Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
File:                     aXRbBMvmNgtewTo67LMvuIXUhvs.mft (raw, json)
Hash identifier:          d1vPkVDFpogajEiGvI9WYHZ0NIh1uQbLvlhi1jxODTc=
Subject key identifier:   16:A2:92:69:1B:A3:DE:51:3A:CB:7B:AA:99:CD:4A:92:6F:7E:36:53
Authority key identifier: 69:74:5B:04:CB:E6:36:0B:5E:C1:3A:3A:EC:B3:2F:B8:85:D4:86:FB
Certificate issuer:       /CN=69745b04cbe6360b5ec13a3aecb32fb885d486fb
Certificate serial:       019356F6E38AD3EF0876A893A930B2AAED9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXRbBMvmNgtewTo67LMvuIXUhvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
Manifest number:          119E
Signing time:             Sat 23 Nov 2024 03:00:40 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:40 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:40 +0000
Files and hashes:         1: aXRbBMvmNgtewTo67LMvuIXUhvs.crl (hash: VK306vH+7M7pMkZdOj+057T8jly+uUp+gV1i+5uf3dg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXRbBMvmNgtewTo67LMvuIXUhvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:e3:8a:d3:ef:08:76:a8:93:a9:30:b2:aa:ed:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69745b04cbe6360b5ec13a3aecb32fb885d486fb
        Validity
            Not Before: Nov 23 03:00:40 2024 GMT
            Not After : Nov 24 03:00:40 2024 GMT
        Subject: CN=16a292691ba3de513acb7baa99cd4a926f7e3653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:69:40:6c:e4:33:88:6f:c3:27:56:f7:99:1a:
                    5b:56:d0:de:42:28:c8:16:3b:a4:d7:e7:ea:45:13:
                    99:50:ab:74:47:b1:5b:cf:84:ae:e8:37:b9:6e:05:
                    57:95:a2:cc:78:d3:c6:48:9d:6a:7d:87:7e:f8:3c:
                    f0:c2:b6:7a:d7:9e:43:c8:40:40:42:87:9d:eb:57:
                    a7:d2:54:6d:cf:a8:34:6f:a4:3b:26:f8:cf:53:4b:
                    b0:88:cc:9d:24:82:4d:9f:4a:a7:f0:5d:db:2e:ae:
                    98:e0:d6:25:4f:d2:32:97:b5:55:dd:7f:28:37:9b:
                    01:be:ce:a8:98:2c:db:50:fe:72:ef:76:9c:8a:12:
                    6b:23:87:6e:8a:4a:39:00:1b:39:41:e7:06:35:3a:
                    a4:f6:b0:69:4d:d6:64:52:d7:d6:5d:f4:eb:dd:2f:
                    af:25:95:e6:43:3c:18:d0:9e:fc:3f:f7:67:19:0d:
                    34:be:3f:2a:da:27:52:b6:e6:86:27:5b:51:ae:43:
                    a0:85:1e:4c:e9:d5:02:92:d9:6f:cd:2a:63:b2:1c:
                    bd:5e:22:6f:94:84:a0:58:ef:70:51:02:84:b6:b8:
                    e1:f0:d0:4b:63:09:f4:d3:4a:45:4a:6c:22:a3:e9:
                    ae:ea:2b:cb:5c:ed:07:93:c9:71:28:df:56:96:c4:
                    85:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A2:92:69:1B:A3:DE:51:3A:CB:7B:AA:99:CD:4A:92:6F:7E:36:53
            X509v3 Authority Key Identifier:
                keyid:69:74:5B:04:CB:E6:36:0B:5E:C1:3A:3A:EC:B3:2F:B8:85:D4:86:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXRbBMvmNgtewTo67LMvuIXUhvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:bd:c6:5f:8b:87:73:ad:48:7c:fb:ea:59:ba:87:6f:2f:8d:
         e1:28:d4:eb:5f:6d:b9:4b:05:41:0b:35:cb:28:54:79:c0:a1:
         44:37:c6:35:18:8e:c6:44:12:33:f7:63:e6:cb:34:92:74:5f:
         76:c1:82:c5:11:f1:8b:70:de:31:25:ad:1e:f0:09:b5:e0:29:
         0d:a4:10:ed:47:50:e1:48:be:56:14:81:d7:86:48:7d:69:a9:
         f2:70:4e:57:de:c3:8c:33:57:bb:05:a5:fb:45:35:b1:a1:7f:
         b8:72:b2:e2:c4:18:06:05:86:14:b5:1e:56:44:6b:82:5c:e9:
         4b:11:f1:52:8c:24:62:9a:28:bf:88:75:97:fa:d3:03:9a:e2:
         3c:38:26:34:ef:7f:03:47:de:a0:94:93:0a:62:10:11:4a:5b:
         b9:26:d9:f9:c8:6d:ea:97:1d:84:99:96:36:98:f4:77:f3:cf:
         a1:12:19:f9:ac:90:ab:a7:a2:af:40:8f:a1:d8:6f:80:b4:1d:
         63:22:9f:e7:7a:d4:4a:bc:d7:da:67:24:59:62:66:49:13:12:
         56:af:17:15:db:c5:73:6b:65:7c:22:06:a0:0b:d7:fd:74:4c:
         a4:f5:04:20:9e:33:76:b4:2b:3b:c9:0a:e6:b0:00:14:fc:23:
         17:bb:02:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----