Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
File:                     iXlCagvNkDpVJkksxa97TysO2wQ.mft (raw, json)
Hash identifier:          UkiYbPBK6+jr4AbDIQeL7EDcxDbE0PPRGujIa5LSLYc=
Subject key identifier:   F1:A2:9B:F5:28:0C:0B:D9:DF:4A:60:5C:B9:DF:1C:88:FF:6E:F9:52
Authority key identifier: 89:79:42:6A:0B:CD:90:3A:55:26:49:2C:C5:AF:7B:4F:2B:0E:DB:04
Certificate issuer:       /CN=8979426a0bcd903a5526492cc5af7b4f2b0edb04
Certificate serial:       0193579BAF4AE437EFFC3FE9952874EE6F4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
Manifest number:          02F3
Signing time:             Sat 23 Nov 2024 06:00:40 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:40 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:40 +0000
Files and hashes:         1: iXlCagvNkDpVJkksxa97TysO2wQ.crl (hash: ivhB0rofgOWN1yMjPJahkYXsxNZrQQZvuolX0j26iWI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:af:4a:e4:37:ef:fc:3f:e9:95:28:74:ee:6f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8979426a0bcd903a5526492cc5af7b4f2b0edb04
        Validity
            Not Before: Nov 23 06:00:40 2024 GMT
            Not After : Nov 24 06:00:40 2024 GMT
        Subject: CN=f1a29bf5280c0bd9df4a605cb9df1c88ff6ef952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:57:44:f9:32:62:b4:4e:13:2b:40:47:ac:6a:
                    f0:82:88:14:1d:a8:e3:9a:e1:f6:87:ea:16:f2:c8:
                    d1:78:2e:d5:06:df:33:b5:3a:78:3a:0a:6e:6d:8a:
                    d0:ff:c3:d0:6f:b0:85:30:3e:20:4a:0a:85:77:c1:
                    a4:87:2b:42:5e:28:43:d9:c4:a5:f5:97:3c:6e:70:
                    8e:25:49:c3:49:fe:ac:a5:7c:26:37:5a:c8:8e:c2:
                    ed:f6:2f:95:c7:b7:35:b8:2d:e5:24:a8:e5:4f:16:
                    99:a0:b9:6f:a3:fb:9d:c6:73:7f:df:a2:82:a2:aa:
                    28:9e:b9:6e:87:7a:ff:a4:25:83:a6:44:df:d8:82:
                    cc:0c:3a:04:60:68:c9:15:6c:17:db:60:19:a1:c7:
                    6f:44:30:75:6a:1f:c7:de:39:fd:f6:62:08:b9:ae:
                    ca:f0:e2:6b:ad:04:a1:b6:77:bf:8e:47:c2:82:7f:
                    08:73:94:77:cf:7e:9b:3e:14:13:22:af:04:6b:60:
                    5e:05:62:0f:6f:17:ec:d8:82:df:65:a5:aa:d6:9a:
                    9d:8d:fe:32:c4:fa:3b:8d:fc:09:e5:b4:8d:ff:a9:
                    a2:0f:f3:81:f4:ab:9e:a3:e9:9d:e0:67:83:15:9f:
                    13:4f:06:9e:41:72:15:09:e7:93:d5:d9:78:11:27:
                    9a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A2:9B:F5:28:0C:0B:D9:DF:4A:60:5C:B9:DF:1C:88:FF:6E:F9:52
            X509v3 Authority Key Identifier:
                keyid:89:79:42:6A:0B:CD:90:3A:55:26:49:2C:C5:AF:7B:4F:2B:0E:DB:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:2d:05:bd:09:7c:22:af:c5:e3:29:2a:57:3a:53:7e:db:bf:
         de:16:3c:e6:9c:60:f7:fd:23:c9:6c:77:3e:f9:b6:0b:f2:54:
         b3:4a:75:d1:f5:4a:20:a3:b5:46:9e:7d:af:00:c3:dc:76:3f:
         28:61:db:c2:f1:be:00:9d:c6:4f:bc:1b:ba:d9:6a:ae:df:df:
         4f:3f:71:09:da:38:9b:07:c8:a2:7a:70:e4:aa:d2:22:87:7b:
         63:08:9a:76:f6:23:79:c2:cc:a6:50:47:17:b9:70:3a:9a:ef:
         84:26:96:1c:84:64:5e:f6:66:d9:5f:4e:d5:dd:84:40:30:94:
         65:96:76:b1:a4:16:1e:be:bc:61:0f:69:0d:5f:5b:74:2c:81:
         8c:fb:c8:fc:df:1f:0f:30:52:27:bb:20:f5:40:0f:44:c1:20:
         94:91:96:4b:d2:5d:d7:4d:ab:1c:57:29:37:6d:6a:06:48:f2:
         94:95:3f:b0:80:33:07:c7:e7:64:9e:a5:25:17:5a:bb:af:11:
         35:f5:9e:ad:07:b8:9f:2d:99:d8:77:a4:8d:9e:b4:51:ad:f4:
         77:15:fc:56:f1:0d:b4:cd:ae:3d:e0:f8:e7:f8:dc:70:39:6e:
         87:3d:00:17:7c:b3:d1:0b:79:16:90:ae:68:e9:72:0f:4e:02:
         2a:95:79:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----