Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
File:                     gPNFqCznFt0-djMXL4cDBH9rfZQ.mft (raw, json)
Hash identifier:          1wVaX5WrggeNi8seRkvcw3xrVGxsXvPOIvfYHJwdTgQ=
Subject key identifier:   E2:E8:6E:B2:6E:7A:62:56:CD:A5:AA:C6:2C:6C:A4:40:1B:9B:99:9B
Authority key identifier: 80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
Certificate issuer:       /CN=80f345a82ce716dd3e7633172f8703047f6b7d94
Certificate serial:       0193568AC22B018DAC7CE548E60CC4B5CD9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
Manifest number:          1301
Signing time:             Sat 23 Nov 2024 01:02:34 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:34 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:34 +0000
Files and hashes:         1: gPNFqCznFt0-djMXL4cDBH9rfZQ.crl (hash: tiIwpPUzrEh1DVau35g8iX3Cnajlyr6+JGEnm51yQU4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:c2:2b:01:8d:ac:7c:e5:48:e6:0c:c4:b5:cd:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f345a82ce716dd3e7633172f8703047f6b7d94
        Validity
            Not Before: Nov 23 01:02:34 2024 GMT
            Not After : Nov 24 01:02:34 2024 GMT
        Subject: CN=e2e86eb26e7a6256cda5aac62c6ca4401b9b999b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1f:7b:0f:bc:47:31:24:06:a9:de:89:0f:87:
                    b9:84:a0:72:76:af:f0:47:d0:3b:71:e3:08:cd:0f:
                    9c:38:82:d7:c7:24:7f:c9:b7:d8:db:9d:15:e8:94:
                    76:cd:30:c9:90:0c:ef:a9:7e:4a:8b:4d:39:2f:6e:
                    5c:64:7b:af:ae:10:ee:9e:b5:99:ec:0b:d9:0b:dd:
                    f0:1a:bd:77:39:3c:b9:92:36:7d:59:75:a9:f2:09:
                    23:1b:fa:d3:a8:33:b7:1c:bc:9b:22:f2:f3:2e:95:
                    da:bc:49:34:34:44:55:cd:06:0a:0b:eb:1d:23:0f:
                    52:f4:7f:20:f7:99:d9:18:62:3f:41:9e:f0:69:ff:
                    1e:6d:78:77:43:7f:b7:f3:a6:8d:39:63:3f:18:cf:
                    74:37:3d:a9:2e:95:f6:1b:db:90:bc:b4:51:db:40:
                    a0:3c:34:01:aa:64:c5:c4:95:b5:b9:69:2e:21:96:
                    2c:0a:79:c6:bf:d3:b3:cb:48:13:b8:85:be:ab:db:
                    5e:72:28:dc:04:33:fa:47:a8:15:c4:c2:1f:fa:16:
                    b5:b1:1e:38:47:00:df:b0:17:1d:86:c9:9f:ff:ed:
                    8a:ee:c9:78:08:8a:7e:9d:ef:6c:f4:0b:e8:5e:6a:
                    11:2f:1f:eb:a4:af:0d:66:31:aa:de:1f:4f:47:5d:
                    42:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E8:6E:B2:6E:7A:62:56:CD:A5:AA:C6:2C:6C:A4:40:1B:9B:99:9B
            X509v3 Authority Key Identifier:
                keyid:80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:55:55:b4:54:ae:35:c4:dc:e9:1c:6c:6d:89:44:8a:af:85:
         8c:fb:0b:81:a4:94:d7:bb:7b:03:68:cd:1e:00:4f:58:29:87:
         a8:13:cb:e7:13:a0:57:8b:66:23:a0:bf:e7:e3:31:f5:83:0b:
         70:6b:7d:d0:5c:02:d3:9d:4b:61:3d:18:24:03:1f:31:1d:f0:
         a1:ab:46:50:69:e1:b9:f5:49:af:71:07:73:89:42:bb:0a:e2:
         ac:c6:bd:98:24:dd:f9:f3:87:c3:8e:ad:73:3f:26:2d:be:1f:
         4c:88:72:81:b9:f4:3d:64:c2:2b:6b:59:d7:fb:69:11:2c:85:
         bd:08:34:46:ad:d5:c7:3f:2b:bb:1d:12:8f:06:0f:1b:f8:b9:
         3e:fb:54:39:7f:f7:e9:92:85:22:09:34:d1:81:d3:42:3b:b8:
         6c:1c:07:d8:92:59:e3:dc:ea:3a:31:40:ee:e9:89:2a:00:ca:
         7e:9e:36:c9:fa:81:c5:2a:41:a0:02:46:ef:1c:5e:d1:c7:0d:
         3f:f3:f1:f7:0a:f4:67:6d:c8:08:28:dc:c1:5a:83:7c:e0:d2:
         ed:95:fe:ee:96:8e:5f:6b:8c:aa:6a:5c:b7:eb:46:79:d8:e7:
         96:39:1f:1f:0c:4a:eb:fe:51:86:2a:1f:b2:c9:f0:6c:31:f6:
         77:a7:b4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----