Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
File:                     kt2u3zcPNa-LXut_hubPr6zojU4.mft (raw, json)
Hash identifier:          wINrmyghPKFTvwxP+Zm7+HWcmcnjtgN31d+7lk1pPKQ=
Subject key identifier:   7E:7C:2D:5A:4E:83:D4:58:5A:73:38:23:8A:1B:E5:75:68:78:89:4B
Authority key identifier: 92:DD:AE:DF:37:0F:35:AF:8B:5E:EB:7F:86:E6:CF:AF:AC:E8:8D:4E
Certificate issuer:       /CN=92ddaedf370f35af8b5eeb7f86e6cfaface88d4e
Certificate serial:       019356F6CA5DFB92DA6E02BC7B3412F99B51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
Manifest number:          03C3
Signing time:             Sat 23 Nov 2024 03:00:34 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:34 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:34 +0000
Files and hashes:         1: kt2u3zcPNa-LXut_hubPr6zojU4.crl (hash: SAszi9KmxvQKv6cjiR6A4xOjg0EFT7GPiTCtEZQCKp4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:ca:5d:fb:92:da:6e:02:bc:7b:34:12:f9:9b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92ddaedf370f35af8b5eeb7f86e6cfaface88d4e
        Validity
            Not Before: Nov 23 03:00:34 2024 GMT
            Not After : Nov 24 03:00:34 2024 GMT
        Subject: CN=7e7c2d5a4e83d4585a7338238a1be5756878894b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:93:39:8e:94:22:b9:e2:44:9f:db:b7:58:d6:
                    b8:e2:63:b9:44:66:fd:42:68:e4:76:0f:74:ab:ec:
                    f4:33:20:9d:2e:dd:2e:9c:1a:b2:2c:2f:cc:71:47:
                    2a:25:9f:d4:f8:ef:40:54:12:89:2e:d3:42:dd:d0:
                    f5:0e:51:fe:05:d7:ca:7f:a8:64:c4:3c:26:18:44:
                    08:dc:99:83:e1:45:d4:31:03:66:f9:c1:aa:d6:8d:
                    a7:c5:6c:28:50:88:7f:d9:81:3c:2c:f5:03:ca:f9:
                    63:3c:a0:b7:a9:fb:44:f9:75:44:cf:0f:70:00:38:
                    fa:cb:8e:79:ed:a1:fd:dd:1c:73:9e:36:c1:41:01:
                    56:17:42:d8:2e:14:26:6a:1c:53:67:4a:4d:e3:8e:
                    75:c5:b7:2d:c6:38:79:95:29:3b:72:bd:9d:74:28:
                    2f:32:30:64:de:50:94:aa:b3:cf:8b:9a:45:5a:57:
                    1f:22:7c:b3:f5:76:d5:23:0b:47:69:11:a1:3f:d3:
                    25:c2:8e:30:32:21:93:f2:65:5a:a0:81:8c:75:45:
                    3e:3e:d5:eb:77:7d:3e:07:b8:15:4e:95:77:05:c0:
                    72:6b:d4:6d:5b:ca:ad:03:e3:94:72:b5:c1:66:14:
                    c4:64:6c:3a:2a:39:b7:b1:49:bd:21:41:53:f5:6d:
                    c4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7C:2D:5A:4E:83:D4:58:5A:73:38:23:8A:1B:E5:75:68:78:89:4B
            X509v3 Authority Key Identifier:
                keyid:92:DD:AE:DF:37:0F:35:AF:8B:5E:EB:7F:86:E6:CF:AF:AC:E8:8D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:19:e9:ac:82:55:d8:26:f9:27:43:90:da:43:18:2d:da:ee:
         7e:f3:5a:c5:55:f1:90:3e:1b:9a:78:af:bc:2d:da:2d:79:b9:
         7f:23:ea:91:1e:36:e3:57:9e:e0:46:3d:e1:52:99:e6:b0:f0:
         b7:0d:2a:16:14:21:16:5f:22:bb:97:71:6f:ba:fd:78:27:76:
         c2:a4:5a:b1:f1:2d:ed:58:67:3d:4c:6d:ad:37:ef:f8:35:9d:
         36:c0:9d:d1:7c:b1:9b:73:21:47:0d:df:08:39:4f:29:86:eb:
         cd:91:c0:c4:93:3a:73:db:17:17:57:f0:e5:d4:8a:64:c2:70:
         f8:f4:07:ea:8b:20:9d:ee:20:2f:3e:56:ea:e2:89:e1:b0:be:
         f0:ff:73:c7:a5:38:21:6b:70:3e:29:02:81:39:a6:89:64:7f:
         87:11:59:e9:11:61:e8:11:fa:a3:fb:74:5d:1e:fa:9c:ac:0c:
         a3:04:22:3e:0d:ac:15:76:b3:1b:8e:f2:9e:60:af:1f:39:87:
         6f:0e:f2:60:7b:d3:a8:41:2f:29:9f:a7:c6:42:7a:26:97:1a:
         df:ed:15:e1:5c:8e:da:26:fb:c2:f9:39:a1:ee:b9:42:75:63:
         98:1d:f4:45:eb:5e:ef:dd:89:22:cd:ea:39:29:76:f8:8f:ba:
         e4:e1:0d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----