Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
File:                     u03_X665REU6fISwl-V8ccBPEfw.mft (raw, json)
Hash identifier:          hyLz/6B4iPOde1tCA7tw+823/ZTIvUfjR8XbHbny8Uc=
Subject key identifier:   47:1F:19:8B:89:69:D0:0D:E7:9A:83:DA:84:F1:CF:A0:E9:72:CF:14
Authority key identifier: BB:4D:FF:5F:AE:B9:44:45:3A:7C:84:B0:97:E5:7C:71:C0:4F:11:FC
Certificate issuer:       /CN=bb4dff5faeb944453a7c84b097e57c71c04f11fc
Certificate serial:       019369D91BAD5C58DD8B473CC0150C0326CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u03_X665REU6fISwl-V8ccBPEfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
Manifest number:          06B9
Signing time:             Tue 26 Nov 2024 19:00:56 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:56 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:56 +0000
Files and hashes:         1: u03_X665REU6fISwl-V8ccBPEfw.crl (hash: r383+OLi8hcs2dvzhRlM34gXcOe+CDj1v3iLuzQvKmk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u03_X665REU6fISwl-V8ccBPEfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:1b:ad:5c:58:dd:8b:47:3c:c0:15:0c:03:26:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb4dff5faeb944453a7c84b097e57c71c04f11fc
        Validity
            Not Before: Nov 26 19:00:56 2024 GMT
            Not After : Nov 27 19:00:56 2024 GMT
        Subject: CN=471f198b8969d00de79a83da84f1cfa0e972cf14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:03:58:f9:db:ea:d0:60:c6:46:f0:02:5a:07:
                    28:4b:df:71:cf:5c:8b:16:f7:26:97:11:9e:fe:0e:
                    6a:28:6d:23:88:93:14:2f:d3:ba:c0:21:6e:f6:ba:
                    70:70:6d:99:c1:6b:a0:20:37:a2:f1:d7:50:d5:bd:
                    65:5d:6e:88:e4:1d:18:ea:d7:53:61:12:05:82:23:
                    23:85:26:24:d0:1a:a3:4f:35:5f:11:d9:fe:48:34:
                    f3:07:67:85:ac:0d:7c:25:86:ac:1c:60:af:4a:fd:
                    72:1b:90:06:1c:5e:ab:85:68:11:4e:6c:14:34:93:
                    61:fe:2b:6e:5f:d9:fd:be:4e:58:b0:95:a2:37:94:
                    1d:03:2f:58:81:1f:75:4d:e5:3e:4b:1a:59:a6:b4:
                    32:04:e6:a0:4f:08:b0:a4:0e:06:74:dd:2f:cb:35:
                    62:70:11:55:2d:b3:91:f3:aa:5a:6a:16:db:fe:85:
                    e6:3f:32:0d:f8:47:5c:07:99:80:94:4c:c6:06:29:
                    2c:4f:ea:40:90:d2:84:7d:3d:cf:1f:55:4b:0b:90:
                    1e:3b:2b:c5:44:68:3d:99:bf:f5:2f:fa:cd:f1:14:
                    a9:64:0d:6b:6c:09:7c:15:d3:a9:e1:be:76:c3:52:
                    29:11:2f:b6:2c:a5:98:64:70:f4:63:1f:40:1c:8d:
                    83:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1F:19:8B:89:69:D0:0D:E7:9A:83:DA:84:F1:CF:A0:E9:72:CF:14
            X509v3 Authority Key Identifier:
                keyid:BB:4D:FF:5F:AE:B9:44:45:3A:7C:84:B0:97:E5:7C:71:C0:4F:11:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u03_X665REU6fISwl-V8ccBPEfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ea:da:7f:a1:78:d7:79:30:58:ea:c8:1e:fb:9c:ff:40:f5:
         4f:32:ff:d7:c0:66:3b:6c:67:d3:73:d6:1b:19:f1:d2:a1:e7:
         79:89:10:3f:bd:0d:76:87:b4:ce:8a:a6:db:6a:d3:9b:e6:00:
         8d:41:99:3c:67:ee:45:a7:b7:27:84:ed:ab:a8:b7:b7:ca:eb:
         f6:c4:c3:22:b3:59:18:d0:24:fb:fd:72:60:f8:16:16:e5:33:
         94:a5:5a:23:e7:a7:e3:7a:d2:fb:92:c5:b9:b8:4b:ee:5c:90:
         b0:c4:c6:0a:d7:b1:08:e5:4d:43:6b:51:b5:67:a9:21:d9:df:
         01:78:22:1a:ba:5e:09:b0:48:24:2f:10:2b:1f:4a:66:8a:0f:
         80:08:98:c0:53:0f:db:e5:e3:f7:fb:98:9d:71:57:05:fd:da:
         18:7b:df:b1:c0:d0:a0:75:45:e5:5e:b8:6b:e1:78:44:5a:1d:
         57:23:18:f0:5b:76:83:74:d9:98:01:07:c9:33:ef:cc:2c:89:
         2c:44:5d:f2:f8:89:89:8b:8b:31:17:4b:06:64:7c:7b:26:88:
         fe:14:03:8b:d4:c0:da:22:8e:c4:b5:20:bb:19:39:67:cb:dd:
         88:39:a3:7c:1b:46:2a:4f:2f:cf:92:be:b8:d7:92:9f:ee:ad:
         53:68:d7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----