Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
File:                     MU0IhXjsDimwS0PpAUk1hnJjZP0.mft (raw, json)
Hash identifier:          mqiTQ61b7bZgjbXIFWpSs4ZTWb0VgPvYgwEC4GujJ78=
Subject key identifier:   DA:3E:A0:BF:CA:D1:4F:CE:0F:D0:42:7C:32:DA:AD:AD:E5:D3:16:7C
Authority key identifier: 31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD
Certificate issuer:       /CN=314d088578ec0e29b04b43e901493586726364fd
Certificate serial:       01935877D9F4D171028B1272A97530F92549
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
Manifest number:          10AA
Signing time:             Sat 23 Nov 2024 10:01:09 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:09 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:09 +0000
Files and hashes:         1: MU0IhXjsDimwS0PpAUk1hnJjZP0.crl (hash: I+xq7hw8y25vrc6E6BO7J0h7DJFL6ZlAWkS5507J43w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:d9:f4:d1:71:02:8b:12:72:a9:75:30:f9:25:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314d088578ec0e29b04b43e901493586726364fd
        Validity
            Not Before: Nov 23 10:01:09 2024 GMT
            Not After : Nov 24 10:01:09 2024 GMT
        Subject: CN=da3ea0bfcad14fce0fd0427c32daadade5d3167c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0f:5c:78:89:99:29:9f:e3:d2:f5:be:dc:8f:
                    6b:53:81:32:01:90:15:a5:32:3a:16:e9:dc:f2:cd:
                    f0:16:74:e4:87:b4:e9:e1:d3:ff:f4:bf:cd:01:49:
                    ac:d6:be:f2:31:57:8f:ae:ed:69:46:41:3c:a7:69:
                    d3:13:3b:24:08:7a:21:5f:32:90:d7:6d:21:ed:16:
                    92:c3:41:2c:01:9c:6e:5e:b4:e4:97:c2:74:06:5f:
                    1a:26:41:31:2e:f9:a7:fd:77:f1:b2:f0:f1:d8:97:
                    ea:6d:28:ff:ef:70:08:a8:8a:47:b4:54:42:48:57:
                    a6:3b:90:3b:c6:ab:29:31:ed:8f:2e:a5:e2:e8:ad:
                    43:ae:68:5b:13:70:1e:eb:4e:40:01:f9:5b:9f:fb:
                    d3:73:87:d3:b2:91:21:02:8f:a5:e2:ee:03:3a:16:
                    53:2e:c6:0e:da:0b:c1:10:3c:17:6a:a9:b1:96:57:
                    3e:69:6c:24:67:d4:cc:80:75:95:37:8f:5b:01:e7:
                    53:35:ee:02:68:d7:15:f7:ee:77:13:07:31:d2:3f:
                    ad:80:7c:f5:20:a1:1e:e0:df:a7:ef:c5:12:f8:8d:
                    eb:79:ae:cf:85:6a:80:8b:c8:5f:c6:c1:28:c8:bf:
                    d4:b6:75:e0:7d:06:70:fe:d0:55:1d:50:a6:8f:4a:
                    78:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3E:A0:BF:CA:D1:4F:CE:0F:D0:42:7C:32:DA:AD:AD:E5:D3:16:7C
            X509v3 Authority Key Identifier:
                keyid:31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:5f:8f:42:55:1d:e6:49:cd:2f:92:cf:fe:54:76:78:da:17:
         ab:ce:db:ff:89:7f:52:a9:8f:20:99:92:bf:3b:ad:7d:4b:d5:
         ec:a3:94:5d:e9:50:0f:bf:2a:20:10:d9:ac:3a:09:d6:ad:44:
         f3:24:77:09:53:cf:3e:86:e5:dd:27:b5:01:83:c3:3e:83:c7:
         e5:2b:40:be:c7:44:c5:31:a3:f6:ba:58:ed:24:ba:43:b0:67:
         60:24:5a:60:41:a2:71:83:3b:77:c6:a8:98:5f:c2:3f:a7:7d:
         cf:d7:df:01:59:e8:a4:a5:a6:24:0e:ee:07:bc:05:48:f7:71:
         f4:a3:66:17:79:f5:77:5a:b4:a7:ab:49:1d:79:49:f0:a4:38:
         7b:06:6c:38:de:e8:75:c8:0d:e2:76:f2:77:6d:2b:07:94:e6:
         2c:f6:7c:88:03:bc:2f:1a:c3:33:cf:18:2a:85:3c:98:47:6b:
         eb:96:6c:c9:0b:c8:64:79:91:78:3f:a9:14:df:a9:3c:48:f8:
         af:14:71:c4:16:d4:10:1b:60:d7:74:b2:8c:f7:4b:05:c3:49:
         3c:d5:32:e9:27:e9:bf:00:02:37:ac:05:d2:b8:c1:7d:d7:2b:
         ec:b8:87:60:2b:79:45:18:56:a0:85:fc:a1:f3:90:e4:91:04:
         77:0c:f3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----