Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/1696f1-9fc7-463a-857e-dc4b6bb5e813/1/BEa-UW6gc36m5j75WD884qcNtBI.mft
File:                     BEa-UW6gc36m5j75WD884qcNtBI.mft (raw, json)
Hash identifier:          05KEzEu1RlPTeB2HV4itussmxvKCBAGJPuBMlk83zjE=
Subject key identifier:   F6:83:9D:3A:3F:71:A4:2D:4C:DA:26:2A:78:3D:A7:51:A7:37:A8:2E
Authority key identifier: 04:46:BE:51:6E:A0:73:7E:A6:E6:3E:F9:58:3F:3C:E2:A7:0D:B4:12
Certificate issuer:       /CN=0446be516ea0737ea6e63ef9583f3ce2a70db412
Certificate serial:       019369D89AEB63BC837FCD8D105E0EDF9DDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BEa-UW6gc36m5j75WD884qcNtBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/1696f1-9fc7-463a-857e-dc4b6bb5e813/1/BEa-UW6gc36m5j75WD884qcNtBI.mft
Manifest number:          0960
Signing time:             Tue 26 Nov 2024 19:00:23 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:23 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:23 +0000
Files and hashes:         1: BEa-UW6gc36m5j75WD884qcNtBI.crl (hash: xZjMPtHXRHfzXZPIxPuwi7R/PrdZmGtUSKsfkdEwpKw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/1696f1-9fc7-463a-857e-dc4b6bb5e813/1/BEa-UW6gc36m5j75WD884qcNtBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/1696f1-9fc7-463a-857e-dc4b6bb5e813/1/BEa-UW6gc36m5j75WD884qcNtBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BEa-UW6gc36m5j75WD884qcNtBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:9a:eb:63:bc:83:7f:cd:8d:10:5e:0e:df:9d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0446be516ea0737ea6e63ef9583f3ce2a70db412
        Validity
            Not Before: Nov 26 19:00:23 2024 GMT
            Not After : Nov 27 19:00:23 2024 GMT
        Subject: CN=f6839d3a3f71a42d4cda262a783da751a737a82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:db:9b:29:d2:a5:c4:02:7d:35:c5:b5:e0:2f:
                    5a:d7:6e:a1:53:75:3a:7a:11:f1:33:06:98:ea:46:
                    ed:41:1d:22:d7:9a:38:cb:d5:fd:bb:bf:48:ec:6a:
                    95:79:4b:fb:95:c7:4e:88:09:7f:8b:c0:e2:7d:60:
                    ab:99:69:b4:f0:73:34:ac:8e:9f:ab:3a:99:7d:5b:
                    9b:1d:21:20:26:b5:bd:e4:dc:21:17:f2:35:98:0b:
                    71:33:f7:1c:27:91:a3:50:e6:f7:df:17:6e:a9:39:
                    71:31:9c:43:b5:6d:0f:8c:36:64:01:11:ae:14:ce:
                    40:7c:fc:9a:25:25:88:52:64:39:15:78:70:36:59:
                    08:b5:52:3f:b7:96:d0:4a:e6:63:d5:94:0c:5f:5f:
                    8c:31:27:3f:d8:e8:46:64:5e:78:39:67:24:65:a4:
                    90:02:49:1b:2c:eb:7e:35:67:67:62:20:58:0b:ec:
                    90:1b:3f:30:59:6f:fa:73:90:36:10:04:be:54:66:
                    8c:ea:77:2b:6a:9c:b1:c0:d3:61:a9:d2:1c:59:ad:
                    10:19:62:28:c9:15:60:bd:00:62:b7:d5:00:40:e7:
                    a7:36:e3:a2:59:ca:a8:04:fc:fd:94:e2:2f:be:45:
                    01:c2:dc:d7:c4:b7:45:51:81:1e:07:7a:09:9d:74:
                    61:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:83:9D:3A:3F:71:A4:2D:4C:DA:26:2A:78:3D:A7:51:A7:37:A8:2E
            X509v3 Authority Key Identifier:
                keyid:04:46:BE:51:6E:A0:73:7E:A6:E6:3E:F9:58:3F:3C:E2:A7:0D:B4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEa-UW6gc36m5j75WD884qcNtBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1696f1-9fc7-463a-857e-dc4b6bb5e813/1/BEa-UW6gc36m5j75WD884qcNtBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1696f1-9fc7-463a-857e-dc4b6bb5e813/1/BEa-UW6gc36m5j75WD884qcNtBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:3a:95:4c:06:cf:f1:da:c2:45:63:dc:a0:49:ba:8a:0a:fb:
         71:42:55:d3:be:42:a9:dd:c6:3b:f9:2c:4b:a1:58:78:aa:2c:
         5a:2a:50:7b:c2:40:3c:6d:67:0d:1b:ed:06:0f:12:48:92:98:
         2a:f1:fc:b6:30:fb:96:61:ac:e5:7d:d1:d9:18:57:6f:9b:c6:
         ab:04:b3:d9:bf:dc:6e:a9:51:05:e1:86:5e:51:1b:36:45:fa:
         34:5d:ce:83:ab:a3:59:b0:01:d8:e3:e4:6b:4b:2a:db:0e:bf:
         7f:e7:36:ea:5f:62:16:24:61:ac:cb:fb:fd:07:4d:7b:ad:ac:
         f7:e0:59:0a:3e:07:75:e2:7d:e5:10:82:6a:33:bc:19:64:c7:
         39:7a:a9:4e:7f:cb:70:b3:41:c8:b9:4e:85:23:0b:77:cb:3b:
         52:ee:a8:57:f1:c1:41:1c:95:31:ef:e1:ac:ff:3e:31:a4:7d:
         7f:c0:4a:c9:47:ca:74:76:6c:7f:8e:b7:d0:b6:12:2b:08:bb:
         76:c2:a6:ad:62:57:94:63:01:46:56:b8:7e:40:0b:3a:5b:97:
         06:3a:2a:57:b5:4d:97:9d:58:05:d7:bf:cb:bc:9a:5b:57:14:
         82:59:9d:d7:d0:5f:61:7f:d1:49:6f:9c:f8:5c:79:82:0b:44:
         c7:0d:bb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----