Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.mft
File:                     TitWhe45Z_zPVK8VDpg_D4AlWpI.mft (raw, json)
Hash identifier:          lvGr6yqhmUGvkak/jXkjZ2jbuPjMyXYzvGEBKHTR+eQ=
Subject key identifier:   7D:4B:82:C9:DA:A9:55:8A:51:12:A1:28:F9:D8:BC:28:B6:26:11:5F
Authority key identifier: 4E:2B:56:85:EE:39:67:FC:CF:54:AF:15:0E:98:3F:0F:80:25:5A:92
Certificate issuer:       /CN=4e2b5685ee3967fccf54af150e983f0f80255a92
Certificate serial:       019510C7BDC8DA86CA6FD73829A09204F078
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TitWhe45Z_zPVK8VDpg_D4AlWpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.mft
Manifest number:          084A
Signing time:             Sun 16 Feb 2025 22:01:20 +0000
Manifest this update:     Sun 16 Feb 2025 22:01:20 +0000
Manifest next update:     Mon 17 Feb 2025 22:01:20 +0000
Files and hashes:         1: TitWhe45Z_zPVK8VDpg_D4AlWpI.crl (hash: M6V8w+GlrRX8WvYD8wszHhBfMGQZCGtc/4bP6LkHknE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TitWhe45Z_zPVK8VDpg_D4AlWpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:bd:c8:da:86:ca:6f:d7:38:29:a0:92:04:f0:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2b5685ee3967fccf54af150e983f0f80255a92
        Validity
            Not Before: Feb 16 22:01:20 2025 GMT
            Not After : Feb 17 22:01:20 2025 GMT
        Subject: CN=7d4b82c9daa9558a5112a128f9d8bc28b626115f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:59:23:9b:a4:ce:e0:3e:ae:14:ba:19:01:6b:
                    b6:ff:d9:54:a2:3c:d8:69:24:07:39:61:ae:b9:69:
                    6d:60:6c:15:99:68:55:ce:33:ea:c1:3b:dd:11:cf:
                    a3:e5:43:de:d8:4f:5e:5e:ab:7f:87:7f:6e:72:1b:
                    fc:eb:16:80:89:63:e8:82:5a:24:12:de:5d:60:49:
                    d5:6b:a3:a3:d6:f1:b4:fe:6b:69:bc:85:1f:6e:ec:
                    84:bb:08:5c:38:67:5d:fb:53:33:2b:25:1f:83:d8:
                    31:d4:64:48:6e:b3:b4:81:24:a6:68:57:5a:9c:1c:
                    0a:99:e8:09:97:ce:f0:95:63:56:97:ad:c8:0f:89:
                    f7:e9:49:cf:7a:5c:b4:17:ef:f4:0a:d5:27:c3:be:
                    1c:48:f9:c4:b8:eb:e1:3c:43:5c:09:e3:05:8d:39:
                    20:7f:55:19:86:b3:6d:0d:15:39:5a:d5:5d:dc:b0:
                    01:f8:32:26:ac:06:10:d4:c4:de:06:e6:4a:d0:7e:
                    51:25:db:8b:d8:ba:58:87:e3:6b:8d:d7:7b:c0:99:
                    27:14:34:0a:a2:57:06:d8:97:84:b3:d6:0b:9c:aa:
                    b6:e6:e6:12:72:80:b9:ef:28:37:cd:84:a9:ee:b3:
                    45:df:e5:12:b0:78:09:95:b2:8f:49:ae:84:87:a6:
                    58:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4B:82:C9:DA:A9:55:8A:51:12:A1:28:F9:D8:BC:28:B6:26:11:5F
            X509v3 Authority Key Identifier:
                keyid:4E:2B:56:85:EE:39:67:FC:CF:54:AF:15:0E:98:3F:0F:80:25:5A:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TitWhe45Z_zPVK8VDpg_D4AlWpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:1f:2f:5a:85:ed:2c:8f:ce:d5:d8:22:b7:00:4e:11:27:cb:
         89:2b:c4:71:c8:65:b7:eb:2b:8a:54:b0:e4:a4:e2:d9:49:a6:
         32:a9:b1:dd:ad:c8:9e:0d:36:18:15:f1:a2:3c:00:c4:47:af:
         ec:56:53:75:02:ef:70:a4:93:40:ee:97:91:ad:7f:a1:47:d7:
         40:6b:d8:d0:8a:16:59:79:09:df:af:7e:d2:f0:49:ac:83:95:
         58:bc:07:a8:f4:59:ee:5d:52:ce:fc:32:2f:7b:b0:12:29:49:
         96:a1:db:e0:d2:13:3e:29:12:3f:19:bc:ed:68:52:27:40:e5:
         33:be:5e:ef:b2:79:af:ed:57:90:11:a5:d5:1e:3c:6a:9b:57:
         1a:b4:0d:02:e6:59:02:2e:ba:03:84:53:1f:87:d5:a3:aa:cf:
         4e:10:13:2c:db:96:57:30:d6:4a:4c:5f:8d:9d:a3:07:43:ef:
         8c:fb:b4:42:6c:c3:8a:9a:31:af:63:0b:b0:be:c3:31:6a:88:
         34:e8:c5:b2:00:4d:b4:3d:98:05:d9:87:78:c0:64:c3:42:55:
         75:f2:98:ee:50:4e:3e:31:71:73:40:11:3f:2b:25:42:d8:9c:
         68:6c:90:9f:a4:fc:7c:a9:8b:c6:28:a8:e9:bf:ef:95:b6:d1:
         1c:69:a7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----