Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
File:                     34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json)
Hash identifier:          RQfpmXydG04p5Kf4KxCcBZ/x0rqzXUGUMdtWPXkEwQ8=
Subject key identifier:   13:50:CE:62:61:CD:78:E9:C8:76:B9:01:2B:E5:94:4F:3A:BD:CA:AA
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Certificate issuer:       /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial:       0193647BC2A7E1C96033B173DB50631D91F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
Manifest number:          0259
Signing time:             Mon 25 Nov 2024 18:00:52 +0000
Manifest this update:     Mon 25 Nov 2024 18:00:52 +0000
Manifest next update:     Tue 26 Nov 2024 18:00:52 +0000
Files and hashes:         1: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: tiAu3qoiJY9bVf1WVskIEUHirJrw/xs3HGljtiPxCcM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:7b:c2:a7:e1:c9:60:33:b1:73:db:50:63:1d:91:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
        Validity
            Not Before: Nov 25 18:00:52 2024 GMT
            Not After : Nov 26 18:00:52 2024 GMT
        Subject: CN=1350ce6261cd78e9c876b9012be5944f3abdcaaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:64:3f:b9:c8:35:26:44:e5:42:f2:ed:7c:
                    cf:98:27:65:f2:fe:60:3c:23:a6:13:cf:f2:f5:2b:
                    d9:da:83:5a:57:c8:73:c7:94:46:9c:22:50:f5:22:
                    f1:e3:d0:31:5a:7e:02:c7:56:75:04:04:a7:73:0f:
                    b2:b4:b3:67:5e:43:c2:56:7d:85:16:88:e9:c0:2b:
                    48:2c:9f:b1:79:42:7b:58:3e:1f:e8:f8:e9:d3:c4:
                    8d:59:12:87:56:e2:ab:5b:36:f0:74:51:b0:31:76:
                    3d:42:1f:11:9a:de:95:41:3d:d0:1e:7f:5d:97:ee:
                    6a:d6:89:6d:6b:68:e9:d3:ed:dc:62:1c:b8:a3:ee:
                    10:2f:d7:7b:f7:bb:1a:ff:e5:0d:c9:48:93:14:c4:
                    5f:70:d7:58:61:70:82:77:d3:e3:ed:8c:53:38:e0:
                    0e:36:e5:2c:b5:cf:9c:81:d1:c6:55:b0:e0:df:02:
                    ab:f9:a9:b7:9e:8c:84:d0:c3:fc:6a:4e:5b:74:e4:
                    aa:54:dd:4f:77:8f:ab:2b:db:55:2e:b0:2f:3c:c2:
                    d0:69:4f:b3:e0:88:8f:a0:d4:8c:d9:ac:2d:56:d0:
                    b9:59:d6:cd:26:2f:fc:35:54:ce:ce:de:6b:e1:10:
                    75:b0:2c:f9:22:e6:30:b2:ba:3e:57:98:87:6c:ab:
                    81:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:50:CE:62:61:CD:78:E9:C8:76:B9:01:2B:E5:94:4F:3A:BD:CA:AA
            X509v3 Authority Key Identifier:
                keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:3c:58:7f:21:a5:f6:79:31:7c:48:6b:1d:05:63:14:b8:4a:
         79:03:27:45:4e:18:12:43:e6:8f:50:c3:e5:3d:b4:24:29:64:
         fe:90:01:76:3e:70:1f:98:39:e1:3b:63:b8:41:40:30:56:99:
         43:26:48:be:19:5a:e3:89:db:38:01:dc:a9:65:34:07:13:d4:
         6d:36:3f:6c:84:6f:0d:58:05:05:92:94:d9:34:58:48:ec:f5:
         c8:2d:8f:31:e9:c7:ea:42:d5:9e:ae:fd:91:e5:33:9c:66:14:
         80:fb:bc:d7:d8:28:e3:28:05:c8:f8:dc:12:7d:64:0f:5c:e1:
         5b:9f:7e:76:59:74:9d:cd:ad:a5:e8:56:2d:1b:cb:bb:99:06:
         6f:96:e9:1a:a2:e8:35:23:76:3d:8a:27:79:46:c1:63:49:14:
         d2:cc:1d:c0:40:f6:fd:ea:a5:8b:e2:1e:fb:3e:56:0e:0f:0d:
         77:51:ec:09:b7:78:2a:37:c1:a6:f9:39:da:98:b0:fd:5e:e2:
         76:62:86:8e:a0:b8:aa:bb:6f:bc:95:59:e7:8d:f1:45:da:62:
         33:30:56:a6:4f:ae:d0:88:4f:fd:23:58:03:ea:82:22:a4:9b:
         70:5a:22:c3:58:e2:7c:93:5e:cf:50:9e:0d:6d:42:8a:74:fa:
         db:30:a7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----