Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
File:                     UKiPmoNBAa34dwN6UcgdEzqpRuw.mft (raw, json)
Hash identifier:          ajCSVnXXxV9y9R2zV+/2on7QOTi4t7TDVD1wECeXqdE=
Subject key identifier:   90:98:9D:02:84:82:BF:0B:A5:6A:9C:EA:FF:CD:DD:A8:8F:C3:8E:C5
Authority key identifier: 50:A8:8F:9A:83:41:01:AD:F8:77:03:7A:51:C8:1D:13:3A:A9:46:EC
Certificate issuer:       /CN=50a88f9a834101adf877037a51c81d133aa946ec
Certificate serial:       018F88927234D2F4C4E980940C2E6B8C75BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
Manifest number:          0903
Signing time:             Fri 17 May 2024 22:00:49 +0000
Manifest this update:     Fri 17 May 2024 22:00:49 +0000
Manifest next update:     Sat 18 May 2024 22:00:49 +0000
Files and hashes:         1: UKiPmoNBAa34dwN6UcgdEzqpRuw.crl (hash: 9BG6QNHm+PvyyoGhPviiw2UENK/sBB8XVggdQNxoTs8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:72:34:d2:f4:c4:e9:80:94:0c:2e:6b:8c:75:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50a88f9a834101adf877037a51c81d133aa946ec
        Validity
            Not Before: May 17 22:00:49 2024 GMT
            Not After : May 18 22:00:49 2024 GMT
        Subject: CN=90989d028482bf0ba56a9ceaffcddda88fc38ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2c:ed:99:fb:c7:be:a0:fc:c4:f7:f6:98:45:
                    7d:a3:78:73:44:9e:4a:fc:53:a8:72:cb:5a:c5:34:
                    30:88:99:6e:fa:a5:c1:55:ad:41:47:16:a0:35:2e:
                    b7:f2:f5:c3:40:e5:92:16:36:0d:3b:94:3b:9a:b0:
                    bc:66:0b:6a:e8:6c:3f:93:2c:b5:a5:ca:7d:a0:35:
                    43:34:ba:be:70:b0:86:6e:39:2f:c5:7a:f1:f5:db:
                    e6:1e:53:03:b8:cf:6b:21:97:ed:10:7f:99:ef:34:
                    15:0d:98:93:36:4d:ea:b9:2e:1c:a3:e3:e5:f4:c7:
                    bd:be:8a:2b:67:7f:d3:de:6d:30:5c:3a:ba:34:e5:
                    14:77:87:f8:49:a6:13:a7:bd:dc:a6:54:ec:5e:34:
                    50:79:3e:98:97:95:6f:f8:98:60:ed:53:4b:e6:fe:
                    58:58:16:5e:9c:57:3d:56:0d:05:cf:4c:d9:a1:32:
                    a3:70:53:db:a6:11:3e:d2:74:88:b8:6c:a9:1e:fb:
                    7f:b7:b2:69:dd:0f:04:1f:ca:19:52:c5:aa:ee:02:
                    5f:7f:64:57:e9:d4:ff:63:59:d8:97:8e:01:8f:74:
                    d3:1a:20:36:be:10:d4:e0:83:7b:71:8e:23:f3:3d:
                    b9:4f:30:75:d1:94:6e:86:33:d2:6e:4d:fb:c2:62:
                    a6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:98:9D:02:84:82:BF:0B:A5:6A:9C:EA:FF:CD:DD:A8:8F:C3:8E:C5
            X509v3 Authority Key Identifier:
                keyid:50:A8:8F:9A:83:41:01:AD:F8:77:03:7A:51:C8:1D:13:3A:A9:46:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:56:85:1f:fa:c0:d8:3d:32:63:6d:df:5e:a3:47:36:db:85:
         e7:56:81:f5:2a:e8:89:6b:db:1f:ce:9a:c2:96:be:ed:52:61:
         64:9d:1d:a1:2d:63:db:fc:0a:c8:2b:80:39:26:68:51:6d:0f:
         51:ed:f1:83:74:c7:48:c3:e6:af:1e:99:8c:87:b9:cf:f9:65:
         54:1d:dd:c6:6a:fa:5a:fd:aa:7c:40:02:6f:b4:6d:ca:b5:06:
         e3:b0:e2:48:f6:da:85:2f:9d:3b:60:a9:1b:d1:2c:9e:ea:e8:
         9f:99:6c:f4:b7:20:aa:91:97:f9:18:65:7a:21:45:ba:70:8b:
         59:58:7d:59:1b:87:e6:2b:2f:3f:a1:04:ed:42:47:d9:11:6e:
         d2:d2:61:7d:d8:ea:b7:8c:17:af:ba:e0:70:5b:de:12:95:11:
         0c:ac:1b:ba:3e:96:6e:35:0e:d2:56:f6:51:c5:37:b0:c5:b6:
         16:a2:f6:6b:9a:cc:ff:5c:c9:0b:95:a6:45:97:fe:9c:e1:ee:
         18:d8:6f:71:49:3f:fc:aa:c5:51:7d:ac:6e:c9:86:78:5c:e5:
         63:ea:9f:7c:54:cc:7b:d9:43:8a:89:16:ad:b2:20:b6:7f:0c:
         05:23:92:a6:d0:29:5e:a8:2d:df:9e:f9:fb:b3:60:56:59:79:
         11:9d:ee:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----