Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
File:                     TVP4paBndE6P43yXwcxLiH7axyA.mft (raw, json)
Hash identifier:          zZZoK0J86ysuW2u0dJggr6oBcr8jJGLcjtuOvYbNM8o=
Subject key identifier:   DC:C3:77:8B:0B:75:ED:0E:36:83:22:0B:61:0C:72:E2:E1:F0:E2:0B
Authority key identifier: 4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
Certificate issuer:       /CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Certificate serial:       0193666A49913BA9759758BE6A5D10F36BC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
Manifest number:          12B9
Signing time:             Tue 26 Nov 2024 03:01:01 +0000
Manifest this update:     Tue 26 Nov 2024 03:01:01 +0000
Manifest next update:     Wed 27 Nov 2024 03:01:01 +0000
Files and hashes:         1: TVP4paBndE6P43yXwcxLiH7axyA.crl (hash: Bgg0HLYzXX+bIucVOv+3nYUt9l54Np0Q3klt7c3AeNI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:66:6a:49:91:3b:a9:75:97:58:be:6a:5d:10:f3:6b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
        Validity
            Not Before: Nov 26 03:01:01 2024 GMT
            Not After : Nov 27 03:01:01 2024 GMT
        Subject: CN=dcc3778b0b75ed0e3683220b610c72e2e1f0e20b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6a:b4:69:37:4c:b7:9e:75:c4:24:5f:08:03:
                    f0:86:54:12:a0:ac:1a:a6:6e:3d:43:ab:df:7c:54:
                    f4:ef:86:a4:a1:55:9e:e2:bc:42:a2:3c:b9:b9:60:
                    0b:04:06:bd:93:55:e0:bb:b5:31:41:40:6c:47:41:
                    03:0e:4b:71:21:2c:a0:c8:5b:5d:ca:f0:36:a2:1f:
                    5e:33:2a:06:9f:12:dc:7c:6d:1a:a9:f2:4a:eb:af:
                    71:42:38:d2:06:11:ad:af:5b:6d:bc:82:89:d7:e8:
                    5f:95:86:52:47:db:f1:95:9c:84:69:06:ce:81:dc:
                    6c:2a:40:9b:82:6b:83:ea:b7:1d:fb:e8:e7:d6:75:
                    10:c1:9a:dd:0b:0b:5a:c7:2e:04:0e:bb:fc:a7:2d:
                    af:de:bd:1e:14:df:81:9d:3b:86:15:20:73:7f:40:
                    6a:5e:89:c8:b5:b4:b5:75:70:2e:97:da:c3:b9:26:
                    7c:2b:4e:70:83:c8:7c:55:35:fc:f0:59:e7:e1:fe:
                    c1:af:bf:2d:5a:66:70:d5:8a:04:e8:b0:18:70:62:
                    6e:29:fe:1f:bf:da:b6:1b:4a:a6:30:f5:7b:f3:5d:
                    c6:31:32:db:04:c6:38:d0:da:67:f2:d5:e9:a8:1e:
                    1d:2f:7a:5a:d7:58:07:5c:89:3e:5e:c8:9e:35:8b:
                    58:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C3:77:8B:0B:75:ED:0E:36:83:22:0B:61:0C:72:E2:E1:F0:E2:0B
            X509v3 Authority Key Identifier:
                keyid:4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:a1:2f:6a:e4:4f:02:17:e9:c6:fa:aa:c0:b7:4c:f7:63:71:
         19:9c:32:e6:ce:16:2f:20:11:48:b3:db:b5:b8:f8:1f:73:c4:
         da:4a:f4:44:70:e9:2d:0f:0a:14:bd:78:f1:7f:a8:29:17:64:
         be:4a:6f:77:b2:9c:34:ba:d0:e0:74:ee:84:c1:aa:09:0f:82:
         5d:39:38:c5:21:ec:0b:8d:5f:36:e8:dd:65:2f:af:6f:11:f7:
         f5:20:3f:60:a5:6d:cb:13:8b:eb:d2:52:43:01:21:9d:e3:5b:
         e1:9b:07:29:c3:15:ed:aa:d5:b5:f6:91:25:e3:87:30:b5:de:
         d0:2d:d2:63:92:67:05:7f:8d:9e:fc:0b:99:35:93:9a:ce:7f:
         b2:98:ba:dc:d7:6f:f2:c2:59:26:9c:61:7f:e3:88:a2:c0:fa:
         50:f7:1a:bb:a1:97:04:ad:c8:01:cf:89:09:f1:1d:85:53:98:
         0b:62:0d:19:f0:48:96:ea:c2:fa:c1:87:d8:5f:5c:0e:48:e2:
         43:e7:ff:aa:32:68:0b:3b:a5:d7:74:e8:43:ca:c3:6f:23:da:
         78:ad:71:58:37:da:51:93:ec:4d:81:c1:16:cf:8d:09:71:6f:
         5a:41:33:d6:b7:a0:a7:68:2d:9b:ce:8b:a7:10:96:95:ca:44:
         9d:d4:36:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----