Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
File:                     RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft (raw, json)
Hash identifier:          kPD0M/Z9f3AV/Po5cpi99sDDCmU8RZM37+t1RVhO2qg=
Subject key identifier:   B5:15:BC:5B:19:B2:CD:3E:90:CC:8B:CB:2C:06:78:9F:B2:13:9B:B0
Authority key identifier: 46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73
Certificate issuer:       /CN=463260e45ee1521c6aab83f21d5b69e810c1e073
Certificate serial:       018F8749C5770EC63CD00FAD77B47892BF92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
Manifest number:          1173
Signing time:             Fri 17 May 2024 16:01:49 +0000
Manifest this update:     Fri 17 May 2024 16:01:49 +0000
Manifest next update:     Sat 18 May 2024 16:01:49 +0000
Files and hashes:         1: RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl (hash: 3imC0wcJAOdNcC3Phv0x3iWnRG6aAtait6fq7PP7SGg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:c5:77:0e:c6:3c:d0:0f:ad:77:b4:78:92:bf:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463260e45ee1521c6aab83f21d5b69e810c1e073
        Validity
            Not Before: May 17 16:01:49 2024 GMT
            Not After : May 18 16:01:49 2024 GMT
        Subject: CN=b515bc5b19b2cd3e90cc8bcb2c06789fb2139bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0f:81:0a:3f:2c:a8:a5:d9:55:1a:5b:ee:e4:
                    dc:5d:84:1d:8b:ce:7e:90:3e:c7:ac:04:74:27:74:
                    6d:8d:e5:d4:f9:0a:6a:a5:ab:95:c3:ec:ed:a3:0f:
                    0f:43:f2:c3:cf:d6:8e:3a:5c:a0:c1:70:e4:71:17:
                    3a:e0:1c:18:a6:64:42:c3:fd:85:a6:ae:19:fc:ee:
                    31:ba:c4:69:89:52:46:15:19:42:9d:88:a1:ed:11:
                    72:c3:18:c9:0e:e2:b8:fd:df:c8:dd:3d:fe:92:6d:
                    d5:e8:6b:a7:5b:1b:93:a4:83:75:28:28:2c:05:62:
                    84:25:c8:b3:6f:1e:56:98:a9:2d:70:fa:de:9e:b1:
                    0d:09:e3:76:a1:f1:44:fd:82:4a:df:4f:2b:80:11:
                    75:54:ab:8c:e3:d1:63:ec:e6:5b:86:77:97:89:1b:
                    13:d9:4b:9c:2b:9e:76:0b:6f:1c:35:d5:ff:32:56:
                    24:ab:91:8e:34:ad:d9:f4:d8:a9:04:88:03:12:39:
                    f8:77:01:7f:96:5d:e9:f9:c4:f9:69:c0:d0:44:57:
                    33:2e:10:06:b5:6a:9d:30:c2:0f:a3:2a:f3:ca:ae:
                    89:64:fb:7e:4a:a1:38:f2:bf:ed:6e:a2:9c:a9:d7:
                    bc:53:87:6d:33:2a:f0:35:52:66:3e:9c:17:a8:45:
                    3f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:15:BC:5B:19:B2:CD:3E:90:CC:8B:CB:2C:06:78:9F:B2:13:9B:B0
            X509v3 Authority Key Identifier:
                keyid:46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:e2:df:9b:4a:ae:f4:e2:79:97:f9:16:c0:77:94:55:09:e0:
         b2:3a:8f:96:ad:85:bc:14:ae:67:09:21:1b:29:ae:27:13:b6:
         ce:b7:2d:46:b1:d8:21:c4:76:e1:d1:21:0e:d2:74:c9:42:83:
         35:ae:e0:ce:5d:3c:35:9b:d8:fd:e1:08:d8:82:1e:70:0d:b9:
         f6:c8:a1:73:21:94:c0:72:36:97:c5:5b:8c:9a:0b:74:42:39:
         aa:25:41:0d:f2:ce:b6:28:16:b5:91:20:4a:d1:8a:ad:e0:15:
         ca:87:a3:8c:21:00:e5:dc:b5:27:ea:dd:eb:86:8c:4a:54:27:
         83:96:b1:85:c6:d3:bd:d2:bb:83:e8:bc:98:ea:69:e1:18:0a:
         a3:56:90:fd:44:95:dd:01:26:0b:ea:f2:5a:cb:41:db:09:65:
         68:f8:e7:c0:c1:48:13:58:42:d0:79:43:8e:2b:36:8b:ba:fa:
         9a:3a:b0:63:e1:e0:b6:48:64:9c:8d:72:42:f3:86:05:a3:01:
         b9:ef:84:fb:9b:63:58:68:f0:56:2c:83:35:ec:70:e1:0c:f8:
         e7:5e:bc:56:96:7f:fe:2b:f9:38:cc:fd:4c:60:8d:74:c8:a3:
         92:6f:c3:ad:61:bf:43:d2:0a:55:e9:cf:75:58:f6:6d:a7:2b:
         20:aa:2b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----