Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
File:                     mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft (raw, json)
Hash identifier:          GeQ38kcxyKzrXeQWO/AU5L3uSOKrZJfhJ3VwVHdc0lQ=
Subject key identifier:   3A:F8:96:36:56:7D:89:F2:12:C7:53:97:BD:4D:6C:B2:84:8C:02:F6
Authority key identifier: 98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63
Certificate issuer:       /CN=983ea291971990dc486f93812783fadd87ade863
Certificate serial:       0193568ABDA0967CFAA9603D9409E97A428B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
Manifest number:          0739
Signing time:             Sat 23 Nov 2024 01:02:33 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:33 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:33 +0000
Files and hashes:         1: mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl (hash: ruSTTrwK8O5w7ffF9XiqysHXWkc3VwSm9IhvnGDQ0pI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:bd:a0:96:7c:fa:a9:60:3d:94:09:e9:7a:42:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983ea291971990dc486f93812783fadd87ade863
        Validity
            Not Before: Nov 23 01:02:33 2024 GMT
            Not After : Nov 24 01:02:33 2024 GMT
        Subject: CN=3af89636567d89f212c75397bd4d6cb2848c02f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c7:04:8c:6a:ce:f7:83:6a:1c:fb:20:b8:61:
                    1d:c1:1e:63:07:d9:c9:94:bc:40:5a:85:08:0a:a1:
                    da:8d:19:43:cc:31:77:c8:0d:9e:22:02:ea:0a:0d:
                    12:6a:14:ab:55:7a:aa:e3:fa:f2:c9:fb:e3:fb:1a:
                    6d:fe:d7:f9:28:63:c1:bb:05:60:0a:e5:56:43:75:
                    2f:a0:60:36:46:bd:df:bc:66:b4:66:33:2d:af:34:
                    5c:ec:95:2f:37:f1:4b:98:36:fd:3d:51:e3:cc:a7:
                    08:cb:04:ae:e0:7f:28:40:6d:59:c2:40:cd:a1:2b:
                    38:dd:f8:ab:d3:6e:aa:6b:5f:24:0b:3f:34:a3:a3:
                    f3:a6:d8:92:19:b5:c0:27:08:41:07:fc:42:13:b2:
                    f5:e4:c8:fc:60:b3:1a:ab:e1:fa:61:8e:2d:f0:fd:
                    9b:9c:2b:c8:32:15:2c:d5:bf:54:aa:67:6b:84:96:
                    60:0a:da:cb:34:d0:3d:e0:7b:45:be:bd:c8:0b:61:
                    ee:19:b7:18:14:4e:80:85:a1:9b:42:0b:0d:cb:22:
                    4e:e4:2d:d0:e9:63:bc:e8:d9:f9:f5:e8:63:6c:2c:
                    06:90:f4:24:3f:58:ed:8e:8b:7f:39:94:bb:01:83:
                    52:41:e7:79:db:c9:ef:42:fc:66:9c:26:a0:c4:7f:
                    56:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F8:96:36:56:7D:89:F2:12:C7:53:97:BD:4D:6C:B2:84:8C:02:F6
            X509v3 Authority Key Identifier:
                keyid:98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:64:85:8f:b4:cf:78:49:68:47:93:b7:aa:e6:d2:f8:1f:57:
         a0:a4:81:11:74:ef:8c:d2:11:d8:aa:15:06:ba:3b:c3:76:7c:
         0a:6a:e0:4d:0a:20:d1:34:f9:cf:8d:88:b9:00:b3:61:06:2f:
         37:21:8e:d2:91:64:02:a8:4c:d0:61:7e:59:34:af:88:27:5f:
         b3:d5:b0:b3:05:d3:b4:a3:f1:33:0f:e3:88:04:6d:51:d1:2f:
         ff:43:1f:f6:6a:9c:8b:4e:71:d7:20:eb:f6:c9:f8:c8:1b:bc:
         4f:e4:63:39:c8:bf:68:54:3f:8d:94:a1:f7:ba:ff:a4:1f:49:
         31:e4:10:95:e8:6a:e1:c2:04:e4:c8:96:83:35:41:eb:2e:c6:
         9e:1c:6f:71:bd:28:e4:73:11:ae:71:7d:54:0c:c4:17:a1:da:
         22:53:4b:b3:d5:cb:df:31:3b:b4:5f:9b:e3:78:4d:2d:6e:28:
         a2:bf:b1:ce:30:f5:1e:e8:2a:a5:28:0b:4d:00:03:56:ef:7e:
         ae:61:58:36:0b:16:4c:e4:68:53:06:0e:41:c6:d2:00:77:9c:
         88:7d:15:1b:12:16:56:b9:ed:42:0a:cd:47:e3:e7:a0:04:b5:
         a3:23:6a:ba:9a:df:fb:db:c4:f0:3a:1f:49:9c:f7:03:d6:a9:
         d8:44:0a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----