Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
File:                     uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft (raw, json)
Hash identifier:          Yd+kA+5ovxv905K7EiVOCVrACHjT0P/QAzQqnFgA74w=
Subject key identifier:   A3:90:6F:0D:D2:30:BA:29:F3:F5:49:56:B1:A1:94:B8:2D:43:20:8B
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Certificate issuer:       /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial:       019357D25B9883B9235D577B0AE5CEDE52EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
Manifest number:          2B
Signing time:             Sat 23 Nov 2024 07:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:23 +0000
Files and hashes:         1: uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl (hash: AV7tfZP+WPjivmM6s/ome27m399NXkse49ob/86+bbw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:5b:98:83:b9:23:5d:57:7b:0a:e5:ce:de:52:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
        Validity
            Not Before: Nov 23 07:00:23 2024 GMT
            Not After : Nov 24 07:00:23 2024 GMT
        Subject: CN=a3906f0dd230ba29f3f54956b1a194b82d43208b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ce:a2:20:37:1d:3c:1a:c6:b9:76:68:ef:c2:
                    ed:ab:f2:25:7f:e9:3a:5f:f6:0a:e3:6d:d9:c6:1e:
                    96:98:ee:7e:68:b6:7e:99:a0:7b:e5:45:30:93:92:
                    0e:09:42:78:de:f0:05:c6:82:8b:f2:88:8a:54:a9:
                    e6:d8:6a:c6:5e:c9:b3:2e:55:e6:04:d4:58:5c:8b:
                    d5:d3:bb:13:3c:2a:a5:76:83:29:6e:bc:c5:01:46:
                    9f:67:1b:a7:72:74:db:54:17:41:79:4b:c9:29:a6:
                    8a:7e:91:2a:59:f2:92:66:ac:41:7c:48:2f:05:1f:
                    56:b9:52:1e:38:51:7e:2b:bc:a3:4a:b7:ef:38:1d:
                    13:7f:2b:e1:4c:aa:7d:cf:83:b9:48:80:ff:c7:b8:
                    36:27:19:c8:99:f8:45:47:87:20:ce:12:51:0d:01:
                    9d:32:d8:ea:ff:0b:26:d2:bb:0f:c7:90:1a:96:54:
                    8b:b3:dd:74:cf:4e:9c:44:1e:a3:24:06:79:58:d8:
                    1b:77:b2:9d:64:bb:c3:64:46:4b:7a:90:64:79:70:
                    38:7c:69:a4:b2:e7:5c:be:68:cc:42:42:5b:09:72:
                    ad:9c:8e:78:e0:15:33:fd:81:af:29:94:2d:17:6d:
                    4e:87:eb:c4:fc:d9:d6:6b:8f:c4:04:7f:82:bb:2a:
                    5e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:90:6F:0D:D2:30:BA:29:F3:F5:49:56:B1:A1:94:B8:2D:43:20:8B
            X509v3 Authority Key Identifier:
                keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ac:fa:1c:2c:28:d3:cd:1b:d0:67:b8:e4:7d:47:78:30:54:
         45:ed:fc:6e:51:60:82:f8:6b:b3:42:d8:9e:07:64:94:7a:93:
         a6:fc:ca:e4:47:72:a4:62:ae:78:30:f4:ea:54:71:83:9e:37:
         29:a1:28:50:f2:59:11:9d:8f:40:5a:41:02:56:bb:e7:25:11:
         4c:49:db:fd:87:87:09:f0:2b:ab:3a:50:59:53:01:4c:4b:1c:
         cb:ca:2b:aa:0c:c6:30:76:09:90:08:c4:92:d1:ed:95:73:48:
         cd:d0:30:bc:58:ea:07:55:63:54:6a:c4:52:82:14:c3:17:09:
         eb:32:43:d6:0c:e3:53:88:8c:f4:56:1d:0e:ed:c5:4c:3d:43:
         07:dc:26:f2:29:37:03:df:15:6d:69:47:51:11:7b:e8:ea:4d:
         10:2d:24:4c:2a:67:4e:55:5e:1c:8a:b3:99:58:d8:5b:58:8b:
         4d:6e:a3:03:82:76:9b:38:04:62:d1:ce:dc:0a:51:13:92:5e:
         52:09:cb:b2:2e:11:54:d8:29:b5:f0:cf:d1:03:48:bc:3f:56:
         63:90:be:e8:27:92:8f:d0:29:48:bf:fa:0b:86:f4:e7:70:cc:
         5b:1b:bc:45:6b:7a:a4:3e:82:ce:f4:b6:a4:ec:38:1a:be:f0:
         39:16:b1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----