Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
File:                     TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft (raw, json)
Hash identifier:          C76Nk3OSXms8JV23Lme4D++5L9KhTBLzw4MYx52scXc=
Subject key identifier:   7C:97:B4:B4:86:B7:A0:E8:4C:3C:BC:0D:C1:43:01:13:5B:72:2C:3C
Authority key identifier: 4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
Certificate issuer:       /CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Certificate serial:       018F882480F0013E22C72442B30E90F97AE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
Manifest number:          0E2B
Signing time:             Fri 17 May 2024 20:00:44 +0000
Manifest this update:     Fri 17 May 2024 20:00:44 +0000
Manifest next update:     Sat 18 May 2024 20:00:44 +0000
Files and hashes:         1: TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl (hash: RcKzMDFrO096VzwgaEvcr5ZbI4Lnc54cUapElZnupTI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:80:f0:01:3e:22:c7:24:42:b3:0e:90:f9:7a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c6af986b241d9d27ec724adfabf06d5d231793f
        Validity
            Not Before: May 17 20:00:44 2024 GMT
            Not After : May 18 20:00:44 2024 GMT
        Subject: CN=7c97b4b486b7a0e84c3cbc0dc14301135b722c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:da:de:55:5d:af:ca:14:62:63:a0:bc:e7:
                    6a:0c:c1:28:8b:2e:f6:f9:ed:20:43:ed:0c:57:53:
                    c4:3d:63:16:91:4c:c1:69:41:17:d4:27:03:a4:b4:
                    f2:72:be:a2:9d:13:59:6f:47:b2:fa:d4:1a:75:48:
                    0d:f2:64:88:5f:59:80:ae:12:d8:17:4d:de:87:fd:
                    fa:a2:88:0a:aa:39:92:74:64:b5:7c:92:f4:09:24:
                    b1:89:2f:2f:21:b3:91:94:5f:43:5f:e9:bd:75:bd:
                    5d:dc:33:71:f0:cf:21:77:7e:4e:91:8c:09:92:88:
                    71:64:60:bf:7d:fc:72:dc:f7:9a:45:ad:c6:39:d9:
                    6e:f5:0e:d8:3a:47:1a:eb:32:e6:94:80:e8:84:40:
                    bd:6d:bc:20:90:7d:23:55:bd:6a:2e:a9:bc:11:37:
                    7c:fa:00:a0:c2:d4:5a:59:37:eb:b9:3f:6c:32:cf:
                    03:f8:5d:ed:0b:b7:f8:e7:ad:bd:5d:a6:30:a9:bc:
                    c8:4c:de:60:6c:66:75:1a:ae:0d:7e:ac:aa:6e:0a:
                    96:68:48:4f:f7:65:92:15:23:04:8e:a7:26:4d:24:
                    8d:f6:c7:bc:b8:13:b1:5e:64:e4:6c:4e:78:71:2f:
                    da:a1:3b:93:d0:37:b8:1f:d7:5c:e6:fb:c2:52:96:
                    5d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:97:B4:B4:86:B7:A0:E8:4C:3C:BC:0D:C1:43:01:13:5B:72:2C:3C
            X509v3 Authority Key Identifier:
                keyid:4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:b1:44:78:b6:9d:79:b6:91:1a:74:4c:3b:1d:ce:54:66:f0:
         2f:91:96:df:4a:4f:b8:ef:93:b8:d1:49:23:1e:33:d3:87:b1:
         b2:8e:0d:ad:03:a8:c4:1d:7e:da:19:e4:4c:14:5d:7b:cc:ca:
         bb:85:3c:4c:82:7e:9d:60:ff:b2:12:4e:a8:0b:38:4f:26:64:
         7f:89:21:ae:bb:38:4b:a9:6b:f3:9e:b1:9d:35:08:9b:44:cd:
         50:41:45:04:07:07:20:da:0d:39:c4:f3:c7:eb:cb:1f:3e:18:
         77:32:71:69:bf:8d:f8:6e:af:f5:f2:39:76:2c:dc:0c:95:d8:
         9f:74:3e:3b:22:30:88:70:4b:7a:6f:95:00:07:f6:23:54:f6:
         6c:ce:11:7a:ff:79:2b:01:79:7d:f6:4c:de:a9:5b:29:50:5b:
         cd:e9:53:58:f1:8a:2c:04:8b:48:b7:05:7d:ac:53:5a:92:b6:
         a6:1f:11:ef:db:8e:07:73:85:c6:37:08:9a:cf:fe:4c:f9:62:
         df:c8:93:46:cd:40:cc:d9:0b:8a:b1:8e:87:8b:13:78:68:bf:
         a5:e0:85:78:66:2d:14:d2:87:98:8c:d5:e2:30:6b:cf:ff:07:
         d1:3a:f6:ee:36:09:34:ea:da:bf:0d:58:a0:b9:d3:31:bb:a8:
         47:31:d1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----