Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
File:                     JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft (raw, json)
Hash identifier:          zKdKNHwRKEhGP2Pubx9esCYx3PsHuHirz6pExTand+8=
Subject key identifier:   D8:3A:EF:85:4C:9F:88:CC:C2:5E:66:C4:52:CF:04:E5:78:8E:AC:4D
Authority key identifier: 25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E
Certificate issuer:       /CN=254351a867b9dae9db6764306bd732059f6d999e
Certificate serial:       018F889235EF85FA19BE71F15EA38833C147
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
Manifest number:          04A5
Signing time:             Fri 17 May 2024 22:00:34 +0000
Manifest this update:     Fri 17 May 2024 22:00:34 +0000
Manifest next update:     Sat 18 May 2024 22:00:34 +0000
Files and hashes:         1: JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl (hash: zwB9F2j3zMKjs0US48WhmFrE6aTnvcBmkNaME7gDfto=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:35:ef:85:fa:19:be:71:f1:5e:a3:88:33:c1:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=254351a867b9dae9db6764306bd732059f6d999e
        Validity
            Not Before: May 17 22:00:34 2024 GMT
            Not After : May 18 22:00:34 2024 GMT
        Subject: CN=d83aef854c9f88ccc25e66c452cf04e5788eac4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:24:8d:47:6c:49:77:45:fa:b2:f2:03:f9:
                    d3:87:53:6a:41:ca:0e:ae:f2:fb:b8:21:68:0c:86:
                    f5:e6:df:17:0f:7c:54:db:5b:4e:80:c4:8a:d8:6e:
                    2f:33:b9:1a:10:30:88:98:42:d7:10:88:0e:12:af:
                    ef:4f:c0:8e:03:b3:6e:88:6d:e3:87:38:aa:5e:b9:
                    2c:a6:8e:9d:56:3a:ee:fd:7f:b7:b8:a2:c8:60:01:
                    43:55:70:ce:27:53:69:c1:48:b3:2d:f6:55:5c:63:
                    5d:22:8e:92:0c:86:44:40:07:c5:82:d9:c0:9d:69:
                    87:62:2e:10:af:32:78:09:e7:e5:e9:10:92:59:af:
                    d4:9c:d7:a9:5b:9f:ea:1a:f8:08:e9:db:16:91:c1:
                    9a:53:61:56:a3:e5:12:e0:0f:93:13:02:73:65:83:
                    54:19:51:7e:2f:2c:31:b7:9b:1f:4b:7c:4d:12:a9:
                    74:e8:49:81:54:ed:fa:85:e2:27:da:3b:13:82:3d:
                    05:fb:6f:1b:d4:aa:26:26:4e:bf:9d:af:e3:d8:10:
                    0d:54:81:cf:63:db:47:9e:25:3f:98:0c:49:a7:1c:
                    c0:c4:4d:02:a3:1c:eb:63:a7:3a:0a:bd:a3:87:41:
                    4a:10:ec:1b:04:09:fa:b2:94:2c:cd:01:b7:e4:ea:
                    ee:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3A:EF:85:4C:9F:88:CC:C2:5E:66:C4:52:CF:04:E5:78:8E:AC:4D
            X509v3 Authority Key Identifier:
                keyid:25:43:51:A8:67:B9:DA:E9:DB:67:64:30:6B:D7:32:05:9F:6D:99:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c76121-76d4-4a98-91e8-205ca6688564/1/JUNRqGe52unbZ2Qwa9cyBZ9tmZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:38:b0:6d:80:00:2b:cf:f7:c5:ff:ac:61:56:f4:fa:cc:08:
         51:a9:de:ee:ce:e3:76:8b:24:96:f7:7c:f3:45:ee:6a:a7:cf:
         a4:df:07:a6:80:5d:0b:3d:74:03:75:ec:56:92:8c:0e:e6:a3:
         15:91:fa:d3:78:9e:a6:fc:63:6d:f2:ed:3f:c8:b7:6c:13:5d:
         da:0c:8d:ac:2f:c2:60:38:0f:f9:c7:17:7b:de:61:55:4f:b1:
         9d:37:92:09:ac:f0:47:f3:05:c9:83:42:20:19:0e:ec:ba:19:
         6c:ed:cf:60:9f:77:fa:0b:40:0a:9a:a5:3c:ba:65:f5:2c:a5:
         b0:1d:07:cb:00:ca:a4:6b:c6:bc:bf:f2:d2:c4:57:c7:72:21:
         38:07:fa:a5:e8:e9:9d:ca:26:58:6d:ec:56:51:42:4c:a0:19:
         9f:2b:6f:03:ae:99:56:62:4d:1a:25:60:1e:1a:6c:1f:d6:4a:
         58:a9:09:a8:db:62:ef:14:c7:6a:61:81:70:2a:da:cf:a5:d7:
         54:5b:fe:e1:41:06:33:08:e7:b4:9d:99:3a:a3:43:4d:59:9a:
         2c:31:e4:a4:86:f6:e5:8d:f2:cf:b8:1b:10:13:33:75:2c:81:
         8d:1d:b8:a9:14:c2:5b:0d:36:ea:85:e6:09:57:4e:08:8a:4c:
         3f:66:b7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----