Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
File:                     DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft (raw, json)
Hash identifier:          BqV8paBJVYCXPitm5wHQty5JzrPMhP44ZYrR84nuDuk=
Subject key identifier:   46:8E:CE:65:14:0B:52:98:8A:23:9B:0D:03:B8:BB:70:6A:FE:C0:76
Authority key identifier: 0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
Certificate issuer:       /CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Certificate serial:       01935651DA0EAB23741AFDE2503055DA9EBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
Manifest number:          0152
Signing time:             Sat 23 Nov 2024 00:00:24 +0000
Manifest this update:     Sat 23 Nov 2024 00:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 00:00:24 +0000
Files and hashes:         1: DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl (hash: 1HPG4ClI03ay8H8e+y6iVRJXCTO6ONu9iFEq1knWGFg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:51:da:0e:ab:23:74:1a:fd:e2:50:30:55:da:9e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
        Validity
            Not Before: Nov 23 00:00:24 2024 GMT
            Not After : Nov 24 00:00:24 2024 GMT
        Subject: CN=468ece65140b52988a239b0d03b8bb706afec076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2f:28:03:a8:22:b4:a7:89:5b:f1:d4:24:30:
                    62:89:98:cf:52:cc:d2:f3:4e:3d:64:bd:88:07:1e:
                    65:d5:d4:6f:6f:c9:7c:6c:2c:28:d6:ca:5f:f2:d5:
                    6e:a9:65:73:64:64:ec:34:65:01:be:07:66:16:6c:
                    3e:d1:64:1d:92:5d:bb:e1:8d:ed:a1:ff:71:25:f4:
                    0b:4c:a0:a8:8b:89:5e:6b:61:a2:3c:dd:1b:6d:1b:
                    63:39:6a:10:27:dd:ec:e6:0c:6b:6d:ac:63:5d:a7:
                    e8:b2:02:31:45:78:dc:3e:cc:01:cd:b2:d5:68:a8:
                    07:e8:73:20:3c:47:f5:4d:35:52:af:da:eb:37:7f:
                    4f:fa:67:45:2a:25:e5:50:d5:cc:08:e7:2a:fb:88:
                    aa:73:7e:fa:b0:55:72:74:61:97:6f:41:44:45:a8:
                    09:04:40:74:d4:8e:7e:04:d5:e4:19:fd:72:00:66:
                    d2:3c:ff:19:f7:5d:cf:41:19:41:1c:36:f6:2f:39:
                    e0:b3:93:06:8e:86:d4:ce:4d:f8:dc:86:10:c0:e0:
                    71:ac:45:07:da:ef:de:6b:cf:e2:f6:00:c1:60:b3:
                    e8:1b:08:cf:0b:d4:05:70:f6:46:1c:5d:92:2f:fa:
                    f4:41:44:8e:17:21:97:27:42:eb:80:b1:88:cc:93:
                    4f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8E:CE:65:14:0B:52:98:8A:23:9B:0D:03:B8:BB:70:6A:FE:C0:76
            X509v3 Authority Key Identifier:
                keyid:0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:d4:77:3b:c5:55:1d:37:f9:c1:38:11:49:7d:24:80:ad:73:
         bd:7e:28:20:ad:3b:bd:71:f1:0f:49:f7:a2:2a:81:a2:91:3c:
         f3:91:05:c3:80:38:1c:16:1f:b5:27:b5:41:3c:91:4d:cb:13:
         3b:0a:d9:68:fd:e3:0f:d6:44:55:ae:5c:66:be:1c:de:13:e9:
         9e:3c:03:3d:5f:fe:d4:29:30:a4:f5:9f:0c:7b:f7:5f:0f:7f:
         9a:13:bc:ec:06:73:58:0b:5a:a0:2b:43:b3:a5:64:9e:ab:16:
         91:60:53:3c:fa:74:99:39:7d:4b:21:02:62:9c:75:af:01:b0:
         46:d5:9b:3d:9c:4c:b3:c6:8f:ea:3b:b4:f4:07:16:d5:0f:9b:
         c1:ca:9d:50:49:0b:d3:56:b8:b4:1f:89:c0:88:42:7f:b7:97:
         98:da:bf:9b:4b:c2:a5:7d:69:d4:38:b8:bd:1c:c6:eb:49:47:
         91:7e:b5:6e:e5:7b:16:83:5c:d5:0c:db:98:1c:d4:3a:3d:cf:
         be:09:9a:57:64:d0:0a:88:51:b6:99:ef:a8:d4:2b:10:96:4b:
         d1:e1:e3:0c:8c:85:14:2e:96:a2:dd:6b:00:32:37:28:33:76:
         54:74:30:a9:b6:15:33:2b:83:39:9c:24:83:c9:c6:50:a9:40:
         23:6e:4a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----