Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
File:                     ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft (raw, json)
Hash identifier:          X2wyNHp/U+OIY/hDmKbaO6G1Lrfd2Qr22apuW2kma1M=
Subject key identifier:   5B:8D:98:E4:B2:50:56:4F:38:BE:F6:08:F0:DC:A5:A4:EE:2F:51:1B
Authority key identifier: 64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
Certificate issuer:       /CN=6421470d5922298ed04685e1df0efdfdd2a66607
Certificate serial:       018F889246E8544EECC0537AD293D3336694
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
Manifest number:          07E8
Signing time:             Fri 17 May 2024 22:00:38 +0000
Manifest this update:     Fri 17 May 2024 22:00:38 +0000
Manifest next update:     Sat 18 May 2024 22:00:38 +0000
Files and hashes:         1: ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl (hash: 35f9M+vcwjM25MaKP6drOuRLfVAn6KiYycKa76MMljQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:46:e8:54:4e:ec:c0:53:7a:d2:93:d3:33:66:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6421470d5922298ed04685e1df0efdfdd2a66607
        Validity
            Not Before: May 17 22:00:38 2024 GMT
            Not After : May 18 22:00:38 2024 GMT
        Subject: CN=5b8d98e4b250564f38bef608f0dca5a4ee2f511b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:da:08:88:36:10:97:b5:dd:1e:17:88:17:4c:
                    96:bd:a0:dd:2e:7b:7d:26:c1:d6:53:8a:63:13:f2:
                    2d:f6:57:21:af:d9:0c:44:2f:5e:9d:c1:eb:bb:fc:
                    47:b2:46:bd:95:44:18:ae:a4:66:be:1e:c7:eb:c7:
                    c2:cd:15:c0:e5:ea:dc:2a:2d:6b:41:7d:fb:c3:a4:
                    97:67:18:95:05:69:fc:1c:3d:26:22:ee:74:2f:fe:
                    66:96:08:3f:d9:68:dc:ea:d3:22:35:5e:9c:7f:d3:
                    1d:fa:81:f2:7c:63:64:ca:7b:47:ac:49:f4:b6:f3:
                    73:98:94:1a:6d:67:af:97:c8:0f:4b:a9:75:b2:e0:
                    02:3d:20:66:90:f4:66:bc:dc:48:ea:83:07:9d:2f:
                    e7:eb:50:43:8d:78:1f:c2:95:ba:72:b7:3b:3f:7a:
                    b9:ff:d1:d5:31:f8:22:3b:34:78:40:6c:a7:66:f1:
                    91:95:b2:ab:ae:a4:28:14:40:cc:a0:6f:8b:5c:eb:
                    9b:5f:23:fa:48:8e:49:d3:e6:f0:c0:bc:58:0a:e8:
                    c5:cc:ea:f9:09:44:84:96:49:38:23:fe:e5:29:b0:
                    c3:30:73:c7:45:bc:d6:92:04:22:63:7b:2d:23:1f:
                    df:ed:4c:e1:7c:08:b3:7a:69:80:ae:b8:89:37:e6:
                    80:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8D:98:E4:B2:50:56:4F:38:BE:F6:08:F0:DC:A5:A4:EE:2F:51:1B
            X509v3 Authority Key Identifier:
                keyid:64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b7:25:69:21:b3:fc:d5:91:47:d9:99:e2:8a:5e:d6:b0:02:
         06:ae:0f:cd:2c:ce:3a:82:25:d8:fd:1f:06:d5:48:68:0f:14:
         25:6a:a9:8b:80:8d:de:7b:9b:b6:59:8a:80:cf:82:97:20:9f:
         99:40:40:4f:69:cd:42:1d:3d:41:02:37:03:22:65:b6:11:df:
         8a:06:56:09:c7:1e:03:56:94:c8:cf:7f:a9:73:21:d5:3a:35:
         5d:de:35:d1:b1:e4:f6:8c:65:65:23:76:a1:2a:74:d1:9b:5b:
         e7:8c:d5:36:36:34:5f:30:04:f9:92:c3:8d:f5:b6:27:f4:09:
         39:f0:9d:1d:e2:d0:e7:80:d2:b9:14:21:9b:03:d6:6c:a0:fa:
         10:ca:1a:2c:8d:68:50:4e:bb:f6:63:19:55:4b:39:1f:89:e7:
         74:48:c6:78:4b:00:b7:a3:e8:6c:ff:b7:a8:38:56:b4:42:17:
         07:8e:40:4f:a8:25:9e:0a:82:33:a8:76:84:ea:30:15:fa:03:
         2a:c9:d5:ec:88:78:28:55:fe:7f:99:c9:62:b3:4b:40:fc:e6:
         95:24:8d:b2:78:f3:ea:8b:66:25:b3:a2:ad:a3:73:86:4c:42:
         fd:f8:db:ab:33:a8:f4:4c:18:d7:f7:cb:86:88:4f:fa:ff:8d:
         ce:fd:af:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----