Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.mft
File:                     UgX1htgmO7BtZAUPj0hMFOgDxLI.mft (raw, json)
Hash identifier:          zrpTveCooYlzo09U9U7P6s6o0RRXyKfmVmDxT3YmE8s=
Subject key identifier:   44:26:DC:D0:54:1A:22:49:62:79:62:B7:B8:0B:07:75:77:BC:F3:39
Authority key identifier: 52:05:F5:86:D8:26:3B:B0:6D:64:05:0F:8F:48:4C:14:E8:03:C4:B2
Certificate issuer:       /CN=5205f586d8263bb06d64050f8f484c14e803c4b2
Certificate serial:       018F8748AAF918578C7E7BB083200E9B8E34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UgX1htgmO7BtZAUPj0hMFOgDxLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.mft
Manifest number:          07B6
Signing time:             Fri 17 May 2024 16:00:37 +0000
Manifest this update:     Fri 17 May 2024 16:00:37 +0000
Manifest next update:     Sat 18 May 2024 16:00:37 +0000
Files and hashes:         1: UgX1htgmO7BtZAUPj0hMFOgDxLI.crl (hash: jG80YbIArHF2nJOCjoUdR8z9lm2aOpJL4hmyW+dgIIE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UgX1htgmO7BtZAUPj0hMFOgDxLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:aa:f9:18:57:8c:7e:7b:b0:83:20:0e:9b:8e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5205f586d8263bb06d64050f8f484c14e803c4b2
        Validity
            Not Before: May 17 16:00:37 2024 GMT
            Not After : May 18 16:00:37 2024 GMT
        Subject: CN=4426dcd0541a2249627962b7b80b077577bcf339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:52:d8:1c:57:ab:d9:4f:ac:97:82:6d:3b:95:
                    86:eb:e4:2b:fc:1d:6d:5a:e0:55:e5:ab:0d:17:05:
                    9b:f2:da:45:45:d8:17:8c:68:6f:0c:6f:88:fe:a6:
                    f3:a1:b7:2b:66:2b:ab:e9:28:17:8c:12:61:73:17:
                    4d:06:8c:ef:f6:fc:94:64:23:75:17:d1:6e:5c:56:
                    bd:cb:6d:34:86:b8:3f:44:71:fc:1f:9b:6b:43:df:
                    27:25:01:17:af:07:18:39:d2:91:61:0c:c0:07:c0:
                    68:d3:00:04:e9:31:15:1b:47:d2:c5:ff:47:46:00:
                    e6:e3:23:6c:8f:a7:8b:4d:05:f5:b5:e2:37:6b:39:
                    3a:58:30:e9:a8:c3:9e:fe:3e:94:99:80:dc:d9:d4:
                    fe:c9:ef:b2:75:54:bf:5e:64:c3:db:0b:fd:ad:4a:
                    26:84:dd:cc:29:31:91:cf:53:52:3b:41:08:d3:ed:
                    53:a6:40:11:25:95:52:d0:64:0b:32:16:5f:ce:c9:
                    6a:76:7c:a9:8a:cf:2f:d7:59:1a:63:a4:bf:91:19:
                    c5:c4:df:80:5d:9e:92:20:51:8c:a0:f3:fe:06:b0:
                    f2:b6:eb:af:60:68:e5:c6:73:2b:f9:9e:b7:55:20:
                    4a:13:b5:f1:6e:04:1c:ce:62:51:b7:73:6e:0e:d0:
                    b9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:26:DC:D0:54:1A:22:49:62:79:62:B7:B8:0B:07:75:77:BC:F3:39
            X509v3 Authority Key Identifier:
                keyid:52:05:F5:86:D8:26:3B:B0:6D:64:05:0F:8F:48:4C:14:E8:03:C4:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgX1htgmO7BtZAUPj0hMFOgDxLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:86:bd:d4:bc:0f:21:1e:97:8e:fb:7b:36:c4:49:51:d2:c0:
         5b:b7:d8:96:b8:8b:f1:0e:ad:8d:ac:7f:0f:6a:59:2a:22:12:
         f0:7e:61:27:9a:ca:79:fc:73:0d:c8:b7:80:18:98:c3:b1:38:
         ec:58:d1:9a:7b:49:82:15:08:41:91:15:f6:c4:a0:66:82:d3:
         d0:ec:c9:bc:89:25:3b:b4:4a:cd:a2:1a:01:71:3e:80:a6:c1:
         8a:37:32:b4:f9:a7:de:1e:b2:71:f2:d3:12:69:7c:94:08:ad:
         d0:8a:8e:49:96:f4:93:d0:92:ec:70:1e:26:40:6b:3b:28:01:
         16:2f:f9:fe:56:d3:99:0c:96:5c:0c:8c:f1:de:64:d8:85:a8:
         02:a5:36:44:a2:42:68:de:19:61:3a:90:75:c1:e2:59:74:34:
         04:4a:6c:f7:6e:ea:7d:1a:dc:f6:6f:ba:bf:10:d3:d1:1a:b7:
         5c:9f:bb:a8:2a:de:0d:f1:0f:f6:84:bd:fe:3e:09:90:1d:84:
         a6:ee:83:4e:0f:e7:ae:8f:17:7c:0f:04:bc:62:38:0d:53:83:
         c2:c1:51:fd:e8:b2:e6:7e:a8:1d:f5:eb:02:36:e2:2d:09:71:
         af:f4:4f:7d:be:90:51:8d:16:71:55:5d:61:b3:14:d5:65:45:
         7b:b1:6a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----