Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
File:                     3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft (raw, json)
Hash identifier:          f7UtDgiOupvdvgjSa7iUHDdXsZFoMwxHR2244ovdfG0=
Subject key identifier:   C7:94:02:86:3F:55:C5:29:C4:75:2F:EF:17:C7:F4:AC:43:8B:59:3E
Authority key identifier: DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
Certificate issuer:       /CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Certificate serial:       0193568A4163BA0F9BFFE24EAC471E414A3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 01:02:01 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:01 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:01 +0000
Files and hashes:         1: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl (hash: DZ5e+aauS7GNhv3/Hrf/xXxdBKLe2PqocvaYibZ0/P8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:41:63:ba:0f:9b:ff:e2:4e:ac:47:1e:41:4a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
        Validity
            Not Before: Nov 23 01:02:01 2024 GMT
            Not After : Nov 24 01:02:01 2024 GMT
        Subject: CN=c79402863f55c529c4752fef17c7f4ac438b593e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2e:21:da:6d:38:74:bc:e4:69:2c:e4:b2:43:
                    7c:51:03:5a:a0:ca:a0:26:6c:87:bf:8f:c3:8a:76:
                    e4:84:8e:37:b7:79:cf:5d:65:33:1c:bc:35:88:2e:
                    3e:88:0e:67:61:fd:59:09:55:1d:a2:38:71:79:f9:
                    26:17:f9:df:38:e7:fc:cd:88:c1:f2:39:bb:cf:4b:
                    9d:8e:ea:18:a4:76:fd:ba:23:c7:5f:7b:ab:51:a3:
                    06:36:a9:4f:92:b2:9b:c4:48:22:c0:ff:d9:e0:51:
                    64:94:b3:98:43:c4:0d:83:9c:b9:08:da:ca:db:e8:
                    1e:bb:7a:57:6a:a1:ad:7f:be:1e:0d:67:a4:b5:cb:
                    b7:1a:42:7e:50:1c:18:f2:2d:0d:0d:62:10:ff:0a:
                    25:24:d1:e0:7f:b3:ed:67:88:43:32:ca:96:63:d0:
                    c9:65:d2:e0:2f:a7:b9:6e:23:49:dd:20:89:92:02:
                    6c:34:23:7e:c6:d8:3e:2c:29:32:b9:4a:f8:67:dd:
                    d6:79:18:b0:b2:96:db:ca:8b:a2:93:83:5a:9c:18:
                    56:fc:f2:50:e2:dd:5a:58:99:20:4f:09:65:3d:27:
                    8b:95:a0:b9:1c:43:eb:4d:ad:2e:8f:e8:6f:73:43:
                    1b:8d:d2:d2:37:1b:1d:ad:a6:8a:42:58:85:61:fc:
                    5a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:94:02:86:3F:55:C5:29:C4:75:2F:EF:17:C7:F4:AC:43:8B:59:3E
            X509v3 Authority Key Identifier:
                keyid:DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:35:4b:07:4b:f3:aa:7c:aa:06:79:5a:39:67:40:11:ae:21:
         15:df:0f:0e:bd:2f:7a:92:87:65:62:9d:ae:ba:2f:ba:a5:c7:
         5f:89:4b:e5:5d:f4:d4:0e:09:ef:e2:cf:1c:4a:5a:bd:90:91:
         85:66:db:d8:d5:26:97:f8:fa:8d:35:17:8d:3d:ed:51:72:e0:
         01:59:0e:d2:f4:3c:65:27:ab:6c:0d:7d:6c:1c:b8:55:1b:4c:
         b7:5a:45:b9:d8:76:1a:11:01:38:7b:e3:d5:1a:9c:0f:d9:d9:
         5e:82:e6:a0:3c:e8:8f:73:6e:e8:25:e9:30:43:80:01:1d:0d:
         d7:05:ff:9d:e5:74:c0:e2:40:cf:9b:59:20:46:cc:ed:ab:56:
         a6:ac:fe:1d:74:54:a7:bb:e1:b5:d9:59:c5:c3:7e:ec:ad:bf:
         cd:af:24:37:f8:82:14:c2:7c:9d:0f:46:0c:1e:c1:06:30:bb:
         01:20:9e:c7:cd:aa:68:b2:02:b2:ed:8f:e3:9a:6b:d8:76:cf:
         dc:86:9b:47:9d:85:4f:12:10:ec:43:32:5c:a0:26:a3:21:14:
         c2:3c:0e:b2:eb:92:f2:0a:61:08:b2:46:75:e6:70:c4:57:00:
         b6:68:10:60:d3:b0:9f:4e:cb:84:90:ff:23:68:81:ed:e1:d1:
         8a:8d:a6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----