Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
File:                     hplEyiVUvOj0uL_HXaWKjwhdX4E.mft (raw, json)
Hash identifier:          zItc3oiV4z031ySoUyfOCgxX/tADH30BjzI6Bn+fR/o=
Subject key identifier:   FC:94:E5:58:22:6B:F2:92:36:D9:AE:CA:E8:D4:F4:42:7F:C1:98:53
Authority key identifier: 86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81
Certificate issuer:       /CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81
Certificate serial:       019356896B1D5202B680CBA9069DB8006E7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
Manifest number:          136D
Signing time:             Sat 23 Nov 2024 01:01:06 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:06 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:06 +0000
Files and hashes:         1: hplEyiVUvOj0uL_HXaWKjwhdX4E.crl (hash: eHTldCx7uRMVJ0gKetRL31iyTiVVy1bdxyeImwCwnwE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:6b:1d:52:02:b6:80:cb:a9:06:9d:b8:00:6e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81
        Validity
            Not Before: Nov 23 01:01:06 2024 GMT
            Not After : Nov 24 01:01:06 2024 GMT
        Subject: CN=fc94e558226bf29236d9aecae8d4f4427fc19853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e6:a2:97:5b:89:af:58:b7:73:02:37:a0:f3:
                    7a:87:2f:da:3c:33:b6:79:84:57:17:27:66:b0:1b:
                    97:d9:e1:1f:85:6b:98:a1:5f:f0:6a:2c:20:ba:86:
                    cb:56:df:3e:72:ea:25:b1:8f:ca:fa:85:92:f4:48:
                    24:41:32:2d:7a:70:40:a2:74:be:b8:f8:c0:6a:e7:
                    8f:f0:b4:24:10:52:81:40:d7:36:4d:5b:e8:ce:7c:
                    5d:58:91:33:df:0d:c4:1f:e0:d7:45:2d:59:d4:5e:
                    c7:6c:6c:cf:49:be:ef:a2:80:03:00:42:65:ba:8b:
                    72:2a:82:89:52:33:a6:7f:c3:27:db:73:7a:64:f7:
                    0f:72:bf:23:64:c1:09:11:fe:1a:c1:eb:11:bb:2c:
                    ec:a6:77:8b:1b:f6:9d:40:9e:ac:07:7e:19:12:ca:
                    ca:08:4c:fc:b6:b5:89:e0:df:1d:f5:59:ed:b3:fa:
                    5e:e5:89:9e:cc:ff:07:38:bc:d2:8c:2a:89:70:e3:
                    cc:1d:2e:6e:d4:5f:1e:da:e7:7b:69:37:6d:17:5c:
                    8e:b4:92:57:7a:de:e5:03:17:54:a8:f2:e9:65:d1:
                    18:ca:af:ef:30:e9:9a:df:a0:4b:ca:ed:8c:44:82:
                    3f:56:2d:fc:3f:0f:47:fd:db:3c:c9:8c:9c:e7:6f:
                    36:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:94:E5:58:22:6B:F2:92:36:D9:AE:CA:E8:D4:F4:42:7F:C1:98:53
            X509v3 Authority Key Identifier:
                keyid:86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:83:d1:92:9b:6c:7a:56:60:08:45:38:14:a9:63:e2:0c:7c:
         79:77:98:38:19:93:6c:29:ca:e3:09:70:c8:d0:be:21:4c:e9:
         96:25:d8:f7:47:44:4d:a7:65:31:7d:0f:59:88:c5:02:1d:da:
         b5:73:a3:38:79:52:dc:2d:33:90:3b:a0:63:ab:b9:b9:11:f7:
         a8:ef:1e:47:19:48:56:30:e2:6b:04:5e:e1:0a:d8:f5:a0:17:
         ca:da:83:71:ae:df:77:9f:33:62:2a:6c:5c:b0:47:6b:b1:ed:
         d0:86:1d:1a:9b:ef:1f:9f:a6:ce:a7:46:2d:46:8c:36:a3:11:
         0c:85:d4:ae:9e:06:b6:22:de:2e:ba:91:e4:ae:7f:39:22:90:
         fb:2f:54:7e:50:c9:bc:57:d4:da:28:03:fb:ff:ac:f8:31:17:
         c3:e6:46:21:eb:ef:4c:6e:b5:b7:6e:ea:a5:ea:25:58:20:75:
         5d:c8:c8:72:97:c2:56:20:ce:ee:2d:12:df:fb:33:0a:ef:32:
         9a:04:4b:29:9c:5c:2a:b9:f3:b0:30:0c:2a:45:d7:37:b7:a6:
         c3:a7:23:50:3a:18:3f:31:b3:78:6e:22:a4:cb:3f:a6:4c:d1:
         4e:7b:67:d8:96:5d:10:bd:3a:30:8f:ea:81:65:fb:24:46:aa:
         9e:79:f0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----