Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
File:                     mYkvB5PMiUvypMdIda8Iqi0dHJk.mft (raw, json)
Hash identifier:          EhvxXkQX0bloGDgWuQVmwpJYy103L0HLWtay7vPZfco=
Subject key identifier:   B8:31:74:AD:01:DB:E7:C5:E5:0D:D3:7D:15:A1:5D:E2:03:46:24:6D
Authority key identifier: 99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
Certificate issuer:       /CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Certificate serial:       019357D29481A9C4DBB32CA87C3BA2B5A684
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
Manifest number:          0B15
Signing time:             Sat 23 Nov 2024 07:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:38 +0000
Files and hashes:         1: mYkvB5PMiUvypMdIda8Iqi0dHJk.crl (hash: 3WXO7z4bb2EQW5ipj17T626shMCbyZYrxxitiY2G/dc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:94:81:a9:c4:db:b3:2c:a8:7c:3b:a2:b5:a6:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
        Validity
            Not Before: Nov 23 07:00:38 2024 GMT
            Not After : Nov 24 07:00:38 2024 GMT
        Subject: CN=b83174ad01dbe7c5e50dd37d15a15de20346246d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:70:90:07:ad:f7:a2:f5:8b:fd:75:66:e3:cb:
                    97:8d:30:64:51:35:52:05:5a:0d:dd:cb:85:81:19:
                    7d:7e:ff:06:a6:c4:34:04:c8:54:c9:af:27:e9:fc:
                    d7:31:73:dd:b7:f7:c5:f5:19:b9:c4:fa:3e:11:c7:
                    8b:33:d5:b3:b2:dd:8a:ef:3c:c8:02:64:62:d9:b5:
                    d9:bf:69:45:30:ca:d7:da:f4:0f:8d:9d:d7:12:72:
                    f2:8a:4c:7b:75:5f:94:32:fe:69:86:e7:28:d2:58:
                    11:86:32:41:09:ea:35:ce:e7:2d:a8:f1:e9:06:e2:
                    b5:f6:cd:6e:b7:b9:68:99:e2:8c:4c:f3:6f:5e:c3:
                    26:60:39:c1:26:b4:63:f4:15:83:fb:0a:f5:7e:5b:
                    35:3d:97:e6:0c:f8:5d:b1:30:4c:2b:f6:ca:1c:68:
                    53:c9:97:a4:26:1c:f3:db:e4:31:12:54:b7:e4:09:
                    9d:05:2e:a2:e8:08:33:38:86:30:76:f3:c1:e2:59:
                    ad:f8:87:37:96:a6:56:f5:c8:70:fb:19:ee:4a:85:
                    f6:6c:5e:39:19:64:df:44:6a:42:37:70:25:c4:02:
                    58:f0:e6:5f:3c:1c:bb:d5:c3:ab:b1:62:48:6f:3d:
                    34:5a:d0:b2:17:fa:40:08:2e:ed:e2:78:2d:7b:49:
                    47:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:31:74:AD:01:DB:E7:C5:E5:0D:D3:7D:15:A1:5D:E2:03:46:24:6D
            X509v3 Authority Key Identifier:
                keyid:99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:47:45:25:a0:65:da:c9:6f:ad:75:7b:d5:c4:49:97:03:25:
         c1:e1:bf:bb:2b:96:a0:82:24:83:88:8c:de:c3:8b:10:d8:32:
         30:46:89:1c:b3:da:ab:3e:ea:8c:69:37:09:14:ec:7f:f3:be:
         fd:ef:c5:bb:11:4d:ca:54:6b:52:27:a1:e0:0a:d5:32:57:89:
         e7:be:dc:41:cb:09:91:62:3e:a2:e9:1c:f0:5d:c7:c3:8f:d5:
         31:17:6b:4c:da:72:bd:cf:91:c4:e4:06:74:95:3b:55:76:50:
         21:c4:2a:27:60:5f:31:75:21:77:f6:8e:e6:15:30:6e:73:3d:
         3f:af:98:f4:2b:49:8d:2f:30:e7:26:70:ed:60:94:5b:13:47:
         5b:51:7d:61:8a:43:47:2c:e0:e1:e4:c8:55:f4:0d:d6:35:e3:
         c5:23:89:eb:52:95:bc:8d:06:7a:44:6f:7a:4b:69:74:a3:37:
         3b:29:e2:10:5f:c1:1e:d9:c9:24:30:3a:b2:2b:65:a6:b8:8b:
         10:21:0d:bf:f0:6c:7b:1d:a0:b3:7c:2a:77:b9:91:38:92:20:
         3c:fc:ac:66:5d:29:1e:e4:31:50:ee:a5:34:96:63:df:ba:ff:
         44:2b:3c:eb:0e:8c:dd:f2:be:bc:17:d8:f5:bf:06:a5:11:3b:
         34:26:d2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----