Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
File:                     6hcPx2y4X6R2BtbFdHydSjhZK2E.mft (raw, json)
Hash identifier:          gDOah8mr/ArS33np9IlQ6PChjYO96npKrTQC6knaHkI=
Subject key identifier:   24:F1:4A:D6:19:D0:87:97:20:E8:33:BA:A9:E9:56:F9:E0:35:1D:67
Authority key identifier: EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
Certificate issuer:       /CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Certificate serial:       018F8749C6E402C08A82E8FE364BD6D51E5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
Manifest number:          01FF
Signing time:             Fri 17 May 2024 16:01:50 +0000
Manifest this update:     Fri 17 May 2024 16:01:50 +0000
Manifest next update:     Sat 18 May 2024 16:01:50 +0000
Files and hashes:         1: 6hcPx2y4X6R2BtbFdHydSjhZK2E.crl (hash: vpCzZHEIJXgLQbXTqdbSeEJBJeqRgQ00MoTdy2rrO2E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:c6:e4:02:c0:8a:82:e8:fe:36:4b:d6:d5:1e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
        Validity
            Not Before: May 17 16:01:50 2024 GMT
            Not After : May 18 16:01:50 2024 GMT
        Subject: CN=24f14ad619d0879720e833baa9e956f9e0351d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2a:af:80:51:34:8f:07:c0:5c:2c:89:03:d8:
                    07:fc:73:21:15:e8:98:c5:dc:78:30:28:d3:ac:40:
                    0b:8e:0e:0e:20:a9:8b:3e:3b:cf:80:10:54:8c:3b:
                    d4:e1:3d:78:62:97:1b:e4:84:76:ca:12:09:9e:c0:
                    0f:10:17:81:b9:fe:56:d6:9c:62:b1:81:21:e7:7b:
                    f4:f9:46:62:cd:a3:60:6a:d7:fe:d3:4c:b1:47:5b:
                    c8:96:82:78:d0:14:8e:df:76:1b:72:1a:97:d3:54:
                    fa:d8:ff:28:6b:d9:35:c6:60:90:66:ba:5d:06:12:
                    2c:0a:75:48:d3:cd:e7:5a:ba:b2:d9:58:f7:d3:ea:
                    64:7a:da:c3:0c:3f:32:86:23:94:13:a8:b4:0b:f2:
                    9d:c5:e6:5a:2f:3c:b9:04:b7:b9:09:1a:b6:e0:2b:
                    f0:24:97:2a:a2:c8:be:24:e7:56:83:95:39:3e:d3:
                    6b:76:75:6b:1f:bd:9c:ec:56:bd:85:cb:27:19:9c:
                    46:c8:c4:95:58:01:c5:eb:08:03:83:78:d8:a7:08:
                    30:81:e4:40:03:82:46:68:b8:9c:d5:8e:b2:82:5c:
                    98:7f:d4:8d:99:5d:bb:17:10:c1:fe:f6:18:eb:63:
                    16:26:89:24:d2:7e:c6:10:94:9e:36:ff:97:7f:09:
                    d5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F1:4A:D6:19:D0:87:97:20:E8:33:BA:A9:E9:56:F9:E0:35:1D:67
            X509v3 Authority Key Identifier:
                keyid:EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:6c:ad:4f:b6:16:fe:c1:ce:21:7f:9c:6c:fe:14:d2:2a:48:
         4d:27:a2:6a:35:a2:91:ca:3c:93:f6:56:89:30:92:2b:45:59:
         75:23:7a:e3:7d:5d:72:37:1a:51:1b:a2:52:11:66:54:a0:ba:
         a3:a6:c0:74:a9:d2:9a:36:97:cf:1f:d1:52:c2:02:eb:42:5c:
         60:69:78:f0:67:ed:0c:64:7f:34:fe:33:cb:33:a8:bd:af:aa:
         c5:83:1c:2b:24:eb:ea:17:84:29:7e:d4:26:68:fa:91:15:2d:
         9b:9f:1e:57:70:67:6f:c9:c7:f3:18:d6:ca:68:16:f4:00:1c:
         7f:fa:3f:52:af:1d:17:06:5a:ea:d9:fc:7f:6e:79:74:ad:9d:
         9e:82:46:b8:4c:51:fe:55:c6:4c:85:dd:56:bb:78:1b:7f:52:
         c9:59:89:50:2f:eb:2f:8e:67:d1:93:5d:19:2e:03:45:0a:18:
         75:97:a7:78:4f:4c:ef:0f:d4:07:1a:d6:6c:1b:ab:27:21:50:
         ca:d4:40:80:bd:60:02:e0:2b:47:ae:8e:4c:5e:24:71:03:04:
         69:4d:18:69:f2:54:f1:23:41:a4:71:b2:86:3d:bb:f0:e1:ff:
         52:3b:2a:94:12:10:e2:c9:8d:36:a2:ce:8b:b4:f4:fd:91:d1:
         8e:2b:f6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----