Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft
File:                     nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft (raw, json)
Hash identifier:          ItLLgVMtRdfMtTIDeK39dPp3xS4VYhX1OAUN/Iz3Gzo=
Subject key identifier:   00:47:E8:EB:08:99:18:9C:1B:9F:06:87:75:94:46:49:81:A4:90:C0
Authority key identifier: 9C:F0:5D:4B:D5:D4:2B:41:75:AC:C6:34:AC:CF:0F:FA:18:73:F0:AA
Certificate issuer:       /CN=9cf05d4bd5d42b4175acc634accf0ffa1873f0aa
Certificate serial:       0193572DC8997DE09DFF86DBC81B6DDE1810
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft
Manifest number:          01FE
Signing time:             Sat 23 Nov 2024 04:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:38 +0000
Files and hashes:         1: nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl (hash: h5fJjNIx0dURCDHLXI7+iBZTIOJLiAMwzrFG45fEER0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:c8:99:7d:e0:9d:ff:86:db:c8:1b:6d:de:18:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cf05d4bd5d42b4175acc634accf0ffa1873f0aa
        Validity
            Not Before: Nov 23 04:00:38 2024 GMT
            Not After : Nov 24 04:00:38 2024 GMT
        Subject: CN=0047e8eb0899189c1b9f06877594464981a490c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:db:58:17:19:67:5d:42:aa:d2:07:31:12:08:
                    9d:e5:4a:e4:ba:cc:72:a5:aa:40:6f:2e:ec:b2:a4:
                    ae:d8:af:87:0e:c6:f9:0a:7a:32:54:8d:ed:27:f2:
                    4e:38:cb:14:05:7c:af:27:21:68:00:12:17:92:3d:
                    39:a1:68:02:d7:91:b1:57:95:f9:32:40:5b:d5:b8:
                    89:e6:c7:ef:93:e4:1f:62:5b:78:2a:80:6f:01:12:
                    fd:d5:8f:6e:6f:80:54:99:b5:ea:8d:dc:5f:5b:e3:
                    1a:e1:8e:4f:e9:f6:74:42:cf:60:18:dd:a2:2d:ed:
                    11:7a:16:2a:36:d9:45:b9:05:28:5a:61:e7:bf:df:
                    12:90:34:53:c0:dc:19:c6:df:f1:90:4a:11:35:fb:
                    51:46:22:bc:5a:67:fc:37:3b:92:88:cf:79:9b:9d:
                    76:49:ef:9d:4e:2e:4d:3d:31:69:b3:35:3c:f0:6d:
                    4b:df:33:26:02:e3:a2:f9:13:af:73:0b:7d:a1:8c:
                    a3:08:dc:e3:50:c3:51:6a:07:59:78:b3:00:12:b1:
                    cb:90:5c:4d:c0:96:ec:a8:5c:a8:32:18:68:57:cb:
                    cc:6f:e5:f8:07:89:db:0b:79:bc:f8:58:98:89:41:
                    20:6b:97:0b:c3:b8:f6:61:21:f4:69:2a:3e:c8:69:
                    de:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:47:E8:EB:08:99:18:9C:1B:9F:06:87:75:94:46:49:81:A4:90:C0
            X509v3 Authority Key Identifier:
                keyid:9C:F0:5D:4B:D5:D4:2B:41:75:AC:C6:34:AC:CF:0F:FA:18:73:F0:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b9:56:32:e1:76:c9:46:c6:54:0d:15:5d:9b:1b:02:05:2b:
         e4:86:49:56:ac:bb:74:02:5a:2d:77:04:69:bc:82:4e:16:2f:
         58:6d:79:ac:d2:95:71:32:07:01:31:ff:c6:bd:f0:e0:55:bf:
         e5:c7:6e:03:f4:90:ed:c8:95:55:38:a0:e5:ad:05:b0:0c:20:
         f9:13:cd:1b:52:56:60:25:e4:c4:d7:d0:2d:97:4d:2d:4b:52:
         02:c2:4f:9f:ba:b3:08:bf:ab:a0:14:bf:ce:ce:eb:09:4d:90:
         0a:c1:90:43:58:e2:1d:ca:00:fd:8c:d6:f4:a1:b8:2d:60:52:
         ec:c5:db:3e:57:9c:a9:f8:1e:94:cc:a2:91:6b:9f:be:23:ce:
         6c:f5:bc:d5:9a:56:f4:21:19:8d:59:38:95:12:f9:cd:fe:8a:
         81:75:7b:19:04:50:4c:d8:a1:40:15:97:69:f7:d4:98:ed:53:
         f7:3b:be:4b:e9:51:a6:eb:22:0a:44:86:0e:b2:90:be:0a:1c:
         b9:68:d6:68:d0:68:28:41:9a:2a:4e:3c:9d:9a:84:2e:a6:f9:
         8d:7a:da:81:62:21:50:bf:f5:76:11:e3:69:e0:e2:46:91:18:
         53:1b:2d:77:77:3a:16:d2:45:e3:7e:da:21:af:7e:b3:0c:44:
         57:70:db:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----