Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
File:                     0UTELhyjA3u29UHx4UBPZiw2mTg.mft (raw, json)
Hash identifier:          7QLWS7RRJsqB6lD9OnIyOxE3utt5+0LcbdwWe2IEjtY=
Subject key identifier:   60:06:56:85:34:55:DB:E4:99:6A:58:63:BA:EA:BF:01:E4:FE:16:B0
Authority key identifier: D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
Certificate issuer:       /CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Certificate serial:       01936B221AF6DD756AC352186A84FEA30418
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
Manifest number:          09F7
Signing time:             Wed 27 Nov 2024 01:00:17 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:17 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:17 +0000
Files and hashes:         1: 0UTELhyjA3u29UHx4UBPZiw2mTg.crl (hash: h8NMT2E9bWmBQJ+F1O2LCHva0+Gs80zeqQZaUiLdX9w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:1a:f6:dd:75:6a:c3:52:18:6a:84:fe:a3:04:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d144c42e1ca3037bb6f541f1e1404f662c369938
        Validity
            Not Before: Nov 27 01:00:17 2024 GMT
            Not After : Nov 28 01:00:17 2024 GMT
        Subject: CN=600656853455dbe4996a5863baeabf01e4fe16b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:aa:a2:d8:af:ac:25:ec:2d:0f:51:69:2c:55:
                    d6:43:fb:79:54:b0:62:41:70:bb:63:d6:c0:5b:d6:
                    65:e0:8d:d2:3f:21:0d:54:b0:26:d8:25:ce:86:08:
                    d1:be:b5:5d:56:57:36:29:89:c7:a4:7d:e2:30:0d:
                    98:34:46:0f:6e:ec:0a:ed:b1:53:71:fc:d3:9f:b1:
                    49:0b:1a:4f:f4:c8:e5:d7:5f:2a:b8:fc:c4:96:04:
                    29:97:78:58:e4:5e:b9:73:82:12:53:23:8c:5c:de:
                    ea:fe:f2:e3:38:79:be:90:e1:77:2c:dd:bb:b1:82:
                    46:81:e1:ad:e7:01:2a:b1:96:43:33:26:8c:38:40:
                    02:ab:50:9b:98:12:aa:64:15:fb:20:be:68:84:5b:
                    ab:73:e1:24:bb:91:d5:61:89:77:09:73:53:0c:c8:
                    bf:80:64:9f:2b:9a:6a:f4:d5:69:94:3b:65:48:d0:
                    77:c0:e3:72:52:08:2f:d2:a6:c9:4d:69:02:17:71:
                    99:63:f9:76:a8:0a:ea:3f:d1:e4:4e:60:2a:57:bc:
                    12:82:32:d2:e9:b1:5d:66:12:69:63:d3:ed:3f:d9:
                    9e:65:d7:40:73:5e:3a:23:10:6f:ea:9f:06:3d:aa:
                    c8:7f:6d:ff:ff:21:00:b8:b2:9b:c5:7e:30:1d:2d:
                    8f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:06:56:85:34:55:DB:E4:99:6A:58:63:BA:EA:BF:01:E4:FE:16:B0
            X509v3 Authority Key Identifier:
                keyid:D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c5:16:2a:3f:27:af:e7:f8:d7:1b:03:c0:07:0d:f2:ae:b9:
         1d:8a:04:26:c3:d5:37:a0:d5:19:81:33:1d:5a:7a:83:f8:cf:
         75:0e:3a:03:ff:c0:55:55:28:0d:8e:7c:f3:0e:c9:ec:1f:8f:
         21:30:a1:90:68:6a:d7:17:16:11:8e:09:c9:c6:e5:0d:c6:9c:
         8b:88:ae:26:18:7d:df:28:e5:46:56:0f:26:22:51:14:ab:f4:
         ba:80:d5:e4:4d:4e:1d:ba:b4:94:75:ed:53:43:8c:1a:5f:9d:
         e8:66:dc:f4:8c:23:ca:62:c5:8d:0c:88:a7:4c:01:03:f0:4d:
         fd:99:96:59:5e:c8:db:46:ff:70:83:ed:d7:2e:2d:da:77:b5:
         07:71:c2:44:e4:72:29:3d:0c:1c:bd:f0:42:8b:2d:21:67:17:
         df:93:74:4a:cf:ab:a3:a2:e4:6e:e5:77:bc:a5:b2:6e:2b:ac:
         67:7b:3a:3c:43:fc:99:ad:66:8e:7b:ac:61:83:fa:a7:78:24:
         41:9c:74:4d:fe:a9:44:b1:86:54:83:92:ec:e7:5e:a9:ba:f7:
         44:93:17:bd:de:2c:5b:ea:e5:1c:56:da:ea:c4:f1:27:f9:65:
         4c:a4:a2:8f:22:65:e7:7b:39:15:07:ee:b0:b1:73:7f:00:e9:
         ff:f3:60:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----