Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
File:                     hfR7ZaUlMyab0hmBOlIDr92eXb4.mft (raw, json)
Hash identifier:          Pgq+P6A+JDxTb91AOLGF2392N0k3QUZ8bZrdHz7+tRA=
Subject key identifier:   C4:22:36:DA:F4:E6:4B:91:9E:58:76:F5:D0:8B:63:35:83:EB:77:7E
Authority key identifier: 85:F4:7B:65:A5:25:33:26:9B:D2:19:81:3A:52:03:AF:DD:9E:5D:BE
Certificate issuer:       /CN=85f47b65a52533269bd219813a5203afdd9e5dbe
Certificate serial:       01936A46E96CC57E595DA4F8FD4955FA095D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
Manifest number:          0F6D
Signing time:             Tue 26 Nov 2024 21:00:52 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:52 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:52 +0000
Files and hashes:         1: hfR7ZaUlMyab0hmBOlIDr92eXb4.crl (hash: WFn2NjkdZZTG+weI/UpWcIExld5LuRiOL8qFxL7ELOs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:e9:6c:c5:7e:59:5d:a4:f8:fd:49:55:fa:09:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f47b65a52533269bd219813a5203afdd9e5dbe
        Validity
            Not Before: Nov 26 21:00:52 2024 GMT
            Not After : Nov 27 21:00:52 2024 GMT
        Subject: CN=c42236daf4e64b919e5876f5d08b633583eb777e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:76:d8:dc:59:24:14:29:d5:3a:92:2f:63:1e:
                    ac:b7:d1:9d:bf:57:81:64:7b:f8:51:42:65:18:31:
                    a8:3f:61:87:12:50:be:fd:15:0e:82:3a:e3:65:7e:
                    10:d6:b2:fb:5b:0a:e9:f2:82:58:d4:f2:4f:fd:8e:
                    48:83:bf:7e:35:e0:9e:8d:ec:9e:cf:63:6b:98:c6:
                    59:6f:3e:9a:12:bf:9c:33:db:48:ef:8a:fc:9b:9e:
                    65:1b:39:3f:dd:a0:b1:1d:13:2b:ea:a0:af:5e:86:
                    0c:29:ea:20:05:af:9a:38:32:b9:fd:b5:f3:e2:e8:
                    27:b8:be:ac:4c:4c:10:fb:36:a4:3f:66:d7:37:e3:
                    90:d2:fe:e2:55:4c:fc:80:4a:4b:6e:3a:fd:14:dc:
                    bf:de:f1:66:09:19:1a:3a:84:40:d0:cf:0b:ac:4a:
                    85:46:d4:ed:cf:d1:5e:43:83:a0:a5:1e:cb:e9:c9:
                    15:91:33:d0:92:d1:d8:26:22:f1:85:e2:18:45:17:
                    a0:cd:7a:0b:43:73:de:a0:6d:fc:52:28:83:37:03:
                    b9:88:c4:75:8f:d1:6c:23:97:b1:c8:4d:16:8e:0e:
                    62:d2:b1:80:95:82:e8:29:25:b6:67:d4:45:ca:76:
                    cc:ff:c9:ec:e9:67:76:3b:e5:df:ac:6e:84:77:ad:
                    68:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:22:36:DA:F4:E6:4B:91:9E:58:76:F5:D0:8B:63:35:83:EB:77:7E
            X509v3 Authority Key Identifier:
                keyid:85:F4:7B:65:A5:25:33:26:9B:D2:19:81:3A:52:03:AF:DD:9E:5D:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:4b:d4:0a:5a:6f:de:ff:41:12:47:01:08:ae:5c:af:2a:97:
         25:92:96:fe:bc:7b:d8:1b:17:de:59:a6:d2:d0:e6:0f:6f:72:
         6f:c2:8f:bb:33:1b:2b:5d:67:d2:c0:23:80:af:da:3d:ae:1b:
         a2:57:6e:1a:f9:65:8a:59:55:51:38:82:28:e5:01:b2:27:eb:
         e3:dc:dc:fc:3d:03:9b:94:02:9d:6d:3d:f7:f1:93:5e:da:5f:
         35:81:58:19:f9:46:f1:7b:10:90:00:38:73:3a:73:9c:62:1f:
         fb:f9:2a:9f:d1:ec:5a:66:53:ed:b0:ab:8e:8c:f3:f3:92:40:
         a9:12:90:0c:47:1a:f3:e9:94:fa:0b:f8:01:f6:8e:8e:6e:aa:
         14:4c:3c:da:f0:17:e3:cf:2b:c4:4f:75:5e:9e:db:67:36:05:
         31:c9:0d:84:20:52:86:55:01:53:b7:7f:30:10:93:ac:ec:5f:
         7e:13:39:0f:3e:4d:4f:a3:85:cc:77:48:0d:cf:ba:cf:bc:e7:
         80:01:f6:9c:b1:a1:81:d2:5c:92:1d:2a:68:11:a3:98:1f:f2:
         da:97:e7:5a:09:60:e2:a3:00:d0:a3:8c:f7:3d:30:af:27:d6:
         c5:d0:ad:f6:74:cf:85:33:3d:47:81:d7:df:93:e6:30:20:60:
         d0:45:82:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----