Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
File:                     AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft (raw, json)
Hash identifier:          ijbeFjuxMLeoallABoW0P1DtB4ecwRo/3sLF1TGcabY=
Subject key identifier:   0E:20:51:A1:F7:38:D6:44:D0:6C:5D:EE:DA:E7:DD:B9:18:99:53:45
Authority key identifier: 03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
Certificate issuer:       /CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Certificate serial:       01935689B8E3FE483F2F7CD083B7B633FBBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
Manifest number:          02F0
Signing time:             Sat 23 Nov 2024 01:01:26 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:26 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:26 +0000
Files and hashes:         1: AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl (hash: OgV9rX2BZg/dR8t32VGeMrLrSwOWnoZgBn/p5lqRuSo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:b8:e3:fe:48:3f:2f:7c:d0:83:b7:b6:33:fb:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
        Validity
            Not Before: Nov 23 01:01:26 2024 GMT
            Not After : Nov 24 01:01:26 2024 GMT
        Subject: CN=0e2051a1f738d644d06c5deedae7ddb918995345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:21:10:00:b5:76:80:9b:ad:f0:f7:4a:ef:1a:
                    ce:ab:e1:1b:ad:c3:fa:6d:2d:96:04:89:39:0e:df:
                    ad:4e:58:87:b2:b7:8a:66:dd:2d:33:9d:2f:97:c4:
                    5d:31:20:95:2c:35:7a:26:1d:3e:ef:aa:5f:5e:4a:
                    61:5f:ed:0f:28:8d:8e:81:33:85:e9:e4:b8:2f:b9:
                    0c:0b:4c:7d:55:5c:84:cb:e5:bf:62:7a:1e:5b:b0:
                    e5:e8:04:91:77:1d:34:70:b3:cb:c1:dc:6a:b7:7b:
                    67:c2:c9:67:7c:06:93:d4:b5:ba:f5:82:6e:bc:d5:
                    30:c4:91:f9:85:85:ae:85:2a:c6:26:28:3a:4f:59:
                    58:54:55:07:13:ee:22:dd:75:f5:5b:4a:ca:30:8c:
                    3f:7f:71:4f:25:cb:79:a9:99:2c:ef:98:10:76:01:
                    2f:fb:36:55:6a:67:91:16:84:c8:8a:2c:70:5d:95:
                    78:63:01:c9:87:4e:3f:96:a5:28:35:48:c7:24:59:
                    74:57:0c:99:41:0a:6c:79:d8:52:24:7a:f5:7c:b0:
                    52:36:03:1b:4f:7d:b6:3e:4b:f4:6a:7e:a7:2e:67:
                    81:e1:e4:6b:43:d7:3c:81:39:23:21:ae:56:e3:d0:
                    0e:a2:0b:47:44:45:51:50:26:44:2d:14:7a:b1:da:
                    1a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:20:51:A1:F7:38:D6:44:D0:6C:5D:EE:DA:E7:DD:B9:18:99:53:45
            X509v3 Authority Key Identifier:
                keyid:03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:bf:33:63:13:d6:4f:b5:27:c2:06:13:b7:dd:a4:6b:b2:83:
         46:53:80:84:bd:52:33:f9:56:eb:de:eb:4f:06:db:ab:34:20:
         6c:4c:1d:ac:03:ef:f8:7b:f0:f9:02:23:10:7a:d3:f0:ff:42:
         8d:c8:0f:38:6f:ed:2d:1c:40:10:44:a6:09:4c:ce:17:53:af:
         a6:93:ea:be:92:69:b3:98:2c:f7:81:c7:5f:57:4f:2c:03:a6:
         33:f9:58:0a:75:8a:df:ad:4f:29:8b:7e:78:c3:d7:1c:8c:f5:
         af:95:26:b7:69:ee:b4:3d:11:8f:ce:e1:9b:6c:8c:c9:2d:f0:
         e5:82:f1:94:08:19:8f:bc:7d:c6:ab:20:3d:6a:5f:da:b8:9f:
         1c:97:e0:2b:92:8f:a6:d7:08:ea:85:9f:d7:2d:e5:f8:bb:d3:
         5a:24:bc:67:e8:ce:ea:80:7a:20:3e:e7:cd:57:1c:41:93:aa:
         3a:23:a5:5b:3a:27:3d:fc:15:71:ac:6a:4b:75:09:4d:70:81:
         31:bb:a1:ba:c8:11:82:60:3b:1b:5e:6b:4d:72:b3:a8:72:94:
         66:a0:e2:0e:d3:95:a9:8e:76:29:7b:85:d5:3e:48:2f:6d:46:
         46:ba:0d:0c:60:41:49:99:6a:f8:21:e8:d7:a3:54:79:e2:e8:
         e1:e3:74:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----