Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft
File:                     HyAOBxBBRee6mHap0-55Kgc2TTY.mft (raw, json)
Hash identifier:          VhbdcJsepJureRTvGcFagwiC2YktBIZu4GpFMzDG3I4=
Subject key identifier:   0C:89:F2:DC:D2:E8:03:15:83:15:3A:24:AF:B0:7E:57:9D:E3:D4:8D
Authority key identifier: 1F:20:0E:07:10:41:45:E7:BA:98:76:A9:D3:EE:79:2A:07:36:4D:36
Certificate issuer:       /CN=1f200e07104145e7ba9876a9d3ee792a07364d36
Certificate serial:       01935688DD51278F28BBA7E7478BF415F88B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HyAOBxBBRee6mHap0-55Kgc2TTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft
Manifest number:          97
Signing time:             Sat 23 Nov 2024 01:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:30 +0000
Files and hashes:         1: HyAOBxBBRee6mHap0-55Kgc2TTY.crl (hash: 1R+0CFJdslhIOxWg3D4bvrXBXMQKtfYncmEJvXdCFLo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HyAOBxBBRee6mHap0-55Kgc2TTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:dd:51:27:8f:28:bb:a7:e7:47:8b:f4:15:f8:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f200e07104145e7ba9876a9d3ee792a07364d36
        Validity
            Not Before: Nov 23 01:00:30 2024 GMT
            Not After : Nov 24 01:00:30 2024 GMT
        Subject: CN=0c89f2dcd2e8031583153a24afb07e579de3d48d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d8:6d:31:aa:58:a8:3d:b5:f9:00:37:27:82:
                    b3:8d:08:c6:48:db:5f:c3:ec:6d:4e:73:4e:62:9e:
                    9c:c4:6f:92:9c:77:78:11:ce:cb:60:0d:c7:57:c3:
                    f7:56:cf:8c:61:8f:67:e5:8b:a0:94:a4:a0:77:4d:
                    e3:46:81:ab:bd:99:5b:e8:fd:44:86:cf:cd:57:81:
                    fc:f4:e1:6e:83:99:29:46:9a:ce:e5:39:bc:83:51:
                    3a:a3:cd:3a:6a:2b:a3:8d:74:dc:e6:a0:2c:d1:df:
                    d3:e6:0d:0d:eb:8f:75:6d:a2:34:50:b3:fb:76:52:
                    1f:43:30:ef:14:da:e8:15:97:93:34:3e:cc:cc:85:
                    9a:38:6e:1f:32:36:e4:a2:f1:79:b2:02:a8:85:42:
                    88:73:9c:63:e0:00:a6:ab:64:63:09:dd:14:f3:f6:
                    ad:a0:ec:4a:b6:6a:9d:d3:09:0f:db:8f:1b:a6:d7:
                    57:be:98:e2:fa:5e:27:c1:38:24:18:ac:3f:ab:9b:
                    4e:a4:6e:9d:95:0a:b8:29:cc:e9:57:fe:af:d0:4b:
                    88:5a:31:c9:c7:73:9e:03:66:6b:f5:e6:ab:80:cb:
                    34:45:c3:4d:11:f7:23:6c:90:dc:d8:b6:76:03:38:
                    1c:e8:68:6a:92:3a:db:e5:6b:4a:2d:ea:b8:f9:a0:
                    f4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:89:F2:DC:D2:E8:03:15:83:15:3A:24:AF:B0:7E:57:9D:E3:D4:8D
            X509v3 Authority Key Identifier:
                keyid:1F:20:0E:07:10:41:45:E7:BA:98:76:A9:D3:EE:79:2A:07:36:4D:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyAOBxBBRee6mHap0-55Kgc2TTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:fc:2f:eb:53:f1:d4:31:9a:21:2f:0c:6a:8a:ea:d8:e8:74:
         88:2e:d2:92:f8:cc:7b:5a:7b:c6:81:70:2f:ee:18:1d:f4:4f:
         a6:7f:61:81:d9:9b:a1:4b:e8:d6:d4:b8:df:08:f9:a5:2f:c8:
         d5:06:30:7e:cb:ab:3b:f2:81:89:de:f5:cc:d3:fc:38:15:3c:
         35:05:37:32:b6:a6:b7:42:d5:5f:8a:b9:9b:84:85:c8:08:6a:
         07:d7:25:ac:61:c9:d4:25:46:b4:1f:88:8e:b5:d4:08:f3:0f:
         4c:87:1a:30:ae:d7:76:c8:45:7b:da:b8:01:0b:b0:72:97:23:
         60:3f:f2:c4:17:b2:f1:8f:e0:c5:57:27:0b:af:82:67:6e:22:
         b5:3b:e9:45:51:73:0f:96:ca:6c:21:78:63:c3:e7:a2:a3:6a:
         f8:f9:80:ae:34:68:d8:f5:03:93:27:4f:8f:a8:65:ea:61:9c:
         03:80:96:bf:f0:c1:47:8e:95:29:47:db:e9:03:03:30:eb:ed:
         c0:ff:ca:6f:a7:c2:2c:6a:62:61:4b:6a:bc:ef:f6:5b:6e:62:
         ec:70:34:dd:6c:fc:3a:20:5a:f8:97:f0:3b:a2:df:cc:02:81:
         0c:aa:97:21:17:bb:a4:6c:56:77:6a:87:99:57:5c:44:82:cb:
         c8:51:c5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----