Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
File:                     gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft (raw, json)
Hash identifier:          8PI3KwNS7TiHe7X2xYGuCk+ZCnqL3+orqesu+6D+VLc=
Subject key identifier:   81:6D:59:66:7D:FA:DE:94:A8:70:80:69:C3:39:84:1B:63:C6:E4:49
Authority key identifier: 82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98
Certificate issuer:       /CN=8260c94351066ec06debfab2bca9dfaed407e698
Certificate serial:       018F87ED9891DB65BCB76F5295CF298C61CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
Manifest number:          0226
Signing time:             Fri 17 May 2024 19:00:46 +0000
Manifest this update:     Fri 17 May 2024 19:00:46 +0000
Manifest next update:     Sat 18 May 2024 19:00:46 +0000
Files and hashes:         1: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl (hash: K7xEPr3Tia8xgzJac/R84J/DKgTfE7Iy9TNusVRVuwY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:98:91:db:65:bc:b7:6f:52:95:cf:29:8c:61:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8260c94351066ec06debfab2bca9dfaed407e698
        Validity
            Not Before: May 17 19:00:46 2024 GMT
            Not After : May 18 19:00:46 2024 GMT
        Subject: CN=816d59667dfade94a8708069c339841b63c6e449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:af:69:f2:67:83:7c:fa:5a:63:e7:e7:ce:
                    5a:fe:26:ea:ae:51:7e:f6:80:87:94:94:f1:f3:7a:
                    05:41:11:25:bb:bf:a3:8b:81:4a:4c:70:32:9d:f6:
                    93:32:e1:ac:fc:f5:96:38:9c:36:ab:63:a5:5c:c4:
                    06:b5:59:de:64:13:d2:cd:7f:46:01:7c:95:a7:bf:
                    86:10:00:33:54:9f:3c:f8:65:7b:96:19:65:61:bb:
                    56:49:93:85:33:65:4d:93:05:03:02:a3:8a:f5:dd:
                    18:84:3c:4a:a1:56:6c:dc:9e:52:7b:8b:74:10:81:
                    19:13:1a:e0:e5:ab:e9:c7:b6:88:6c:02:83:58:ef:
                    88:d6:64:2f:3a:b7:d7:f9:12:1d:6e:84:bd:e7:4e:
                    54:41:db:61:66:a5:a0:32:33:2e:2f:e1:e0:c4:80:
                    ec:ca:b7:4a:3b:2f:15:1a:79:db:4a:4e:b5:4d:a3:
                    ba:72:59:3f:80:76:31:64:7e:69:84:6e:22:48:99:
                    c3:ea:35:f3:ce:b2:3a:4c:f5:9e:21:1a:fe:d0:42:
                    cc:f8:10:5d:7f:a0:f0:69:9b:ea:0a:b3:5b:59:55:
                    6c:17:29:75:29:81:f9:74:0e:e9:84:49:33:d8:94:
                    42:e9:0e:6b:ba:a7:bb:1f:d0:b4:fd:de:de:59:59:
                    f2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6D:59:66:7D:FA:DE:94:A8:70:80:69:C3:39:84:1B:63:C6:E4:49
            X509v3 Authority Key Identifier:
                keyid:82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:12:b5:81:01:85:97:f5:cd:d1:28:89:d8:67:f1:cf:53:c9:
         3a:22:fd:d7:10:a6:dd:16:27:79:aa:84:1a:b7:f6:fe:bd:55:
         6e:6e:ab:89:e4:d4:33:52:dc:5b:96:80:30:1d:14:7b:10:19:
         52:fc:19:85:68:5c:94:57:1d:b1:78:8e:b3:f0:95:52:cc:f0:
         08:0b:cd:38:96:c4:44:88:8e:12:9c:4a:da:56:8e:d2:a6:1b:
         fa:b2:aa:2a:51:88:a6:08:c2:95:ce:7c:81:cc:38:a6:40:33:
         79:31:63:44:a8:27:54:7f:15:c0:f9:21:9a:0e:8f:83:ed:93:
         96:3a:50:a3:e7:c3:5a:70:f6:7a:a8:9f:f9:d9:07:ee:46:b9:
         90:24:d5:a4:bf:eb:05:9b:10:9b:9e:e9:19:bf:0e:d9:79:88:
         42:8a:c8:77:fe:41:d4:11:6c:72:33:e4:e2:00:7d:9f:e6:7f:
         65:04:73:d4:22:1a:ce:94:2f:f6:f1:4d:d2:e7:4c:14:37:f6:
         28:81:e7:43:3d:17:16:bb:c3:97:7a:4c:69:8c:23:0b:8e:03:
         03:5a:7b:6e:c3:04:c4:01:c5:e0:84:c1:77:bd:28:42:0b:d3:
         ec:ea:cd:6d:a8:f4:e0:43:1e:c1:74:ea:36:7c:e1:5c:84:74:
         d8:dd:2c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----