Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/43334f-3ff2-424b-8b33-a5fff9095d8e/1/M3SaPCzREJZkQBHb8I7W2DmHLgc.mft
File:                     M3SaPCzREJZkQBHb8I7W2DmHLgc.mft (raw, json)
Hash identifier:          wgvT+k0EHa/B/fhsLVLXFgAy4SlcYP63hyfFkQCp+/M=
Subject key identifier:   A8:E5:11:2A:3B:E2:CA:2B:AF:5F:8E:AF:E7:FA:A3:F9:B1:9F:52:95
Authority key identifier: 33:74:9A:3C:2C:D1:10:96:64:40:11:DB:F0:8E:D6:D8:39:87:2E:07
Certificate issuer:       /CN=33749a3c2cd11096644011dbf08ed6d839872e07
Certificate serial:       018F882451DE8BF233B4ED6E5491FEC26D77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M3SaPCzREJZkQBHb8I7W2DmHLgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/43334f-3ff2-424b-8b33-a5fff9095d8e/1/M3SaPCzREJZkQBHb8I7W2DmHLgc.mft
Manifest number:          0E1D
Signing time:             Fri 17 May 2024 20:00:32 +0000
Manifest this update:     Fri 17 May 2024 20:00:32 +0000
Manifest next update:     Sat 18 May 2024 20:00:32 +0000
Files and hashes:         1: M3SaPCzREJZkQBHb8I7W2DmHLgc.crl (hash: 4lpaKWAgsp5XK0nKwzs5xfSLfRt/KtKLbt481eWHEEM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/43334f-3ff2-424b-8b33-a5fff9095d8e/1/M3SaPCzREJZkQBHb8I7W2DmHLgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/43334f-3ff2-424b-8b33-a5fff9095d8e/1/M3SaPCzREJZkQBHb8I7W2DmHLgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M3SaPCzREJZkQBHb8I7W2DmHLgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:51:de:8b:f2:33:b4:ed:6e:54:91:fe:c2:6d:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33749a3c2cd11096644011dbf08ed6d839872e07
        Validity
            Not Before: May 17 20:00:32 2024 GMT
            Not After : May 18 20:00:32 2024 GMT
        Subject: CN=a8e5112a3be2ca2baf5f8eafe7faa3f9b19f5295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a5:d8:48:6d:6c:86:9f:6f:48:ca:ce:7c:e3:
                    3b:d6:ac:28:d2:b5:1a:ec:d0:a4:00:24:f0:4c:4f:
                    66:b2:32:52:78:e9:34:4e:51:0d:b5:21:07:37:c4:
                    75:31:17:3a:65:68:30:34:d6:81:ac:05:8f:fc:b2:
                    09:77:2f:dc:96:b2:1e:eb:6d:d1:9c:9b:d6:23:1b:
                    34:f4:fe:f5:63:02:c2:3f:03:48:bf:15:3f:29:e3:
                    8a:10:b5:4d:88:4e:14:8b:40:25:d3:91:e8:f0:30:
                    7e:26:4b:1d:44:45:4d:26:50:94:dd:8e:06:50:98:
                    3e:e8:f8:f9:7e:a6:79:4d:c4:e0:8e:60:d4:91:46:
                    24:59:e1:4c:2b:b1:1e:2d:e1:3d:3d:6d:d6:36:4f:
                    bb:9e:d1:08:85:2d:ac:da:78:5a:cb:02:24:2d:7b:
                    09:d9:c1:fb:68:ab:aa:7a:0b:f6:37:b4:25:ab:13:
                    1b:b1:84:d8:c0:c4:46:55:3d:c0:55:dd:54:53:ac:
                    8d:a4:36:51:2a:20:61:3d:17:1f:38:60:e7:96:81:
                    fa:f1:74:30:77:cd:8c:fc:ee:a5:f0:89:6f:9d:58:
                    30:e6:67:e0:32:22:70:a6:ea:de:e2:99:f6:3a:95:
                    76:06:95:da:b3:55:c0:47:14:21:e7:5b:98:2a:93:
                    51:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E5:11:2A:3B:E2:CA:2B:AF:5F:8E:AF:E7:FA:A3:F9:B1:9F:52:95
            X509v3 Authority Key Identifier:
                keyid:33:74:9A:3C:2C:D1:10:96:64:40:11:DB:F0:8E:D6:D8:39:87:2E:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3SaPCzREJZkQBHb8I7W2DmHLgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/43334f-3ff2-424b-8b33-a5fff9095d8e/1/M3SaPCzREJZkQBHb8I7W2DmHLgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/43334f-3ff2-424b-8b33-a5fff9095d8e/1/M3SaPCzREJZkQBHb8I7W2DmHLgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:80:c3:5e:97:04:0e:47:d0:d6:cf:11:07:58:f3:71:13:e3:
         18:7a:5b:4d:8c:ae:bc:a9:ff:c6:2f:9b:30:50:92:0b:2a:dd:
         6f:62:7d:6a:68:55:d0:3f:18:c0:96:a7:f1:7e:14:49:34:ea:
         cc:c9:bd:bc:3e:94:52:69:04:05:c2:e2:a1:14:02:3d:b3:e4:
         39:3a:8e:25:19:08:27:9c:6a:d0:86:45:c3:70:d8:93:44:e1:
         c1:5b:09:fa:af:f4:37:6e:5b:36:33:6d:50:27:a6:de:d0:5a:
         78:1c:ae:97:e4:ea:b7:c2:57:df:fe:f4:40:d5:63:d2:85:7b:
         d9:1c:e2:c9:10:9b:b3:c9:6a:0e:3c:6a:6d:52:20:73:b9:d1:
         25:83:7d:5b:04:a6:ef:53:43:c1:a1:fb:ee:0d:e0:ee:59:61:
         4c:0b:94:5d:fd:f7:2f:72:e9:f3:03:fe:09:32:03:76:83:8f:
         09:13:2d:54:ba:86:c4:11:2e:0f:7b:9b:fa:b6:a8:8b:7a:93:
         0e:9d:01:7b:3d:dc:bd:71:66:cf:50:bb:a0:e2:9a:e1:80:ff:
         b7:51:c5:48:bc:13:23:df:b3:42:e0:91:b2:fe:b0:66:5d:b6:
         38:13:62:0a:48:9d:40:42:a3:76:c6:18:1e:d0:f6:a6:a3:81:
         5c:aa:e9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----