Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft
File:                     _C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft (raw, json)
Hash identifier:          dpxH1CRmJg5LT/HxrJAjM6FnlYMuWeSkJRHV3eP3z0s=
Subject key identifier:   5A:F8:F5:C5:85:4E:22:FA:CA:DA:68:DC:F5:C7:10:8F:C1:B1:0B:AC
Authority key identifier: FC:2F:8D:CE:CF:64:D4:30:A4:8E:CD:58:68:78:3B:05:F7:5C:BF:AB
Certificate issuer:       /CN=fc2f8dcecf64d430a48ecd5868783b05f75cbfab
Certificate serial:       018F8891FCAF2FFB02FB116C1E153DADA594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft
Manifest number:          0B28
Signing time:             Fri 17 May 2024 22:00:19 +0000
Manifest this update:     Fri 17 May 2024 22:00:19 +0000
Manifest next update:     Sat 18 May 2024 22:00:19 +0000
Files and hashes:         1: _C-Nzs9k1DCkjs1YaHg7Bfdcv6s.crl (hash: awK0bJJ1D+u9J3zA1cQ5DJfAFhCAvjPzryJOa1O9Mbo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:fc:af:2f:fb:02:fb:11:6c:1e:15:3d:ad:a5:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc2f8dcecf64d430a48ecd5868783b05f75cbfab
        Validity
            Not Before: May 17 22:00:19 2024 GMT
            Not After : May 18 22:00:19 2024 GMT
        Subject: CN=5af8f5c5854e22facada68dcf5c7108fc1b10bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:c4:c7:97:ba:c2:8a:d7:ca:2e:f9:ff:bb:
                    83:e1:e8:a0:45:fe:e0:c2:90:73:71:b8:e4:61:1e:
                    66:4e:31:b7:4f:a1:44:19:3f:0b:f2:31:c0:cc:05:
                    21:b7:f1:74:a3:fd:b4:10:23:c5:37:a9:93:64:55:
                    50:3f:b7:ae:5a:6a:d0:a4:86:44:b9:3a:5a:be:d4:
                    7e:a8:a2:4a:2c:10:43:51:09:bf:14:43:b5:d7:2d:
                    72:63:5a:63:b0:42:54:5f:8b:7a:5d:d7:8d:b4:2b:
                    81:7e:32:9d:a3:a5:67:6f:0e:4e:95:ae:63:e2:e3:
                    17:4c:92:09:31:cb:d9:6a:33:54:85:ca:e0:e1:89:
                    15:e2:d6:5c:26:5c:da:ce:3f:47:1e:c8:65:a0:ad:
                    21:e2:91:d3:9e:ce:61:f2:8d:4a:f2:c8:c8:b7:34:
                    ae:25:2d:da:ef:dc:61:19:e5:b5:85:e9:d1:de:c3:
                    43:82:10:8c:11:b9:ec:b9:25:ac:40:53:7b:1c:81:
                    5b:25:71:09:76:31:d0:96:08:2b:fb:0f:67:94:63:
                    b0:8b:d5:39:ec:49:e9:33:21:29:44:7a:10:3b:71:
                    3f:99:59:b1:cc:71:74:6f:7a:1f:46:87:8d:cb:64:
                    f1:9b:a3:b6:fa:b7:d3:cf:1c:48:12:19:b1:9f:7e:
                    23:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F8:F5:C5:85:4E:22:FA:CA:DA:68:DC:F5:C7:10:8F:C1:B1:0B:AC
            X509v3 Authority Key Identifier:
                keyid:FC:2F:8D:CE:CF:64:D4:30:A4:8E:CD:58:68:78:3B:05:F7:5C:BF:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d52045-deea-499a-b0fc-8befb874d85c/1/_C-Nzs9k1DCkjs1YaHg7Bfdcv6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f7:e7:a5:8e:cc:1a:0d:55:b5:0a:f2:d2:42:8c:51:02:0e:
         e5:04:2a:f3:05:0c:a2:72:fa:20:4c:a1:8e:c0:dc:63:7e:eb:
         5d:af:2a:93:c6:f8:73:cb:87:67:d1:2a:5a:6e:00:55:3d:66:
         f8:6e:e6:3e:b3:1b:eb:dc:f9:0f:04:fd:94:78:0e:51:0a:17:
         0d:d3:a7:18:63:0e:c3:04:7e:e0:3e:26:c0:b0:d6:de:61:52:
         a7:11:c3:95:56:80:5d:fd:f4:29:fd:4a:6d:43:69:27:3c:6d:
         46:3d:5a:a6:8f:f6:bc:6d:81:66:16:b7:51:15:9c:93:a7:5f:
         ba:01:4d:67:50:7f:2d:26:b1:24:8d:94:f6:f7:81:81:6d:88:
         3c:7d:48:aa:da:e1:a2:31:47:7e:5d:96:94:20:99:fe:60:0d:
         88:f6:0d:d4:f3:4a:04:ed:2d:83:6d:b8:5d:39:ea:75:62:19:
         16:a4:34:90:81:fa:19:ef:65:ce:ca:89:b8:c8:e3:94:83:e5:
         08:31:bf:ea:b7:7a:2a:27:30:f0:27:2b:df:19:47:83:bf:6e:
         54:81:2d:21:2a:16:9b:13:4f:f7:10:b0:df:3e:b8:ee:8f:86:
         5a:73:ff:da:3b:d5:07:83:94:e9:12:25:46:6d:c6:7c:05:bc:
         35:8d:b1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----