Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
File:                     A-aapu504w79uBm5yxvyHnhub6M.mft (raw, json)
Hash identifier:          +M6MFyuT+WxfDSj1iTg84fooSBqmOMCpoDLXIke9WG0=
Subject key identifier:   BB:53:52:DE:5E:A5:0A:C9:2E:DC:F1:89:B0:9F:8C:3A:69:C1:56:FA
Authority key identifier: 03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
Certificate issuer:       /CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Certificate serial:       0193696AA432C7C8745F7FC38B91DDC89F3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
Manifest number:          0217
Signing time:             Tue 26 Nov 2024 17:00:16 +0000
Manifest this update:     Tue 26 Nov 2024 17:00:16 +0000
Manifest next update:     Wed 27 Nov 2024 17:00:16 +0000
Files and hashes:         1: A-aapu504w79uBm5yxvyHnhub6M.crl (hash: etOf0edAOelP2+oTOATyc3VRSArfgIjqXQb7cuhcJS4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 17:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:6a:a4:32:c7:c8:74:5f:7f:c3:8b:91:dd:c8:9f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
        Validity
            Not Before: Nov 26 17:00:16 2024 GMT
            Not After : Nov 27 17:00:16 2024 GMT
        Subject: CN=bb5352de5ea50ac92edcf189b09f8c3a69c156fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e5:59:ea:66:d2:0b:11:21:06:3e:37:a0:a8:
                    90:9c:ba:93:21:ff:1e:ed:dd:35:25:77:e1:d9:fe:
                    f5:05:d9:a2:45:23:ad:ac:6f:5c:cc:0f:00:3e:ae:
                    e1:5d:2e:7b:03:b1:d3:10:39:da:9f:5a:2e:02:3e:
                    1b:38:7d:74:da:b4:08:ed:14:d7:cd:46:27:fd:f5:
                    44:a1:e5:bc:90:df:e4:9b:b6:13:9e:7a:df:7c:c0:
                    31:68:e9:13:a0:83:a5:51:15:7c:b8:f8:08:70:6b:
                    ce:ee:cc:ad:ea:a6:3c:01:49:71:da:b4:7b:f3:cc:
                    c7:56:af:ef:ad:b5:86:fe:8a:31:8a:6a:31:5f:b9:
                    4a:0b:ba:58:89:2a:0a:4a:39:bd:26:b5:1d:c1:f7:
                    d1:83:cb:8f:26:00:e3:56:91:4d:1a:da:27:53:0e:
                    c6:a0:86:0e:4f:99:05:8b:38:2a:cb:3e:16:0d:d4:
                    e9:06:9e:d5:7f:1d:0c:34:dd:19:24:2e:79:0e:88:
                    5f:fc:ea:4c:23:46:75:a5:83:e6:ac:88:df:fa:3c:
                    28:3a:f0:9b:a8:72:e8:10:60:57:bc:44:f1:f7:26:
                    dd:30:e9:ee:09:ed:ef:97:57:cd:ef:88:e2:67:f2:
                    90:fa:04:a6:41:89:e1:80:26:34:88:99:3d:6b:10:
                    6c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:53:52:DE:5E:A5:0A:C9:2E:DC:F1:89:B0:9F:8C:3A:69:C1:56:FA
            X509v3 Authority Key Identifier:
                keyid:03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:94:b1:9c:be:ac:0f:40:ed:05:4c:f1:3f:6b:0f:ae:75:a0:
         b6:f3:30:89:66:d9:f7:ba:d8:d8:6f:4a:43:71:d6:b9:62:05:
         f2:c1:9d:1e:94:3c:0e:e0:25:ae:39:5c:d3:41:58:a7:ec:83:
         5d:3c:9d:3c:bf:12:98:c6:3c:f7:07:6a:d7:e5:d8:60:e2:9a:
         62:7b:b5:9f:9c:85:20:1b:50:4a:45:b8:fe:c5:e3:49:7e:69:
         d7:1a:b6:63:0b:d2:10:e4:31:82:9d:2f:4d:7a:74:de:14:fd:
         e1:27:ee:f0:c5:9c:01:84:2f:4a:f9:30:04:6f:62:47:7d:ae:
         35:0f:66:2e:c8:bc:35:33:c4:0d:ae:ea:57:8f:7f:df:75:36:
         98:b3:0b:32:66:07:db:31:72:3e:49:1e:ab:d0:5b:6b:a6:dc:
         65:27:26:55:fa:68:d9:e2:ec:13:20:5c:ca:4d:7e:83:18:1d:
         5f:92:5d:03:30:d8:eb:88:42:c5:3f:1c:50:3b:57:1f:2f:f1:
         ef:bb:86:ed:c7:b9:39:f2:80:d0:64:25:b3:ae:af:4e:3d:42:
         d9:fa:f9:cd:94:c4:27:db:2b:6e:90:81:75:53:bb:8c:da:ad:
         a0:c4:ad:0d:19:eb:54:73:59:64:9c:11:4e:f1:e2:1e:84:ca:
         f7:64:7e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----