Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
File:                     MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json)
Hash identifier:          Sf6wZI7yErfJ0OL474KNtU1Gs83qkvdangrIgewbAhM=
Subject key identifier:   2D:B7:07:AB:C2:11:42:80:2F:24:E8:AB:46:70:05:7B:DA:AD:54:5D
Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
Certificate issuer:       /CN=317a927426089f3b8c500083221a798a9d2e8466
Certificate serial:       018F87ED280E72AD9CAE8FF2B4A9CBC40466
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
Manifest number:          0EA2
Signing time:             Fri 17 May 2024 19:00:17 +0000
Manifest this update:     Fri 17 May 2024 19:00:17 +0000
Manifest next update:     Sat 18 May 2024 19:00:17 +0000
Files and hashes:         1: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: 08DwejDFkdIfN4OHzffXkS0NSYVjbiGZpKC9sgcjS+4=)
                          2: rFZhRryeUIcFwvqzeTjCU0GJIEw.roa (hash: AIEBw6kqJQhP0wtpRiwQQisRJShTNBaqcMtSnPZdsRY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:28:0e:72:ad:9c:ae:8f:f2:b4:a9:cb:c4:04:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466
        Validity
            Not Before: May 17 19:00:17 2024 GMT
            Not After : May 18 19:00:17 2024 GMT
        Subject: CN=2db707abc21142802f24e8ab4670057bdaad545d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ca:2b:01:ad:37:2c:9d:68:fd:b6:07:a5:76:
                    eb:cb:89:a5:82:c4:87:76:da:00:4d:30:15:ea:6a:
                    26:2a:2a:68:dc:ff:6e:80:b9:52:25:18:d6:64:eb:
                    8e:c8:42:4b:2c:5c:a4:14:db:78:94:18:85:eb:c1:
                    f8:e7:b3:ed:1c:ab:6c:07:19:a0:ed:56:e2:91:d7:
                    bd:9d:74:de:38:60:60:e6:3d:34:64:b3:c2:44:41:
                    87:63:b2:00:5d:43:e0:dc:06:22:ba:b1:5a:fb:bc:
                    d0:f8:9e:91:24:a3:42:ea:d9:c7:02:c3:6a:e1:40:
                    9a:95:e8:a5:01:97:e3:b9:a2:ac:97:b5:d1:2e:fc:
                    e7:54:bc:1b:b8:86:88:fb:3c:25:97:04:3a:81:b6:
                    18:85:d7:67:d5:d0:11:ff:a6:68:67:1b:d4:4c:e8:
                    5b:57:78:d8:7c:8d:a1:31:4b:29:73:68:d0:69:35:
                    aa:23:2d:e7:59:10:59:7f:51:d3:e3:f5:9c:d3:6d:
                    f5:2f:3f:d6:43:6a:fb:fc:14:e4:8d:6f:a1:ec:d7:
                    ff:95:12:7b:47:9e:cb:42:98:d1:07:61:7e:6a:93:
                    ed:db:26:df:e6:d4:87:f4:92:22:4f:ca:6a:0b:7e:
                    e6:1b:a7:e9:1f:09:68:db:a5:50:3e:b6:ea:21:72:
                    71:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B7:07:AB:C2:11:42:80:2F:24:E8:AB:46:70:05:7B:DA:AD:54:5D
            X509v3 Authority Key Identifier:
                keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:88:81:5d:92:f1:21:cc:66:6c:c0:16:d5:f4:af:e3:09:ba:
         31:0a:c6:af:af:1a:37:d2:8c:34:01:a5:9e:31:46:30:7a:c7:
         79:46:4d:65:91:c1:d3:df:27:bb:23:02:50:7a:d7:86:52:39:
         ea:de:3b:15:22:a3:e9:a5:ec:4e:5b:71:fe:a3:24:07:92:25:
         22:ea:53:e2:d3:a5:00:42:8d:64:a1:e9:57:f7:d1:1c:f0:d8:
         89:44:d2:ad:1c:87:c6:19:4f:1c:86:b2:6b:57:6e:7b:a7:cb:
         e2:6a:a1:e2:06:2f:f8:78:09:a6:c2:6e:3b:ad:06:c7:0d:55:
         03:bb:84:9c:97:2b:ef:02:43:44:cf:f0:af:d1:e4:4e:5c:fd:
         79:73:92:2d:17:8a:3d:f6:5c:d8:cb:c7:c4:85:6d:e8:b8:1d:
         fd:71:4a:02:73:44:3a:de:d8:43:1e:1c:f1:ec:a4:29:0c:84:
         8b:09:47:e8:7d:43:bb:f5:27:45:e1:cc:9b:45:85:70:19:f3:
         e3:d4:74:d8:2c:6d:6e:cb:94:37:a0:b5:04:71:b0:c2:71:fe:
         b7:c5:05:63:62:fb:06:81:2c:68:47:cf:91:45:db:16:60:bf:
         91:6d:1e:1c:74:e5:37:50:68:eb:11:da:67:dc:4f:61:39:ab:
         96:4a:3c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----