Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
File:                     _s4nFs6tjACFRiJL5LVocIaD_0s.mft (raw, json)
Hash identifier:          SBZmVgirzwIRwYzrfYCKn0g2kr+MCch/PZp6l95UC+k=
Subject key identifier:   06:31:EC:AE:A1:9B:CD:BE:8A:97:4D:8F:A4:52:72:4E:60:E8:93:38
Authority key identifier: FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B
Certificate issuer:       /CN=fece2716cead8c008546224be4b568708683ff4b
Certificate serial:       018F87ED9C496CD1C86781DD40D3174B47F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
Manifest number:          10D5
Signing time:             Fri 17 May 2024 19:00:47 +0000
Manifest this update:     Fri 17 May 2024 19:00:47 +0000
Manifest next update:     Sat 18 May 2024 19:00:47 +0000
Files and hashes:         1: _s4nFs6tjACFRiJL5LVocIaD_0s.crl (hash: BvnSfbYYJIGsp0BTkJgI9cZ63r9fG+Q9P2cS7g1o0w8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:9c:49:6c:d1:c8:67:81:dd:40:d3:17:4b:47:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fece2716cead8c008546224be4b568708683ff4b
        Validity
            Not Before: May 17 19:00:47 2024 GMT
            Not After : May 18 19:00:47 2024 GMT
        Subject: CN=0631ecaea19bcdbe8a974d8fa452724e60e89338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:02:33:ca:be:99:aa:89:f0:d4:ab:0d:2d:64:
                    3a:af:59:f6:3c:1b:d4:dc:25:04:22:a3:98:7a:1e:
                    b7:cb:76:a1:8f:63:39:09:ad:e3:0e:aa:13:70:c8:
                    dd:dc:f7:30:b6:34:1b:3d:71:b3:4c:49:ec:86:f6:
                    32:82:29:17:a6:34:de:96:c3:57:d6:0a:ea:8f:c1:
                    bd:7f:a5:e1:c5:62:97:6e:9a:04:13:7e:86:ff:f8:
                    8e:d4:f6:c1:62:fb:69:09:d8:cb:d6:f5:40:63:ed:
                    01:0a:60:6f:c3:77:dc:99:40:d9:c4:9c:db:1d:fc:
                    3f:e9:00:49:eb:10:22:61:ec:0c:28:d0:64:60:9e:
                    d5:f5:e6:05:dd:07:24:0c:00:eb:f7:f6:64:35:bb:
                    1a:06:d9:75:8f:ba:d6:d2:a0:a0:27:45:45:28:05:
                    9e:8e:5f:3f:05:4f:47:52:cc:a6:99:f8:81:de:00:
                    70:31:e8:fc:e4:1b:93:ab:f0:8d:ee:bb:12:c6:69:
                    d6:e1:d1:db:58:91:fe:a1:02:87:ad:ec:e4:b0:ad:
                    f1:5b:7c:1a:0f:bb:b8:58:f0:dd:87:f0:4a:a7:0c:
                    14:4c:66:14:5b:1f:55:5d:d4:30:6b:8d:73:12:9e:
                    96:33:8b:59:42:bd:5c:6d:e4:23:e0:1b:7c:e0:49:
                    c6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:31:EC:AE:A1:9B:CD:BE:8A:97:4D:8F:A4:52:72:4E:60:E8:93:38
            X509v3 Authority Key Identifier:
                keyid:FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:4c:da:37:a0:4a:4b:71:96:98:9d:52:b2:40:c7:b2:49:8a:
         35:58:9c:4c:77:40:72:c0:2e:cd:1a:ff:55:eb:9b:dc:5b:7e:
         e3:bd:f2:23:73:ff:68:37:bc:d6:18:76:be:9c:eb:f3:01:43:
         2d:ea:24:62:e8:77:13:f9:db:cd:13:7a:67:4c:f7:94:f2:18:
         5e:de:85:12:13:74:ae:2a:f3:f4:0a:01:35:b5:ee:62:66:45:
         e9:45:dd:02:31:ce:b4:72:d5:a0:65:54:5f:ca:14:85:06:86:
         5f:36:a2:d8:06:82:0f:98:ce:d0:88:b0:1a:61:3c:8f:e8:05:
         66:9e:b5:f1:d7:31:ad:ed:99:4d:15:e0:eb:f0:f8:8f:e2:58:
         a7:e6:06:f4:a2:87:49:1b:1c:f0:66:c9:8b:34:e4:87:5b:25:
         c4:68:17:e6:47:8e:c6:99:59:99:5b:11:84:a8:96:a7:98:22:
         4a:65:b8:d2:9f:56:7a:fd:a1:9a:4d:70:25:6b:78:0a:76:f0:
         a7:99:f9:df:93:87:88:6d:2c:4f:72:09:1f:f7:d1:92:ff:f4:
         ce:fa:9d:c2:e6:57:c5:96:ed:e5:b0:4d:9f:ce:2e:d8:ba:0b:
         22:6f:75:3a:28:1e:c8:ca:99:42:54:9b:01:93:93:0d:4a:a1:
         25:a0:be:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----