Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/f2a192-c9e7-4fe3-a75a-1e2126f53786/1/4DF0oBKHMPqsDXjHo9kIqlEFS-c.mft
File:                     4DF0oBKHMPqsDXjHo9kIqlEFS-c.mft (raw, json)
Hash identifier:          5VHFkV5Yzk6UJG1ld6EYTtUMPjbqpCA4xBikQ9LB/nk=
Subject key identifier:   8D:3A:86:D0:96:26:E3:BE:E4:8F:47:A6:4F:18:E4:61:C1:88:18:5C
Authority key identifier: E0:31:74:A0:12:87:30:FA:AC:0D:78:C7:A3:D9:08:AA:51:05:4B:E7
Certificate issuer:       /CN=e03174a0128730faac0d78c7a3d908aa51054be7
Certificate serial:       019406467D49E241AE88CF0E7B25901D63D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4DF0oBKHMPqsDXjHo9kIqlEFS-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/f2a192-c9e7-4fe3-a75a-1e2126f53786/1/4DF0oBKHMPqsDXjHo9kIqlEFS-c.mft
Manifest number:          13C9
Signing time:             Fri 27 Dec 2024 04:01:10 +0000
Manifest this update:     Fri 27 Dec 2024 04:01:10 +0000
Manifest next update:     Sat 28 Dec 2024 04:01:10 +0000
Files and hashes:         1: 4DF0oBKHMPqsDXjHo9kIqlEFS-c.crl (hash: k05UpEaW7XuEyWfKrs+45B0ekZ3vuIZ82OSyks7QNg4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/f2a192-c9e7-4fe3-a75a-1e2126f53786/1/4DF0oBKHMPqsDXjHo9kIqlEFS-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/f2a192-c9e7-4fe3-a75a-1e2126f53786/1/4DF0oBKHMPqsDXjHo9kIqlEFS-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4DF0oBKHMPqsDXjHo9kIqlEFS-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:46:7d:49:e2:41:ae:88:cf:0e:7b:25:90:1d:63:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e03174a0128730faac0d78c7a3d908aa51054be7
        Validity
            Not Before: Dec 27 04:01:10 2024 GMT
            Not After : Dec 28 04:01:10 2024 GMT
        Subject: CN=8d3a86d09626e3bee48f47a64f18e461c188185c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4e:e3:bf:09:b1:d8:97:22:e8:b7:e4:b5:f5:
                    f4:42:03:94:cd:21:1e:91:b6:9c:7c:1c:7e:bd:e7:
                    7e:bc:33:4e:1b:c9:9d:38:c1:b0:92:81:9f:cb:62:
                    fc:20:17:d8:b2:d0:e8:bd:e5:bf:11:0b:ff:48:5f:
                    30:42:28:80:71:bb:4d:cd:52:87:8f:49:62:fc:70:
                    cb:08:7a:e4:e5:ff:f3:c1:0b:23:78:66:cd:b4:eb:
                    1b:92:b3:64:b8:12:16:30:b5:41:28:5c:2e:79:31:
                    f0:af:98:db:1e:2c:7b:2b:a2:67:30:27:6e:34:ef:
                    b1:5a:1c:8d:18:41:f2:2d:58:f8:39:93:37:76:2e:
                    f8:9c:f7:1f:21:b2:80:f4:86:5c:fc:13:eb:5f:56:
                    ae:19:74:90:72:d1:55:54:1e:76:9b:fc:97:86:49:
                    11:63:18:88:33:ee:d0:45:f8:45:70:b1:b7:ca:ae:
                    cb:d7:66:6d:14:14:1d:97:d0:a6:c3:26:7e:f8:46:
                    27:3c:4a:e6:e3:b8:3d:4c:aa:1a:83:bd:9d:f2:0d:
                    13:c1:51:7e:db:af:01:22:28:7f:e5:c7:47:26:6d:
                    a6:8e:73:9d:aa:bd:3c:52:6b:59:61:0c:d8:45:88:
                    d9:f6:ad:a4:07:62:fe:a9:03:80:75:82:50:7a:d6:
                    c4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3A:86:D0:96:26:E3:BE:E4:8F:47:A6:4F:18:E4:61:C1:88:18:5C
            X509v3 Authority Key Identifier:
                keyid:E0:31:74:A0:12:87:30:FA:AC:0D:78:C7:A3:D9:08:AA:51:05:4B:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DF0oBKHMPqsDXjHo9kIqlEFS-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f2a192-c9e7-4fe3-a75a-1e2126f53786/1/4DF0oBKHMPqsDXjHo9kIqlEFS-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f2a192-c9e7-4fe3-a75a-1e2126f53786/1/4DF0oBKHMPqsDXjHo9kIqlEFS-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:18:d1:74:2c:58:ca:95:4e:66:86:87:28:58:63:84:ac:20:
         4d:b3:0e:9f:94:0e:38:0e:aa:33:e6:16:e0:81:11:8a:9b:9a:
         18:33:94:40:db:e2:ae:67:7a:a1:c5:93:5a:0a:14:93:fe:ae:
         38:15:8f:ee:6c:6e:5d:fc:b5:b8:cb:5f:44:a0:d8:84:a8:48:
         d8:e3:73:8e:cb:53:e5:1a:06:4d:a0:db:b0:ff:7c:69:df:9c:
         2b:f4:b8:22:d8:ff:c7:26:6c:56:79:b1:0d:53:65:50:3d:b0:
         44:89:44:0e:55:f5:84:59:38:fb:a7:75:3d:d0:15:2f:14:5d:
         5b:a6:f8:0f:a8:30:4e:c7:6c:18:d4:4a:0b:ac:63:dc:5c:09:
         f9:60:cd:ad:bc:db:9b:04:94:75:ed:d3:da:d0:bd:c0:ed:cf:
         64:77:36:e8:7b:51:09:7e:93:06:ef:44:1d:c0:32:2d:7a:e4:
         dc:99:2e:5c:81:90:4b:f1:7c:e7:5d:63:8e:1a:e1:3a:87:e6:
         2c:66:32:ee:f3:97:b1:ae:5d:11:ba:bb:ad:19:71:1c:88:12:
         68:4c:73:c8:b3:67:d0:f4:de:ea:85:0f:c4:2a:8b:b9:2b:94:
         4d:7c:bd:19:79:67:df:85:4c:80:c8:8c:bc:24:4f:8b:39:b6:
         e3:73:b2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----