Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft
File:                     ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft (raw, json)
Hash identifier:          uvWOM+QMNNW5IjhSpFk6PPaASlhHX2pO+QW8x5REOhU=
Subject key identifier:   9D:F0:8D:32:AB:D2:19:B3:07:31:09:78:11:FC:1C:25:EE:E0:A2:3E
Authority key identifier: 00:11:FE:2B:2F:67:54:7A:D7:12:D6:FC:36:AC:67:DD:69:2F:0E:1E
Certificate issuer:       /CN=0011fe2b2f67547ad712d6fc36ac67dd692f0e1e
Certificate serial:       019406EA9033A3DE6084C2C65320F075BFB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft
Manifest number:          0A3A
Signing time:             Fri 27 Dec 2024 07:00:23 +0000
Manifest this update:     Fri 27 Dec 2024 07:00:23 +0000
Manifest next update:     Sat 28 Dec 2024 07:00:23 +0000
Files and hashes:         1: ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.crl (hash: j225v8fdND7D7vVer1ai55VVmS/71rLq7mT/LA2WBWY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:ea:90:33:a3:de:60:84:c2:c6:53:20:f0:75:bf:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0011fe2b2f67547ad712d6fc36ac67dd692f0e1e
        Validity
            Not Before: Dec 27 07:00:23 2024 GMT
            Not After : Dec 28 07:00:23 2024 GMT
        Subject: CN=9df08d32abd219b30731097811fc1c25eee0a23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:07:12:ec:3c:e6:ff:93:37:7c:37:ce:ba:c4:
                    12:61:8a:a0:d0:e4:06:c6:33:fd:b1:bc:29:09:5f:
                    3c:71:65:61:8d:b8:27:57:55:40:f1:04:70:07:ab:
                    94:ff:32:bf:b7:32:f8:9b:e9:1f:f5:b2:79:80:01:
                    90:19:b5:43:a2:f1:19:4b:b0:39:6e:21:6f:52:63:
                    fe:50:60:33:9f:a6:ae:72:59:86:4a:16:f6:a4:d8:
                    ab:7b:6e:ed:a0:42:54:33:3f:55:86:20:2e:f0:4e:
                    fc:8e:c6:af:7a:70:55:61:09:c8:f9:89:f2:01:08:
                    c7:19:f2:53:02:9a:a8:ae:3f:7a:46:f5:dd:25:9c:
                    c6:66:17:3c:ef:0c:a7:33:43:09:62:2f:7e:3e:2a:
                    03:11:30:8d:79:34:db:f1:fb:d9:6a:0e:c6:e1:df:
                    a5:59:81:0f:b0:5c:65:51:30:71:cc:9c:45:4f:f6:
                    80:73:c8:c1:a4:45:64:22:e6:3a:3d:ef:a1:27:08:
                    da:b4:25:d1:06:cf:bc:b8:ff:a6:ef:06:69:5c:35:
                    c3:ff:99:4c:a5:07:84:c1:08:dc:82:2f:6b:19:64:
                    41:03:3c:69:58:5e:85:c1:e2:df:de:b4:91:56:22:
                    c9:b2:db:bc:02:12:d8:a7:03:b3:7a:a0:4a:8e:ce:
                    02:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F0:8D:32:AB:D2:19:B3:07:31:09:78:11:FC:1C:25:EE:E0:A2:3E
            X509v3 Authority Key Identifier:
                keyid:00:11:FE:2B:2F:67:54:7A:D7:12:D6:FC:36:AC:67:DD:69:2F:0E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ea:bb:b2:bc:f6:5a:0e:e3:f6:b9:08:a1:53:f7:d4:8b:d3:
         2b:8f:31:23:f4:e3:3e:04:aa:00:2f:21:58:32:31:f5:06:88:
         7c:06:3d:73:9a:5d:60:2a:f7:b7:53:3a:83:7c:d9:44:b9:33:
         1e:56:b4:11:bd:e2:70:58:aa:62:39:82:2d:4b:ff:05:f1:20:
         ed:0d:72:38:28:6d:16:44:68:d3:2b:47:7f:de:a2:f9:d0:b7:
         f9:f9:cf:a1:f0:0b:d3:30:d1:8f:14:3c:41:8b:20:89:ba:2f:
         eb:fc:ce:65:a9:11:b7:0b:fc:d6:db:67:f9:b6:94:e6:a6:e4:
         a8:78:39:ef:f0:a7:75:9f:8b:92:e7:2b:bc:70:95:4d:f5:8e:
         ce:5e:55:f3:64:56:65:19:31:d9:78:af:d6:01:e2:60:02:a0:
         a7:2d:19:00:be:96:fa:00:b8:c8:62:8d:aa:96:4b:01:75:d4:
         99:96:7e:b8:1f:47:b7:88:2e:9f:60:a6:d8:19:22:d4:f7:ac:
         06:5d:60:58:9f:b3:d4:c5:ca:f6:6f:89:18:88:01:1b:c2:b8:
         10:3b:40:38:f4:48:57:45:d8:d3:29:78:ec:fb:0a:9a:3f:1e:
         6b:8c:d1:20:b7:31:4f:5c:2f:7f:79:16:c3:5d:c1:5a:04:2c:
         ea:47:50:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----