Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c1f0a2-bea0-4d79-b614-373ff1f59eb2/1/8kzCl2pp7R3X0Q89bSWcfJAkTFY.mft
File:                     8kzCl2pp7R3X0Q89bSWcfJAkTFY.mft (raw, json)
Hash identifier:          Jc0m6aeSN+qGxbDgklTDsyzVGk6IN5uaiIm0DyJx4X8=
Subject key identifier:   3D:B5:D2:64:D1:43:E4:09:76:C2:F4:C5:38:AC:1F:6D:66:A3:23:ED
Authority key identifier: F2:4C:C2:97:6A:69:ED:1D:D7:D1:0F:3D:6D:25:9C:7C:90:24:4C:56
Certificate issuer:       /CN=f24cc2976a69ed1dd7d10f3d6d259c7c90244c56
Certificate serial:       0193580937CE6039E316DCABD113D6F95A08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8kzCl2pp7R3X0Q89bSWcfJAkTFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/c1f0a2-bea0-4d79-b614-373ff1f59eb2/1/8kzCl2pp7R3X0Q89bSWcfJAkTFY.mft
Manifest number:          01FE
Signing time:             Sat 23 Nov 2024 08:00:19 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:19 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:19 +0000
Files and hashes:         1: 8kzCl2pp7R3X0Q89bSWcfJAkTFY.crl (hash: vjLfZ87hM2aoIyK9bqURkQIAVJSEREYkKmhpG9ghipQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/c1f0a2-bea0-4d79-b614-373ff1f59eb2/1/8kzCl2pp7R3X0Q89bSWcfJAkTFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/c1f0a2-bea0-4d79-b614-373ff1f59eb2/1/8kzCl2pp7R3X0Q89bSWcfJAkTFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8kzCl2pp7R3X0Q89bSWcfJAkTFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:37:ce:60:39:e3:16:dc:ab:d1:13:d6:f9:5a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f24cc2976a69ed1dd7d10f3d6d259c7c90244c56
        Validity
            Not Before: Nov 23 08:00:19 2024 GMT
            Not After : Nov 24 08:00:19 2024 GMT
        Subject: CN=3db5d264d143e40976c2f4c538ac1f6d66a323ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4a:1b:28:d9:41:fe:1f:39:1a:e0:de:3d:82:
                    a8:39:14:92:7a:4c:0a:47:f2:f9:9f:e6:13:6c:c7:
                    5c:ad:c6:59:33:90:d8:2f:5f:a3:de:84:86:ab:2c:
                    9a:07:ac:27:1b:ba:8c:66:65:96:60:d8:8d:c0:f7:
                    c6:4a:0e:f0:80:f3:c9:31:7e:3e:80:13:b9:74:74:
                    37:d9:ae:1b:b6:d4:04:07:76:f7:98:a4:17:86:90:
                    f8:fb:1f:98:74:1b:eb:a1:a3:80:01:9c:b1:f9:be:
                    8e:7c:4f:62:62:cc:39:aa:67:11:f8:0e:13:1d:39:
                    d4:56:5e:bf:80:4f:2a:5b:45:22:43:ef:8b:1a:69:
                    2f:fb:2e:98:42:8b:b9:b9:15:f7:6a:80:21:1b:f8:
                    55:1b:06:92:4a:fa:a1:a6:ea:4a:17:90:ac:b6:b5:
                    aa:71:e2:63:9f:e2:a1:a7:96:42:66:3e:7a:0d:ae:
                    23:2f:48:57:6d:da:43:56:f9:95:0a:b4:2c:fa:cb:
                    74:19:6d:39:75:27:14:56:c8:53:16:54:61:c6:21:
                    54:ba:ab:fd:d6:eb:7c:e8:0e:83:0a:71:68:9b:b1:
                    63:27:ed:36:3a:43:b4:5e:46:91:d9:ba:1b:45:4b:
                    47:2c:8f:2a:0d:72:96:fe:90:e9:62:be:28:c7:7f:
                    4e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B5:D2:64:D1:43:E4:09:76:C2:F4:C5:38:AC:1F:6D:66:A3:23:ED
            X509v3 Authority Key Identifier:
                keyid:F2:4C:C2:97:6A:69:ED:1D:D7:D1:0F:3D:6D:25:9C:7C:90:24:4C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kzCl2pp7R3X0Q89bSWcfJAkTFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c1f0a2-bea0-4d79-b614-373ff1f59eb2/1/8kzCl2pp7R3X0Q89bSWcfJAkTFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c1f0a2-bea0-4d79-b614-373ff1f59eb2/1/8kzCl2pp7R3X0Q89bSWcfJAkTFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:2a:c5:87:99:a5:6b:cd:a2:a4:7a:b7:c9:a0:de:cd:51:52:
         90:cf:b1:32:b4:2c:30:32:da:49:4b:22:72:48:84:fd:49:51:
         a0:a8:e1:3b:87:ca:2c:99:d8:83:a9:69:09:03:f9:2c:99:4b:
         98:cf:1f:19:d6:50:60:5a:d4:7d:09:b5:04:a7:3f:79:68:b0:
         1d:70:3d:bb:f1:98:9a:5c:7a:49:5c:d1:1d:ca:d3:ea:3e:38:
         48:3c:d3:cd:a2:7a:a2:e0:b1:d1:e4:b8:da:07:6f:2a:cf:c8:
         58:f1:d4:fb:38:d3:28:ee:a1:bc:af:45:2b:e0:b1:53:6e:b6:
         3f:e0:f1:65:f5:4e:1d:db:ae:06:61:6a:bf:e8:b8:59:30:b6:
         ba:91:55:52:c1:15:4e:52:b3:0c:09:e9:67:9f:97:f7:16:8e:
         8c:86:72:2d:5b:4e:ab:39:b4:22:fa:c9:22:5c:8e:b7:8d:46:
         cb:69:6d:7e:30:1a:8b:22:ae:fc:6a:8a:7a:bb:69:2f:1a:af:
         3b:d8:fc:ac:9f:bd:b2:99:5d:a1:99:66:7d:d9:9f:e9:c3:6e:
         ef:42:d8:e2:71:29:a0:1a:80:81:5d:75:34:02:5f:44:69:ae:
         24:d6:f1:4b:99:f5:ee:6c:37:14:33:5a:22:02:dc:66:08:a2:
         fe:e1:e6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----