Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
File:                     VKxeRNRqy5VTReum426QYfjxbeE.mft (raw, json)
Hash identifier:          Nc/aBts+7P678CCbEkp91G38f5kAao86kIUGAug2cLU=
Subject key identifier:   93:A4:08:E4:C9:96:20:5C:AF:D4:E9:C0:7B:9B:53:57:96:22:C2:4A
Authority key identifier: 54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1
Certificate issuer:       /CN=54ac5e44d46acb955345eba6e36e9061f8f16de1
Certificate serial:       019369DAAB84393B59F500532841D894D412
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
Manifest number:          0D28
Signing time:             Tue 26 Nov 2024 19:02:38 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:38 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:38 +0000
Files and hashes:         1: VKxeRNRqy5VTReum426QYfjxbeE.crl (hash: s2nzb5oZ8R2aSqNQMqByNlxwHfGcH8UR+oqvYWgmKEI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:ab:84:39:3b:59:f5:00:53:28:41:d8:94:d4:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ac5e44d46acb955345eba6e36e9061f8f16de1
        Validity
            Not Before: Nov 26 19:02:38 2024 GMT
            Not After : Nov 27 19:02:38 2024 GMT
        Subject: CN=93a408e4c996205cafd4e9c07b9b53579622c24a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0b:a2:4a:24:c0:40:8d:cc:c2:b2:c0:7f:5c:
                    81:a5:3b:bf:2e:6d:38:c5:5d:31:0c:e2:c5:ab:0c:
                    84:de:0f:66:e6:f8:bc:f8:f7:ce:9f:07:95:00:68:
                    05:a8:23:0a:9e:7f:9f:be:21:02:c6:b6:65:37:f8:
                    10:9f:cb:f0:1c:d1:3b:99:87:3f:18:41:d2:41:f4:
                    b6:8f:df:97:a3:98:da:86:a0:d1:f7:0c:86:60:9b:
                    55:9a:1f:6b:2b:ac:6e:a2:af:8e:69:69:ad:c9:8b:
                    3f:3c:98:e8:7c:a3:72:46:fd:ed:87:2f:d2:b2:c1:
                    27:e7:83:36:72:e4:d9:4a:71:42:4f:8a:c8:b2:d7:
                    5b:8e:a4:1f:f3:7b:b7:39:14:f8:92:8b:50:f9:f7:
                    97:5f:96:0c:6b:85:92:7f:a6:e0:ac:d3:ef:b8:b1:
                    c9:49:08:5d:76:e6:17:95:ea:81:83:cc:4e:cb:d4:
                    2a:2e:94:e8:f6:c9:4a:42:5c:08:d2:83:61:b7:7c:
                    98:ef:8e:6c:67:5e:af:af:3b:42:06:82:42:ea:8c:
                    bb:48:e6:3e:ee:20:98:c6:21:93:a6:d5:de:bd:f5:
                    ef:d3:73:f3:df:8f:61:3d:af:25:8c:28:32:c2:77:
                    db:9b:99:87:78:d3:d5:6e:b3:4d:56:ca:0a:2a:7b:
                    9a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A4:08:E4:C9:96:20:5C:AF:D4:E9:C0:7B:9B:53:57:96:22:C2:4A
            X509v3 Authority Key Identifier:
                keyid:54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:e6:fa:54:9a:fa:17:6d:8f:ad:98:ac:4a:57:0c:b5:6e:4e:
         db:d4:8e:d4:4c:3e:8e:1b:07:19:8e:76:a4:33:22:de:65:ae:
         d3:aa:33:20:2a:71:06:21:c1:c6:36:a8:c5:0a:22:d2:62:09:
         d4:8c:1c:b7:f5:d8:0b:93:e3:e9:25:17:b7:8f:aa:d4:7b:10:
         50:0c:a1:37:71:37:b1:d1:c7:3d:6c:06:27:b2:01:b8:f0:ae:
         bc:6b:56:ec:37:82:76:c6:14:9f:0a:16:45:aa:d9:d4:b6:85:
         31:07:2b:f0:81:4a:f8:f5:04:b0:41:58:6b:7c:1a:13:7b:3b:
         32:c5:8e:4f:24:77:b6:32:37:b7:eb:8b:13:d2:33:e0:9c:04:
         de:d6:56:2f:eb:d8:d9:bb:dd:4c:cc:50:1b:62:68:9e:4d:d1:
         0f:05:cb:6a:76:df:b4:a3:15:61:7b:b0:43:81:21:04:48:cf:
         44:17:c0:25:1a:9b:df:19:84:c3:4f:df:e6:d5:12:34:2a:07:
         f1:a4:c6:08:7c:cd:8a:60:a9:dc:40:dd:e0:5b:4c:6b:24:e6:
         93:d7:c7:56:8e:3d:50:ac:5b:c5:b8:16:ad:dd:f3:80:0c:5a:
         13:fb:74:3d:a8:10:be:15:55:6a:64:c6:45:dd:5f:2d:0c:d1:
         07:5f:4e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----