Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
File:                     jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft (raw, json)
Hash identifier:          zy1TWs9U60/nUczd7oqAWqUR+7OVRQqhwZ7nRzTMNg8=
Subject key identifier:   3C:27:0D:67:F7:4B:DD:A7:2F:F5:42:8A:A9:24:45:D4:01:0F:0F:61
Authority key identifier: 8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04
Certificate issuer:       /CN=8e5cd1778277e61963f9f6f21e22250acdceeb04
Certificate serial:       019369A1B7B5C399736B20EE497235F84619
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
Manifest number:          01F2
Signing time:             Tue 26 Nov 2024 18:00:26 +0000
Manifest this update:     Tue 26 Nov 2024 18:00:26 +0000
Manifest next update:     Wed 27 Nov 2024 18:00:26 +0000
Files and hashes:         1: jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl (hash: Lze8YCCHBx9NDuSJkLszhEZr/TlndXw4PNDka8a/tyM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:a1:b7:b5:c3:99:73:6b:20:ee:49:72:35:f8:46:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e5cd1778277e61963f9f6f21e22250acdceeb04
        Validity
            Not Before: Nov 26 18:00:26 2024 GMT
            Not After : Nov 27 18:00:26 2024 GMT
        Subject: CN=3c270d67f74bdda72ff5428aa92445d4010f0f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3e:5a:e3:68:2f:73:79:88:2d:2b:80:ef:05:
                    86:9b:d4:4d:9c:62:b7:3d:41:d7:1a:e8:9b:5b:15:
                    0c:82:8e:7f:47:f2:87:4e:e6:55:07:54:2b:fa:ff:
                    b9:a9:6c:7b:5f:7f:7c:a7:98:69:00:7c:1c:22:53:
                    f6:7b:20:f8:f3:e9:10:bb:4b:ab:4d:84:71:f3:55:
                    10:bb:02:e2:aa:6d:e6:e4:a9:9b:0b:3b:90:27:b4:
                    c5:29:95:2b:74:d2:f1:59:58:3c:68:52:22:44:80:
                    3b:cf:9c:bc:12:0a:ed:6f:93:34:f2:ee:b6:c6:01:
                    81:87:5a:0c:13:dc:02:20:ab:07:98:cb:60:7a:f5:
                    3a:09:82:97:21:c0:f4:de:62:51:8c:3e:ce:0e:1c:
                    cb:79:bd:73:6e:6f:6e:bd:0a:ac:46:20:ec:4f:74:
                    54:f1:05:83:c1:da:fb:ab:a2:5e:b8:10:bf:35:0e:
                    01:57:9f:e6:13:dd:58:27:5a:86:f8:11:f3:c1:18:
                    37:55:1a:60:94:bf:2e:8a:1b:ca:06:1e:54:a3:32:
                    e0:f7:43:03:e8:01:57:43:85:86:2c:d6:3e:c7:b4:
                    41:b3:1b:16:fd:a9:6b:ee:63:53:2c:ef:d6:91:54:
                    ab:99:3c:5b:a2:6f:6e:dd:b9:76:2d:d2:00:0a:ec:
                    47:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:27:0D:67:F7:4B:DD:A7:2F:F5:42:8A:A9:24:45:D4:01:0F:0F:61
            X509v3 Authority Key Identifier:
                keyid:8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:e9:91:39:bc:fa:84:76:af:91:92:e4:26:ac:ae:ae:35:9e:
         81:65:93:1a:8b:f8:16:e4:c6:e8:1b:c8:16:62:d1:6c:26:86:
         cb:b2:dc:e1:a0:63:a1:ca:02:b6:3e:da:10:16:b2:94:93:93:
         f9:d5:50:96:3f:b6:2d:aa:c4:fb:64:d0:68:39:72:a7:52:55:
         0e:8d:8e:f0:04:19:1e:b6:0d:76:87:9d:ab:cf:2a:49:92:ee:
         7b:a7:81:45:68:16:c1:8a:6d:8a:f5:1a:ef:47:99:cb:44:57:
         bc:3f:d8:44:1d:00:be:67:4c:bb:dc:aa:69:96:94:09:30:a0:
         be:2a:e2:ed:57:8f:00:02:f1:e8:ed:d4:2e:bb:80:42:b0:06:
         79:32:dc:6a:9d:67:1d:16:19:01:46:17:28:ba:5f:a3:fc:ed:
         79:1f:90:c1:d1:e2:92:af:92:69:c9:2e:a0:54:be:7e:f2:63:
         12:fd:50:5e:9d:ec:e2:8d:13:fd:71:22:04:ee:4c:bb:cf:ac:
         81:b7:2c:0d:1f:b9:79:f0:72:ee:fa:8a:9c:7c:68:ac:da:83:
         12:81:db:ed:c2:b3:d9:80:94:8a:e1:3b:83:e4:70:32:20:89:
         c7:98:1b:17:1d:44:61:51:f0:1b:3e:4d:e6:4d:dc:61:8d:f3:
         3e:80:73:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----