Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
File:                     pj6AVRuSNrvAzXHFHRlZGA58j3w.mft (raw, json)
Hash identifier:          NF+qWmd0xNZTLBj72YHJi5n53CJE0tROCzFBH8PE0g8=
Subject key identifier:   C8:78:03:BF:66:AB:29:11:96:51:ED:97:44:F7:F3:12:2C:5A:CF:B6
Authority key identifier: A6:3E:80:55:1B:92:36:BB:C0:CD:71:C5:1D:19:59:18:0E:7C:8F:7C
Certificate issuer:       /CN=a63e80551b9236bbc0cd71c51d1959180e7c8f7c
Certificate serial:       01935688CCAD8D16C14681CAFA20EAA25228
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
Manifest number:          10B2
Signing time:             Sat 23 Nov 2024 01:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:25 +0000
Files and hashes:         1: pj6AVRuSNrvAzXHFHRlZGA58j3w.crl (hash: 4YfvOofwP/bfMgSFCvq2RNZkeJOygLfJqLybP1oosEA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:cc:ad:8d:16:c1:46:81:ca:fa:20:ea:a2:52:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63e80551b9236bbc0cd71c51d1959180e7c8f7c
        Validity
            Not Before: Nov 23 01:00:25 2024 GMT
            Not After : Nov 24 01:00:25 2024 GMT
        Subject: CN=c87803bf66ab29119651ed9744f7f3122c5acfb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fd:fc:4e:d3:13:d9:f2:31:b6:32:44:5b:25:
                    aa:bf:f7:4e:4e:f9:78:4d:35:88:1a:6f:1b:03:00:
                    57:fc:a2:4f:9e:8a:ac:4a:08:43:79:49:41:e0:c8:
                    05:00:88:15:6a:23:df:f9:0b:d0:80:b8:5c:bf:f3:
                    e4:93:aa:44:e1:61:0b:13:80:cf:eb:50:81:7f:47:
                    e9:84:42:ce:d1:51:14:e3:4f:75:7b:43:21:26:ef:
                    22:82:b6:7a:75:63:40:0c:57:e8:3f:4f:74:e3:c0:
                    db:ba:cc:1e:8a:b0:d1:3f:3a:04:df:83:87:0f:19:
                    b2:f7:69:8a:07:0a:d3:dc:9b:bc:30:d7:9d:28:65:
                    1d:9d:ac:36:6e:b9:b3:2f:d8:17:da:24:9a:ed:cb:
                    3d:3f:14:c7:67:b1:fe:7f:47:fb:9e:c4:1c:33:58:
                    20:9f:f4:7c:28:5e:b5:42:18:1a:79:a9:e8:53:4c:
                    f3:6a:49:6a:f9:50:23:7c:0d:2e:0e:fd:ca:d3:6b:
                    a5:97:31:a1:94:ca:1e:c0:5b:fa:2f:53:ac:39:ca:
                    0c:5e:44:d0:2a:21:0c:79:63:4f:cb:15:ce:43:90:
                    2a:ef:34:a2:70:f5:68:8a:58:7d:b1:3b:2c:d6:20:
                    21:2e:1d:47:99:e7:a1:74:66:f5:cd:d5:3a:85:27:
                    45:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:78:03:BF:66:AB:29:11:96:51:ED:97:44:F7:F3:12:2C:5A:CF:B6
            X509v3 Authority Key Identifier:
                keyid:A6:3E:80:55:1B:92:36:BB:C0:CD:71:C5:1D:19:59:18:0E:7C:8F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:2a:7e:0d:bc:b8:db:64:29:21:94:bc:c8:a5:44:89:fa:98:
         b9:cb:94:1f:cb:d8:fe:ab:bd:5c:7f:f1:d4:b7:10:40:d5:63:
         0f:5f:6a:55:10:b7:eb:01:53:42:77:27:93:c0:c3:b0:99:84:
         95:94:ce:ed:68:b7:1b:6b:db:fb:26:05:f3:a7:82:e8:b9:f8:
         58:44:3c:bd:db:07:c1:58:b7:eb:87:47:36:6a:82:1b:8e:3c:
         4f:51:f7:49:b6:74:24:0a:6c:35:57:f5:bf:51:28:b2:77:bf:
         61:b5:fc:ae:d2:17:fe:e7:93:0d:03:38:af:fc:9e:60:3b:17:
         32:ea:1e:65:f0:6b:35:02:94:a1:87:56:eb:a3:23:b9:97:c2:
         42:00:b7:e1:4e:3d:eb:06:3b:a4:f4:a2:96:6f:13:da:a0:45:
         a5:bf:eb:32:46:2e:3a:e2:29:4a:b6:e5:44:a2:b0:9d:4c:ed:
         d3:da:39:9d:fb:db:75:fe:4b:88:f8:a2:4b:d8:a4:d2:e3:ea:
         94:e8:16:f0:ba:b2:f5:78:ba:4d:8b:34:a4:08:5d:45:0a:5e:
         38:8a:8e:19:21:9e:9b:ea:b7:f2:a9:06:da:9c:e2:dc:97:70:
         45:5f:b6:46:87:79:57:8d:86:09:5d:db:78:b3:be:bc:7d:b2:
         3d:dd:ac:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----