Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
File:                     4e2SJYT2My2woOpx4XX2ql6NN54.mft (raw, json)
Hash identifier:          sA2W/hkfI7d+9Z8vlAmOc6NWmXpgYJIS1xV7A5soegA=
Subject key identifier:   AE:B1:6A:FB:EB:13:E8:B8:18:65:01:BB:05:30:71:B0:A7:57:DF:64
Authority key identifier: E1:ED:92:25:84:F6:33:2D:B0:A0:EA:71:E1:75:F6:AA:5E:8D:37:9E
Certificate issuer:       /CN=e1ed922584f6332db0a0ea71e175f6aa5e8d379e
Certificate serial:       01935689A14AA960CFF02E95054BABE2ECCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
Manifest number:          04A5
Signing time:             Sat 23 Nov 2024 01:01:20 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:20 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:20 +0000
Files and hashes:         1: 4e2SJYT2My2woOpx4XX2ql6NN54.crl (hash: reuJQvMFmdZQO6DiTeQibKgxw0wrtwirlQTVE5RrlBM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:a1:4a:a9:60:cf:f0:2e:95:05:4b:ab:e2:ec:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ed922584f6332db0a0ea71e175f6aa5e8d379e
        Validity
            Not Before: Nov 23 01:01:20 2024 GMT
            Not After : Nov 24 01:01:20 2024 GMT
        Subject: CN=aeb16afbeb13e8b8186501bb053071b0a757df64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:03:2a:aa:64:ea:90:cc:82:92:89:69:03:2d:
                    e2:d4:a8:44:76:d7:95:e4:ca:4a:ff:f5:15:c5:5a:
                    9b:ff:d7:9e:5f:01:0a:77:90:ee:58:b0:2c:87:02:
                    e3:4f:40:d5:43:3e:a0:26:8f:f7:02:36:42:bb:62:
                    97:db:6d:e6:cc:52:f1:d2:aa:ab:dd:ad:a3:f9:77:
                    9b:82:1e:ee:3f:4f:33:2b:67:78:97:c6:61:95:b7:
                    2a:cf:ac:eb:72:92:39:4c:83:ec:92:33:09:66:6b:
                    5c:07:4d:98:b5:11:6c:0b:17:d8:08:52:9c:66:73:
                    99:25:b9:96:e6:a9:e0:27:2c:d3:59:dd:71:6f:a0:
                    0a:2c:fe:59:99:e1:14:e6:64:9c:3e:e8:25:36:ab:
                    d3:27:99:e1:c9:ad:71:e8:6c:90:ad:c2:2b:7a:77:
                    9c:dc:53:d0:6b:84:83:ec:33:e9:51:ad:55:63:f1:
                    2f:60:a4:49:8c:db:fa:cc:1d:c0:d3:f1:75:d9:6d:
                    1a:b1:27:2f:3a:f2:8c:04:a2:11:32:ae:c5:2f:d5:
                    88:24:02:ba:0c:4c:0e:dd:d6:24:8b:74:4f:40:b8:
                    24:82:77:9f:cb:48:00:1f:e7:d7:24:b0:50:67:01:
                    20:05:56:a0:d0:1f:fa:d6:b4:40:f5:4f:54:2e:bf:
                    68:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B1:6A:FB:EB:13:E8:B8:18:65:01:BB:05:30:71:B0:A7:57:DF:64
            X509v3 Authority Key Identifier:
                keyid:E1:ED:92:25:84:F6:33:2D:B0:A0:EA:71:E1:75:F6:AA:5E:8D:37:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b7:dc:54:3d:3f:9c:91:5e:98:8c:ad:bc:25:af:e0:63:97:
         b5:c4:a1:42:4e:6d:ec:c9:42:89:c3:02:46:89:49:df:d4:9f:
         aa:3b:36:04:09:c0:2a:04:43:0e:16:f0:78:3b:08:b0:60:a9:
         23:a0:14:26:4d:ce:cf:69:0d:d2:0c:02:e1:92:57:f3:41:a4:
         77:92:82:19:42:c8:1b:16:a0:7b:9d:5d:26:f8:b1:91:10:cc:
         42:79:27:e4:5e:95:b4:2a:0a:94:93:71:0f:9c:41:59:e6:7a:
         f8:d9:a2:76:eb:2d:f3:ec:29:13:8e:2f:2b:0c:80:bb:c5:83:
         f6:93:82:e6:a7:5a:a4:46:1c:89:09:be:99:20:af:23:2f:7d:
         c6:08:c5:20:f1:4d:40:af:ae:2d:0e:dd:a6:b0:2a:96:b4:8c:
         a9:1e:64:af:71:c8:0a:7d:16:4e:66:b9:f6:6c:ce:62:ac:3b:
         a5:fa:b7:c6:8a:17:66:6c:7a:04:b0:d9:50:95:b2:b3:c5:72:
         a4:e5:7a:b7:5e:c2:04:1e:6a:8c:2d:d7:83:f2:aa:3e:9c:c6:
         86:6a:67:0b:0e:8d:98:c8:fa:54:16:b6:28:56:6a:fa:02:3e:
         0d:31:ad:bf:0c:64:02:df:f1:d6:24:65:13:7c:07:35:05:f4:
         1e:4b:40:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----