Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
File:                     04SkGZfu6k0F_MfNQLEhE6W7aeg.mft (raw, json)
Hash identifier:          eLZ/4gkQdrhGQgfDNVjik66wzEjx7UiCeVGMUcpEJzU=
Subject key identifier:   D5:48:3D:C6:AF:D4:7F:A6:32:55:F2:04:C9:4D:B8:19:51:15:DC:F6
Authority key identifier: D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
Certificate issuer:       /CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Certificate serial:       019356896629A02A01813BE01392BB35BEAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
Manifest number:          077D
Signing time:             Sat 23 Nov 2024 01:01:05 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:05 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:05 +0000
Files and hashes:         1: 04SkGZfu6k0F_MfNQLEhE6W7aeg.crl (hash: MtajhflZPwWXkFp2g+9iLbIVHluoO6ysS9eV36CyLgE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:66:29:a0:2a:01:81:3b:e0:13:92:bb:35:be:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
        Validity
            Not Before: Nov 23 01:01:05 2024 GMT
            Not After : Nov 24 01:01:05 2024 GMT
        Subject: CN=d5483dc6afd47fa63255f204c94db8195115dcf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:30:3a:1b:a4:04:1c:68:a0:a9:62:b6:c5:5e:
                    9a:7b:69:bf:f7:ab:50:e3:c1:81:15:a7:16:49:19:
                    bf:a3:0e:c0:91:79:7e:23:7c:1b:46:d6:67:70:46:
                    cb:d8:e7:c9:59:94:07:33:a4:60:43:ae:4c:8e:9b:
                    b0:c4:7c:7b:8d:80:ce:6e:f1:6e:d5:09:d0:ed:ee:
                    c3:e8:08:da:84:0a:b3:0d:fe:ef:9c:f4:ec:3b:ff:
                    b5:e2:aa:58:09:6e:9b:d4:54:5f:d2:d7:9f:a0:2f:
                    c9:ff:1a:a8:13:0f:26:c2:c5:18:a0:a8:1b:3d:08:
                    2c:db:b4:2d:36:5a:f6:e5:22:c5:7b:18:56:9c:88:
                    be:69:07:5a:53:82:63:54:82:60:48:7d:28:bb:d4:
                    58:b8:1d:27:05:37:d2:9c:af:06:33:87:c4:59:b5:
                    5d:ab:26:a8:34:a1:3c:c7:26:d4:b7:6d:00:6a:24:
                    3d:2b:77:3c:cf:c5:09:fa:07:12:5c:f5:cd:6b:d2:
                    7f:95:b6:c5:f1:b1:61:d0:3d:38:65:ef:9f:81:cb:
                    f2:c7:8a:b8:c7:9a:7e:db:9b:91:5d:f7:08:63:20:
                    c3:c2:32:f9:59:b9:5e:7d:04:d0:cb:26:bd:3e:d6:
                    c7:1b:e2:23:66:4a:00:a5:e9:03:fb:e8:ea:aa:42:
                    f9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:48:3D:C6:AF:D4:7F:A6:32:55:F2:04:C9:4D:B8:19:51:15:DC:F6
            X509v3 Authority Key Identifier:
                keyid:D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e0:19:9c:10:77:96:ec:de:a1:11:24:6c:14:db:28:ae:37:
         eb:19:1c:7a:c7:ce:d4:d5:58:c3:c9:d7:5b:de:01:56:02:93:
         0d:b0:c1:f0:bd:25:1b:f2:d9:53:04:c7:c3:4d:51:8c:41:ea:
         2f:b4:3f:af:9b:98:9d:da:45:d9:58:34:96:37:67:9f:13:5c:
         cd:cf:1d:05:97:49:8e:43:d5:bd:c8:ca:99:ac:31:2c:9d:82:
         0a:67:8a:e6:06:2c:b5:5b:46:f0:9f:53:12:b6:6d:f9:fc:7b:
         ec:56:b8:d8:b3:71:24:fc:b2:a4:ba:ef:43:64:c0:27:9b:f1:
         5b:96:f7:dc:bb:e8:2c:10:c5:22:31:4a:41:04:dd:ce:b9:de:
         5d:ca:b0:23:c2:c7:96:cd:df:37:d3:43:df:a5:f8:94:bb:e7:
         ff:04:e3:4a:14:19:dd:60:29:b3:6c:e9:22:7e:ef:86:b2:55:
         b3:9b:d0:fb:15:27:2e:ac:5c:df:0d:2c:e3:0e:fb:33:a4:3f:
         31:8a:ec:f8:66:97:e6:b7:45:91:27:80:1c:c3:dc:cc:d6:ad:
         b7:c1:6c:8d:6f:38:c5:fa:28:66:5d:88:2e:1a:10:9a:d6:5e:
         39:95:c5:00:1b:a6:5b:f3:1f:cf:a6:0e:d7:67:ed:ad:f0:e3:
         f3:cf:47:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----