Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/22dc7b-bd55-4782-b419-0017f18c04d3/1/8EYu-N5toTSnTc0-d5uyjbVnLI4.mft
File:                     8EYu-N5toTSnTc0-d5uyjbVnLI4.mft (raw, json)
Hash identifier:          BkTehZEQRtYod4Sc1VJre1cJjO8UAAkuOWEAlfERfDI=
Subject key identifier:   B3:8A:95:7E:AA:8B:56:E8:89:79:DF:5D:27:6E:CB:E5:00:D8:78:47
Authority key identifier: F0:46:2E:F8:DE:6D:A1:34:A7:4D:CD:3E:77:9B:B2:8D:B5:67:2C:8E
Certificate issuer:       /CN=f0462ef8de6da134a74dcd3e779bb28db5672c8e
Certificate serial:       019369D96BDC7443DE648BD2A405BFB2AC94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8EYu-N5toTSnTc0-d5uyjbVnLI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/22dc7b-bd55-4782-b419-0017f18c04d3/1/8EYu-N5toTSnTc0-d5uyjbVnLI4.mft
Manifest number:          0935
Signing time:             Tue 26 Nov 2024 19:01:16 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:16 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:16 +0000
Files and hashes:         1: 8EYu-N5toTSnTc0-d5uyjbVnLI4.crl (hash: 4eyeGH0VgsoCGPGWQk7uYgTGfxXHw7JEtMuE8KgEMRA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/22dc7b-bd55-4782-b419-0017f18c04d3/1/8EYu-N5toTSnTc0-d5uyjbVnLI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/22dc7b-bd55-4782-b419-0017f18c04d3/1/8EYu-N5toTSnTc0-d5uyjbVnLI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8EYu-N5toTSnTc0-d5uyjbVnLI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:6b:dc:74:43:de:64:8b:d2:a4:05:bf:b2:ac:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0462ef8de6da134a74dcd3e779bb28db5672c8e
        Validity
            Not Before: Nov 26 19:01:16 2024 GMT
            Not After : Nov 27 19:01:16 2024 GMT
        Subject: CN=b38a957eaa8b56e88979df5d276ecbe500d87847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e9:e8:d6:18:bd:fc:eb:81:e1:5d:62:72:e5:
                    c9:bc:20:4d:4d:5a:a0:81:27:39:c0:55:e8:77:c2:
                    84:de:4f:9a:a6:ab:15:ed:68:9d:5c:08:b2:c3:0c:
                    0d:23:c0:d7:bd:2e:e8:41:5d:3d:8b:a3:91:28:18:
                    53:77:3e:70:03:9e:27:92:f4:3c:4e:9d:5b:be:a3:
                    3f:22:23:17:d1:38:21:e5:29:f7:21:3c:1e:31:49:
                    a3:b1:7d:b2:35:23:ce:63:ed:2a:2c:4d:a0:65:f0:
                    aa:2b:64:3a:11:c0:44:30:6b:75:c1:45:e2:58:29:
                    2d:52:15:a8:48:22:ba:bd:20:0f:00:a3:e5:ca:00:
                    a6:2c:48:1d:9f:58:51:6f:4c:c6:8e:59:69:54:fa:
                    69:29:dd:0a:04:89:92:a4:ec:db:ea:72:a7:86:8c:
                    c4:48:e3:9b:61:83:66:bb:be:33:f3:95:d2:e8:74:
                    7b:df:b4:e0:d2:9a:ff:f1:95:21:e7:89:49:b0:9c:
                    42:69:42:ad:2e:fa:08:fd:8f:93:07:69:5e:e3:1e:
                    18:04:ae:a9:2d:3a:ea:2d:c7:2d:6a:cd:e9:7e:2b:
                    e5:42:7c:cc:2b:22:e0:3f:e5:2a:dc:0c:2d:e4:23:
                    9e:ee:5a:02:6f:3a:17:ba:9b:1a:69:46:ee:6e:58:
                    9f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8A:95:7E:AA:8B:56:E8:89:79:DF:5D:27:6E:CB:E5:00:D8:78:47
            X509v3 Authority Key Identifier:
                keyid:F0:46:2E:F8:DE:6D:A1:34:A7:4D:CD:3E:77:9B:B2:8D:B5:67:2C:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EYu-N5toTSnTc0-d5uyjbVnLI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/22dc7b-bd55-4782-b419-0017f18c04d3/1/8EYu-N5toTSnTc0-d5uyjbVnLI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/22dc7b-bd55-4782-b419-0017f18c04d3/1/8EYu-N5toTSnTc0-d5uyjbVnLI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:35:9c:ed:70:69:dd:d6:a8:75:db:14:df:a1:14:57:52:41:
         66:2d:59:69:ac:ec:2d:1d:1d:1d:6a:3e:be:1c:5e:dc:6c:a7:
         d5:2b:97:d3:a9:9d:94:19:f8:81:b5:05:ea:92:09:30:7a:d4:
         9d:8b:d7:76:58:2c:51:b5:50:5b:30:16:91:03:a5:f8:65:f4:
         fd:bb:b1:3e:21:50:64:22:01:50:4d:44:90:48:9e:52:3a:a1:
         59:a9:ff:e5:96:ba:5f:b1:6c:1d:db:5d:47:8d:c5:f9:f1:a9:
         e0:f2:55:f0:b4:aa:75:0e:23:bb:3b:33:50:e7:bb:75:7f:ac:
         19:75:91:1d:a1:8a:94:6a:4b:88:4a:e1:fb:a9:93:ad:08:e4:
         3d:83:f5:90:00:c1:1d:58:70:b1:a6:52:18:e3:18:31:29:a1:
         f7:a7:7c:91:e6:86:ca:43:0c:6b:02:33:d1:b2:55:4f:c1:92:
         fb:b1:62:11:76:c8:02:ca:97:27:1d:96:4a:9a:57:ef:ca:19:
         49:9f:ed:7d:37:eb:ca:c8:17:b5:e0:44:c6:9f:cb:f7:33:2e:
         cf:fd:e2:c5:28:f8:5d:8a:cc:d5:84:19:21:63:bc:0c:cd:a1:
         c7:eb:09:c2:13:91:b4:8d:3a:fc:62:17:a3:86:0e:4f:6e:5c:
         21:b2:be:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----