Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
File:                     b9qzLf1uW8aZ57826Bgpjcf7skY.mft (raw, json)
Hash identifier:          4Fq/T3RUMXreYD/5EIfD96KgRz302KjSFnZqEFqt3so=
Subject key identifier:   79:13:95:12:33:A6:A4:9A:BD:00:CF:B5:A4:7E:2E:15:9E:09:9E:02
Authority key identifier: 6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
Certificate issuer:       /CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Certificate serial:       018F9B3CF9ACDB86F0D8EF86DAA312C5C808
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
Manifest number:          01F4
Signing time:             Tue 21 May 2024 13:00:15 +0000
Manifest this update:     Tue 21 May 2024 13:00:15 +0000
Manifest next update:     Wed 22 May 2024 13:00:15 +0000
Files and hashes:         1: b9qzLf1uW8aZ57826Bgpjcf7skY.crl (hash: Xwg1xx4QDRDZlNR7t/WqMVmW9hOUN/ASMwyuTMHbpZU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 13:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9b:3c:f9:ac:db:86:f0:d8:ef:86:da:a3:12:c5:c8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
        Validity
            Not Before: May 21 13:00:15 2024 GMT
            Not After : May 22 13:00:15 2024 GMT
        Subject: CN=7913951233a6a49abd00cfb5a47e2e159e099e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:77:9c:b6:1c:1b:5a:8c:af:fe:b5:bd:e9:30:
                    4d:56:6f:6c:23:f5:c0:e9:92:93:3f:d1:55:45:f4:
                    d9:23:14:f2:e9:4f:60:1d:1e:b0:9f:94:db:ae:fa:
                    30:11:41:63:9a:50:45:ce:c3:12:2c:5f:74:45:e6:
                    b8:6f:25:4b:f1:9d:3a:95:ec:08:d5:6c:99:58:99:
                    9a:f4:3b:ac:1d:56:2d:89:17:49:18:6d:24:bb:54:
                    a1:ee:58:cb:10:54:0c:08:ae:25:27:19:c6:35:03:
                    c7:4b:8a:a4:d5:62:d6:e7:12:b0:ff:85:7f:96:ee:
                    e6:a7:09:3b:00:9d:7a:b3:d3:cf:99:0c:9c:95:73:
                    73:78:b9:49:f8:80:9f:fa:f3:e1:f3:2f:d9:65:cf:
                    17:ee:ec:7f:ad:e1:19:b5:78:80:c4:2a:d9:a4:8c:
                    a7:cf:49:32:0b:82:64:47:88:93:5d:60:7b:a6:56:
                    3e:4f:50:67:29:99:a9:5e:dd:4f:d8:51:5e:59:d9:
                    1e:49:c0:63:d9:4f:6b:04:d4:ab:18:fc:80:bb:6d:
                    e2:1b:c7:65:51:83:a5:e9:c6:fe:2f:8d:d1:67:a1:
                    6b:0d:60:0b:98:c5:1c:fb:7e:94:91:3d:96:cb:5b:
                    c0:20:1a:36:7a:f3:6f:10:a6:46:17:de:fc:1e:a8:
                    72:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:13:95:12:33:A6:A4:9A:BD:00:CF:B5:A4:7E:2E:15:9E:09:9E:02
            X509v3 Authority Key Identifier:
                keyid:6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:76:c5:be:2c:5e:92:52:14:8a:6b:a4:78:a6:24:d7:65:d0:
         a6:de:0e:0d:27:cf:56:f6:ac:ff:ef:c0:f6:9e:32:08:fd:fc:
         f7:0e:67:c2:d2:89:f4:aa:ab:d4:88:82:bd:20:ad:68:42:d7:
         c8:a9:99:79:47:8c:76:3c:ad:46:d1:72:55:fc:52:19:a4:23:
         7e:10:71:15:12:d9:fa:a3:60:4c:b7:64:c1:bb:e4:b3:13:55:
         19:66:b2:cc:0a:ab:ce:f0:b7:14:b0:27:0d:a5:a8:6a:1f:a8:
         65:9e:eb:69:7f:2c:11:85:5f:c9:6e:98:94:a1:bb:7c:31:24:
         9d:70:35:11:92:d0:bb:0f:fa:8a:00:dd:20:b7:2c:54:a7:7f:
         91:90:8e:a3:6e:fd:8b:2b:5c:ab:b6:e5:dd:29:aa:d5:15:28:
         f3:43:e6:6a:ca:fa:4d:96:29:8f:e6:0e:1a:2b:18:73:cc:9b:
         2a:d1:6f:b9:cc:e4:59:f0:3a:81:91:a8:ae:42:52:2d:48:fc:
         eb:5b:0c:fb:d5:32:ea:d5:b3:ab:1d:2c:d1:2a:47:4d:df:44:
         f5:c9:cf:c3:12:cc:f9:b5:c6:1a:ef:02:bd:f5:a9:97:4d:4a:
         a7:cf:7c:ba:75:86:9c:d4:72:49:29:8e:63:81:7a:ab:44:8b:
         2f:ce:05:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----