Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
File:                     _5zoM1_DdnayDsFlXFPWfbyG6LM.mft (raw, json)
Hash identifier:          6tILAr33e5Rj5heuSkg2BL3WoN9p1wWy9c6zBW5vZvw=
Subject key identifier:   1D:75:6C:76:8E:D4:0E:3B:8A:EB:ED:1C:5D:B9:E4:58:E3:DE:F7:5C
Authority key identifier: FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3
Certificate issuer:       /CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
Certificate serial:       019357D24104D263A31536D6D5C354A98386
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
Manifest number:          0BEC
Signing time:             Sat 23 Nov 2024 07:00:17 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:17 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:17 +0000
Files and hashes:         1: _5zoM1_DdnayDsFlXFPWfbyG6LM.crl (hash: YEA9Hkgs6NtjU7h8rOboJG85rNCZA/LPYfVNwBouXO0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:41:04:d2:63:a3:15:36:d6:d5:c3:54:a9:83:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
        Validity
            Not Before: Nov 23 07:00:17 2024 GMT
            Not After : Nov 24 07:00:17 2024 GMT
        Subject: CN=1d756c768ed40e3b8aebed1c5db9e458e3def75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:38:84:06:27:99:4a:3d:ec:03:45:93:b7:
                    29:61:68:4c:61:53:b8:0e:0d:c8:7d:cd:34:6b:e5:
                    14:02:23:c9:82:f9:09:92:63:97:13:ae:8a:39:88:
                    99:62:a6:1e:bb:6e:7a:7b:3f:e4:78:76:2c:cf:5a:
                    48:8a:92:75:8e:97:d2:69:6c:f3:96:b2:86:10:b4:
                    5c:78:c8:82:dd:dd:6b:33:c4:61:19:89:9b:fc:d9:
                    71:cd:9f:23:fb:b5:1a:63:c5:58:93:0d:21:04:82:
                    24:89:99:1e:ff:17:75:0b:c8:8a:5d:ed:f7:7e:e9:
                    90:4c:13:f7:57:07:8a:5a:7c:6f:dd:14:26:c2:e0:
                    55:3d:91:2f:6e:25:73:b7:e7:24:71:b5:b8:cf:e5:
                    b6:6d:b9:bd:13:73:f7:97:39:0a:f2:bf:75:51:4d:
                    86:cd:da:f5:47:1b:9b:11:c8:1d:cf:bb:33:79:b2:
                    66:b5:96:72:cc:a5:10:f5:64:b0:5b:32:2e:3e:57:
                    94:49:d2:56:0d:d5:21:1d:df:e8:98:e7:7e:40:19:
                    9c:79:7b:c0:f3:6c:44:f2:68:6c:59:73:89:74:c4:
                    e6:cd:8d:42:1b:fb:2c:fb:26:21:58:d6:bd:96:2c:
                    99:c0:37:8f:21:7e:86:5f:be:34:c3:fe:8d:c2:72:
                    88:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:75:6C:76:8E:D4:0E:3B:8A:EB:ED:1C:5D:B9:E4:58:E3:DE:F7:5C
            X509v3 Authority Key Identifier:
                keyid:FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:7a:f2:a1:ac:cd:ae:d4:0f:50:e2:ed:3c:44:d4:0f:9e:51:
         85:cb:4d:f9:f2:3d:60:36:eb:dd:b2:a1:ed:1e:df:f1:24:a2:
         0e:52:77:e0:e0:44:d7:ec:e6:c1:f3:57:ce:47:91:27:cd:05:
         48:33:d2:85:62:a9:b3:66:cb:7c:9b:75:cc:00:6c:a6:47:d4:
         1d:fc:dc:4b:9e:2f:50:4c:43:48:35:60:32:be:20:8b:0c:ab:
         ee:c8:cb:f0:06:91:93:80:a6:08:19:c4:36:7b:f6:91:5c:95:
         18:b2:52:9a:a1:cb:4e:04:29:4d:23:76:44:92:91:8d:19:42:
         e8:af:c5:f1:33:0c:8d:e1:5e:f9:10:eb:fa:3b:32:a1:6b:a4:
         51:fb:bd:11:51:62:85:07:89:09:2c:d0:f7:22:f2:57:51:41:
         bf:8f:16:46:60:a4:cf:0f:61:c4:30:e5:55:17:1e:05:74:4d:
         2b:97:d5:cf:97:78:40:f9:54:61:45:76:9d:06:ce:95:3e:0f:
         e6:70:5b:62:35:67:bc:15:6f:64:20:99:c6:17:f9:20:50:d7:
         0d:36:b7:a4:60:f1:9e:66:88:27:90:b7:a5:23:25:a8:e9:b8:
         19:76:3c:36:dd:28:f8:c3:28:b1:01:03:d5:3d:eb:56:c6:fe:
         e6:50:a6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----