Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
File:                     Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft (raw, json)
Hash identifier:          u9aFQ8nySh5Rb7Gc5YVONt1OiBMO+myAtL6Q+A73vuI=
Subject key identifier:   AE:6E:7A:2D:71:C4:6B:3A:21:B9:21:97:CB:8F:71:61:5A:63:2B:FD
Authority key identifier: 66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D
Certificate issuer:       /CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d
Certificate serial:       019357D2ABDAE88AC287E371E88B90E458C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
Manifest number:          118F
Signing time:             Sat 23 Nov 2024 07:00:44 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:44 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:44 +0000
Files and hashes:         1: Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl (hash: Fs6Il1JIcUfcMyhAEeJwxnWUutqnvos2xzki3nTYkWc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:ab:da:e8:8a:c2:87:e3:71:e8:8b:90:e4:58:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d
        Validity
            Not Before: Nov 23 07:00:44 2024 GMT
            Not After : Nov 24 07:00:44 2024 GMT
        Subject: CN=ae6e7a2d71c46b3a21b92197cb8f71615a632bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c2:24:c3:9a:0d:f7:c0:5c:7b:88:d3:08:58:
                    d8:c7:69:75:18:38:30:ed:2f:33:bc:5d:97:38:7b:
                    87:d9:fd:93:71:16:89:4f:99:0c:19:8f:c8:8f:8a:
                    50:0a:c4:9d:78:30:19:67:3c:e4:8b:53:3c:3c:9b:
                    88:95:21:e2:c8:ba:a4:10:b9:1f:d0:1a:c6:f4:39:
                    bc:96:68:2d:f8:aa:81:2c:2a:33:9b:68:9a:70:24:
                    81:e4:b0:54:0c:fc:58:12:90:5f:f1:11:e2:7c:eb:
                    d0:28:56:9c:2c:bc:02:6d:40:54:6e:01:3d:e8:23:
                    0e:70:a8:0f:e2:fc:27:ac:7e:79:b9:0c:41:10:dd:
                    3c:f5:78:84:55:29:9a:cf:a4:2b:51:d7:3e:a7:de:
                    ef:7c:88:c7:12:1d:9f:7c:c5:9d:be:ab:a2:b1:ea:
                    a8:a6:75:61:b2:9a:db:be:e0:44:16:b5:98:5d:42:
                    3a:41:d3:ba:6e:40:81:e8:30:16:02:60:56:4c:c6:
                    76:e6:ef:9e:d4:db:3e:32:94:3e:62:b5:85:b5:45:
                    2a:f5:27:1e:e9:3f:c3:7c:6f:82:0e:ca:6e:6a:47:
                    15:69:78:6a:cf:8d:34:4e:9f:a9:b8:d6:62:52:78:
                    56:85:cf:05:5f:e5:16:ca:57:e3:ec:e2:54:a9:b9:
                    98:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6E:7A:2D:71:C4:6B:3A:21:B9:21:97:CB:8F:71:61:5A:63:2B:FD
            X509v3 Authority Key Identifier:
                keyid:66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e7:36:dd:32:4b:2b:c3:e6:36:86:2c:be:01:8d:81:d3:38:
         75:74:b7:ca:a1:7a:00:d2:fb:a8:90:23:e5:3d:1e:74:eb:75:
         c7:a9:89:70:4f:fb:d6:28:aa:67:65:88:9e:18:10:76:d2:e4:
         a0:92:27:c9:c3:05:c0:47:d8:22:0d:5c:e0:63:c3:3c:fa:4a:
         5e:16:0b:14:c4:1b:0d:97:51:c0:a1:53:6c:80:06:a3:2e:e6:
         07:d8:f6:88:e4:e9:f3:59:b6:b8:0a:da:65:3d:39:5a:57:25:
         3e:58:7b:54:ef:c7:b1:82:ee:9b:db:f4:9a:0b:da:14:b9:1c:
         0f:c0:a6:98:f8:b5:89:4e:1e:76:7a:b3:dc:f7:3f:b3:04:e9:
         23:99:df:66:53:cd:aa:0b:35:b3:d3:4d:b3:bd:27:ad:74:72:
         a3:c2:4f:34:f9:4e:83:c4:30:51:0d:21:f7:80:15:73:eb:88:
         1a:10:8a:be:3e:f3:45:11:98:8c:2e:fc:bb:0a:75:d7:80:16:
         d5:b4:01:11:72:4f:4a:21:41:0e:a5:c1:6b:93:94:7a:7f:aa:
         d8:42:6b:eb:6f:d8:9f:ef:2e:c2:5a:79:8c:a1:64:7e:1c:f6:
         a7:91:47:f2:d4:59:6e:44:6d:00:00:7b:fb:38:f5:0a:01:1f:
         d5:d5:07:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----