Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft
File:                     VTTpuw7k0wwx52r6aRrcknmz81Y.mft (raw, json)
Hash identifier:          4xy6Kdil6FaxCeIV/ubXN11yrkgj9yVOV2DrKcdF+IA=
Subject key identifier:   F7:7F:36:FE:16:32:F1:F5:2C:5A:86:EA:EE:9F:40:27:E5:74:E5:9E
Authority key identifier: 55:34:E9:BB:0E:E4:D3:0C:31:E7:6A:FA:69:1A:DC:92:79:B3:F3:56
Certificate issuer:       /CN=5534e9bb0ee4d30c31e76afa691adc9279b3f356
Certificate serial:       018F874A626BC849A5B89C3CAB13B2549979
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:02:29 +0000
Manifest this update:     Fri 17 May 2024 16:02:29 +0000
Manifest next update:     Sat 18 May 2024 16:02:29 +0000
Files and hashes:         1: VTTpuw7k0wwx52r6aRrcknmz81Y.crl (hash: 1iVNj+hrxcY2F7j5sqWGMyaiy5w0sskJzIviO3tRg4M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:62:6b:c8:49:a5:b8:9c:3c:ab:13:b2:54:99:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5534e9bb0ee4d30c31e76afa691adc9279b3f356
        Validity
            Not Before: May 17 16:02:29 2024 GMT
            Not After : May 18 16:02:29 2024 GMT
        Subject: CN=f77f36fe1632f1f52c5a86eaee9f4027e574e59e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ca:95:92:71:8f:ba:76:c3:6f:ad:19:75:b5:
                    21:db:ab:79:71:3d:e3:a0:37:1b:9f:c8:62:f1:f7:
                    ab:2f:22:0a:8a:60:26:18:fb:90:eb:e1:c7:65:b4:
                    63:20:38:80:d5:96:5a:d7:74:81:d1:27:bd:e6:31:
                    24:be:ba:a4:49:88:c4:a7:c9:f4:9b:73:4d:ca:48:
                    a3:0a:17:aa:10:fb:08:0f:98:2e:f2:d3:7d:b7:b1:
                    95:8f:4f:d2:48:30:3b:9b:84:01:6d:c2:b3:52:9d:
                    3a:cc:41:20:e2:5c:aa:28:55:64:08:01:66:9a:f9:
                    4c:db:3e:88:67:7d:88:4b:68:61:54:80:42:8d:ed:
                    b5:a4:58:bd:02:98:80:a8:a8:2e:7c:9b:19:17:8c:
                    83:8e:5d:71:b2:91:19:67:69:10:8e:e6:f6:72:49:
                    5d:17:d5:04:22:54:98:57:59:6d:02:61:38:fd:5d:
                    d6:f8:8a:08:e1:37:36:3c:e3:84:c7:b4:16:a3:dc:
                    58:13:5a:8f:67:06:4b:07:e5:2f:c0:2a:1c:31:b1:
                    56:49:c8:50:14:7f:bd:9f:79:ab:4c:b2:37:36:4a:
                    2f:36:42:29:3d:b1:16:5d:15:ba:f3:9e:44:1b:19:
                    7b:56:14:89:67:3a:fc:9d:f3:6d:e7:6f:f2:a7:58:
                    c1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7F:36:FE:16:32:F1:F5:2C:5A:86:EA:EE:9F:40:27:E5:74:E5:9E
            X509v3 Authority Key Identifier:
                keyid:55:34:E9:BB:0E:E4:D3:0C:31:E7:6A:FA:69:1A:DC:92:79:B3:F3:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:32:52:69:69:7d:2b:61:5a:77:a7:92:be:54:87:3f:69:e7:
         8f:d0:1e:c9:73:88:39:ca:9d:49:20:e0:5c:b3:6a:0d:a6:ca:
         5b:11:16:24:74:27:4e:b3:af:33:19:5b:79:d8:dc:30:4f:87:
         fc:e2:38:b9:f9:83:61:ab:cf:ed:df:ca:8a:60:e1:25:dc:3a:
         04:1b:15:19:41:07:29:a6:0e:af:14:b4:e5:1e:39:87:0c:ed:
         97:7f:a0:d9:2d:66:55:36:05:47:ff:1d:88:2e:ec:89:6e:7b:
         bd:f1:f2:10:ed:8f:57:fe:97:f6:b8:49:0a:1d:3f:82:cf:6d:
         6d:27:e2:68:f7:54:be:df:f8:96:93:75:2a:7f:0e:c8:5f:ff:
         c1:a1:2a:a4:7c:84:f3:33:15:3a:66:26:fa:3a:b0:2e:d3:59:
         84:ad:a7:32:4a:ad:c5:88:45:4b:b8:4d:c6:84:34:bf:81:12:
         b9:cc:ae:32:55:c7:98:18:51:6d:70:04:02:f3:c3:62:63:c5:
         ec:eb:05:b4:41:be:2d:e9:52:14:14:6e:29:14:57:f3:68:89:
         78:cb:c1:0f:c5:2f:16:49:28:14:16:b5:9c:72:81:58:5d:ad:
         99:c9:41:93:16:77:f2:89:9b:05:99:18:d6:41:45:7a:8b:4a:
         21:4b:d9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----