Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/8fc05e-8e8a-4fa1-8008-f8da5ad8a219/1/Hj6MH98awCVXDfFMQOJvZqi809U.mft
File:                     Hj6MH98awCVXDfFMQOJvZqi809U.mft (raw, json)
Hash identifier:          EKERDrpsEKN2h72njGANzu/lwOaUAUUtUjwnMTTcY6Y=
Subject key identifier:   D4:4B:BA:D8:87:4F:91:C7:D2:2F:B1:0E:6F:7E:EF:5F:04:BF:DA:19
Authority key identifier: 1E:3E:8C:1F:DF:1A:C0:25:57:0D:F1:4C:40:E2:6F:66:A8:BC:D3:D5
Certificate issuer:       /CN=1e3e8c1fdf1ac025570df14c40e26f66a8bcd3d5
Certificate serial:       01935689BF15F343A0510264799433235D3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hj6MH98awCVXDfFMQOJvZqi809U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/8fc05e-8e8a-4fa1-8008-f8da5ad8a219/1/Hj6MH98awCVXDfFMQOJvZqi809U.mft
Manifest number:          0A9A
Signing time:             Sat 23 Nov 2024 01:01:28 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:28 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:28 +0000
Files and hashes:         1: Hj6MH98awCVXDfFMQOJvZqi809U.crl (hash: a9nD48J08Av8iVqtz9FOPgF0BryNV4vBNIt3OfqbeMA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/8fc05e-8e8a-4fa1-8008-f8da5ad8a219/1/Hj6MH98awCVXDfFMQOJvZqi809U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/8fc05e-8e8a-4fa1-8008-f8da5ad8a219/1/Hj6MH98awCVXDfFMQOJvZqi809U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hj6MH98awCVXDfFMQOJvZqi809U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:bf:15:f3:43:a0:51:02:64:79:94:33:23:5d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e3e8c1fdf1ac025570df14c40e26f66a8bcd3d5
        Validity
            Not Before: Nov 23 01:01:28 2024 GMT
            Not After : Nov 24 01:01:28 2024 GMT
        Subject: CN=d44bbad8874f91c7d22fb10e6f7eef5f04bfda19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0b:10:21:20:be:01:06:3a:50:a7:28:ad:ea:
                    01:29:d0:04:b9:87:5e:f7:c9:2c:49:b1:12:6b:7e:
                    64:0d:dd:26:fc:0e:eb:ef:e5:1e:5e:dd:e6:75:f7:
                    6e:76:02:18:80:a4:59:0a:ae:51:c5:6e:98:8d:de:
                    a2:41:56:6a:c0:6e:59:4a:e7:11:2b:df:57:7a:24:
                    b3:a6:45:fe:bb:f2:b4:02:05:18:b1:a7:ff:54:ce:
                    79:de:48:39:ff:cf:6e:d1:77:4b:b3:9d:90:14:08:
                    c2:9a:d0:82:49:00:e4:49:ea:df:13:62:90:2b:27:
                    d4:82:7e:e4:64:02:ce:18:3d:21:20:e8:3e:60:0f:
                    b2:f8:a7:be:a6:43:0d:1f:b0:35:bc:39:2c:0f:1a:
                    4c:39:56:2a:13:73:60:89:f2:35:05:3d:48:04:a4:
                    f5:b3:92:a5:c9:e8:e2:34:2f:56:bd:60:42:eb:fd:
                    60:92:a2:86:d7:64:ff:f6:dd:15:32:30:6a:81:c5:
                    78:00:ea:9e:84:27:08:78:a0:9e:a8:e1:82:2f:61:
                    c8:09:be:60:1e:35:7b:86:f1:20:2d:4b:4f:f1:81:
                    4a:c2:92:4f:8e:33:34:a2:e8:d9:b2:7a:4c:02:31:
                    d9:f6:0b:fc:d5:7d:cb:40:94:0e:2e:43:63:8e:ad:
                    c5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4B:BA:D8:87:4F:91:C7:D2:2F:B1:0E:6F:7E:EF:5F:04:BF:DA:19
            X509v3 Authority Key Identifier:
                keyid:1E:3E:8C:1F:DF:1A:C0:25:57:0D:F1:4C:40:E2:6F:66:A8:BC:D3:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hj6MH98awCVXDfFMQOJvZqi809U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/8fc05e-8e8a-4fa1-8008-f8da5ad8a219/1/Hj6MH98awCVXDfFMQOJvZqi809U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/8fc05e-8e8a-4fa1-8008-f8da5ad8a219/1/Hj6MH98awCVXDfFMQOJvZqi809U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ae:3c:43:55:0a:19:1a:f7:4a:13:50:14:b7:64:40:58:98:
         6e:02:a8:32:56:6b:89:ea:f4:69:74:4e:6d:46:77:d9:8a:34:
         47:2a:04:42:05:2b:45:6b:fd:c6:04:39:44:a4:0f:06:80:87:
         b7:9c:90:5c:04:b2:e5:e5:33:97:58:19:c8:3d:49:a1:26:60:
         a6:b8:ea:51:1c:29:98:26:b9:37:b2:3c:c4:4c:84:9b:ed:9d:
         dc:6f:34:e1:27:c3:0f:7e:03:29:00:32:6d:25:2c:a4:cc:90:
         5a:91:cb:cd:be:3e:a7:fb:42:8e:3f:e5:5a:85:91:82:b2:6b:
         68:2e:84:dd:88:1c:68:e3:a0:be:2b:c4:97:14:0e:ed:06:6e:
         c5:5c:a9:40:10:59:4f:f6:ef:d6:e9:fb:5d:9e:09:fd:9c:ae:
         9d:11:7e:3e:bb:ed:d7:2c:75:52:de:ea:c3:94:1c:d6:80:7f:
         26:5a:6f:80:e9:7e:a7:ce:e0:2f:06:3a:71:63:20:44:2d:ee:
         43:25:39:54:8d:53:26:9e:74:c0:98:7a:8e:7f:20:a3:0d:4f:
         ff:6e:ed:3b:88:16:d6:48:ea:f5:0c:d3:53:f8:5d:f5:ff:1d:
         be:2a:dc:82:f8:43:13:e1:1c:6d:a8:fc:e9:88:33:d3:32:99:
         71:3d:ec:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----