Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.mft
File:                     PJUbD8U6RlditFJfyY3_AskMHpc.mft (raw, json)
Hash identifier:          g4TXCwVlXAZoMgRNLw7idsNGt7ceGud53AyxuLc6XRg=
Subject key identifier:   65:2A:3A:56:96:A5:1F:AE:CA:18:F6:AA:BE:76:A6:A9:2B:A6:80:D4
Authority key identifier: 3C:95:1B:0F:C5:3A:46:57:62:B4:52:5F:C9:8D:FF:02:C9:0C:1E:97
Certificate issuer:       /CN=3c951b0fc53a465762b4525fc98dff02c90c1e97
Certificate serial:       019356F67E5654241BAFA6E258F6DF523F22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PJUbD8U6RlditFJfyY3_AskMHpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.mft
Manifest number:          09FF
Signing time:             Sat 23 Nov 2024 03:00:14 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:14 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:14 +0000
Files and hashes:         1: PJUbD8U6RlditFJfyY3_AskMHpc.crl (hash: cPS+MYF9fOZ6hLupgYsApDRW45keJtXlI4+ldnUDyNg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PJUbD8U6RlditFJfyY3_AskMHpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:7e:56:54:24:1b:af:a6:e2:58:f6:df:52:3f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c951b0fc53a465762b4525fc98dff02c90c1e97
        Validity
            Not Before: Nov 23 03:00:14 2024 GMT
            Not After : Nov 24 03:00:14 2024 GMT
        Subject: CN=652a3a5696a51faeca18f6aabe76a6a92ba680d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:01:d8:ec:ea:f4:e2:45:62:46:c9:f1:73:aa:
                    e5:cd:bd:0c:40:6c:0d:33:38:c8:bc:98:7f:1a:c9:
                    39:a7:29:09:d4:0b:e9:f5:b5:03:58:54:da:b5:ac:
                    ff:93:83:bd:2a:1c:5b:d0:7a:58:56:ce:84:e1:1c:
                    08:a5:0e:c8:1c:bd:0b:d8:bd:b9:86:8f:33:55:8b:
                    10:75:af:e9:19:cf:81:23:a9:0b:2d:f9:a3:72:bc:
                    57:6c:a4:42:55:01:9c:e0:ab:94:4f:e8:2d:fb:c0:
                    22:b5:b9:3e:6b:1c:59:b7:7b:a1:90:63:0f:b7:c2:
                    ee:14:81:55:a4:d1:d6:d9:f6:ad:9a:5c:bc:70:1a:
                    9b:fc:d5:d7:95:bb:81:5f:6b:cd:62:1d:6d:72:eb:
                    77:84:0e:7d:16:1a:32:5b:d6:03:19:83:33:9e:01:
                    1a:26:99:4c:85:c0:b2:f4:49:ac:09:3b:26:77:3a:
                    8e:0f:e0:68:75:a8:b0:43:53:2d:0e:35:06:e0:d7:
                    56:d0:81:6e:c4:c5:d0:17:c5:88:49:fc:e5:ba:fa:
                    52:6f:31:1c:6d:9f:bc:0a:1f:35:98:35:48:ce:13:
                    42:43:ff:cb:f9:a4:0c:a8:8b:42:09:25:4a:cb:5d:
                    0e:78:9a:a0:16:6f:18:05:08:d3:c8:ad:e6:f7:23:
                    09:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2A:3A:56:96:A5:1F:AE:CA:18:F6:AA:BE:76:A6:A9:2B:A6:80:D4
            X509v3 Authority Key Identifier:
                keyid:3C:95:1B:0F:C5:3A:46:57:62:B4:52:5F:C9:8D:FF:02:C9:0C:1E:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJUbD8U6RlditFJfyY3_AskMHpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a5:ec:e6:21:f8:89:8f:41:59:13:3a:91:2b:3d:cb:fc:76:
         68:7a:bd:74:43:da:56:ce:a9:95:63:28:a0:6d:f2:ec:f5:cb:
         71:a0:2a:3a:c2:de:ef:b1:f5:56:9b:ed:e2:c2:90:03:f3:75:
         52:d0:b0:9b:f9:af:2f:35:90:40:22:6e:2c:b5:4c:9a:15:5b:
         f0:bf:1b:0c:94:d0:db:85:51:de:88:2a:86:da:8b:73:56:54:
         83:ae:15:46:a8:61:42:1e:1e:44:3e:b2:42:37:e6:8c:46:19:
         f7:fd:2a:f8:f9:7f:3d:c5:d4:fb:28:3f:31:eb:7a:a6:bd:4b:
         a3:a8:d1:d1:85:4f:aa:f2:1f:45:88:c2:2c:cf:cd:4c:0e:34:
         75:16:e4:f3:ee:c0:84:3d:e0:2c:8b:80:60:80:f4:67:91:f5:
         5b:15:25:13:56:22:ea:80:62:50:1c:24:7e:29:4f:1d:23:6e:
         90:84:4c:30:e6:ae:69:34:0a:15:22:52:06:80:2e:b7:b0:03:
         b3:fb:7d:d0:92:91:23:41:5a:c3:41:67:30:0f:60:7c:64:80:
         f5:5e:b7:42:7e:d4:d5:cf:35:1d:76:66:79:1e:c1:b0:1b:cb:
         1d:c5:b3:1d:2b:b7:6d:f6:b8:05:53:98:ff:54:09:46:1f:5d:
         c8:47:f4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----