49a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0f:9d:59:66:86:6f:e6:79:65:39:6e:be:34:
                    33:44:ba:b9:b9:a6:40:00:f6:f4:26:b2:f5:5e:a5:
                    62:cc:97:55:99:68:f4:1c:f4:9c:fb:03:11:bb:58:
                    98:b8:ba:72:16:77:cc:a8:44:fc:16:66:b7:ac:5b:
                    d6:1d:c7:e6:19:da:65:9c:c6:73:4b:5b:c4:a7:90:
                    b9:12:0c:76:f9:72:40:b8:89:d1:c8:e3:51:e8:a0:
                    3d:65:e3:c2:a2:ac:6f:35:25:3d:11:0b:71:34:70:
                    14:4d:d3:ac:9a:61:33:68:13:b8:7d:d6:6b:e8:d8:
                    72:e5:bf:89:90:1c:12:3a:f7:d6:d5:35:3e:1d:47:
                    d9:28:7d:9b:7d:c6:af:e8:8b:4a:4e:e2:ee:29:92:
                    23:ed:f7:5c:b9:1d:eb:7c:d7:63:a4:57:1a:29:71:
                    a6:ec:6d:ec:9b:15:da:cb:f6:0f:2a:f1:88:a1:4a:
                    95:4e:3f:7c:00:7b:eb:15:16:fe:a1:28:30:4a:a5:
                    15:db:36:2e:f3:e6:0e:e0:5c:3e:31:72:00:94:a1:
                    bc:75:ac:4d:21:4e:6c:b1:bf:7e:7d:34:a4:2d:1e:
                    28:64:f4:b1:fa:1a:46:3f:d5:5c:25:da:2d:79:e1:
                    60:42:d1:d1:44:dd:49:ac:fe:8d:32:36:42:05:24:
                    0b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:02:AF:28:1D:D5:1B:17:C3:97:25:C8:91:C2:B1:C2:20:F5:E4:9A
            X509v3 Authority Key Identifier:
                keyid:B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:1a:1f:82:84:54:d8:87:44:ba:7e:21:6c:03:f1:39:c4:49:
         1c:bb:e3:21:15:08:68:7a:49:12:08:7e:a0:53:6d:24:ea:e0:
         98:61:8e:11:b9:76:9b:86:0d:02:5a:11:70:92:df:a0:2c:b5:
         49:44:e8:2d:f8:7b:3d:fc:c5:31:0b:3c:53:f7:83:32:30:ac:
         61:a1:04:e5:99:47:ca:b5:8a:3a:b2:b1:c7:63:cb:b1:b2:29:
         17:40:8a:e0:5a:6e:79:8b:b4:8d:85:13:5a:b7:32:d3:00:de:
         d7:4f:4f:6f:8c:f9:de:b3:58:f6:89:b4:63:01:ba:bd:20:7b:
         02:a8:ca:01:9c:cd:81:b5:28:c2:2b:4d:eb:0e:46:27:8e:06:
         28:ff:b4:4e:c7:fa:3e:11:d3:9e:38:3f:25:a4:08:ec:e6:e4:
         83:24:2b:7c:f3:e7:6d:d7:12:8d:e0:dc:e4:4a:4c:98:95:04:
         2c:44:26:e5:5b:8d:5b:4c:f9:21:22:fd:a4:a9:2c:b1:06:22:
         29:23:cc:d9:c5:df:27:3a:40:48:e3:17:f1:96:68:bf:ce:ee:
         3e:14:3b:59:b0:fd:f2:e2:64:0d:31:7e:11:3d:ef:c1:30:c8:
         91:a4:f7:da:9f:f5:6b:c8:56:32:88:7b:a8:2c:85:fb:70:73:
         5a:fc:af:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----