Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
File:                     aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft (raw, json)
Hash identifier:          LD76cVgTckZ1jh94aKk2vLeTrt2FCAwgQEM35Hr9JvQ=
Subject key identifier:   D1:DF:95:FB:EA:17:FD:CA:3C:57:AC:B2:1B:F2:BC:8A:C7:3F:92:62
Authority key identifier: 69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5
Certificate issuer:       /CN=696193e55638864ed69cd947b750f321674a64a5
Certificate serial:       0193579BEE23945A6091ED3D7E7DB8AAC494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
Manifest number:          02BD
Signing time:             Sat 23 Nov 2024 06:00:56 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:56 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:56 +0000
Files and hashes:         1: aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl (hash: XOm2fvaWxsstMbNFrISv0H5uSoRLSbCV/ICsFXXlz7k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:ee:23:94:5a:60:91:ed:3d:7e:7d:b8:aa:c4:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696193e55638864ed69cd947b750f321674a64a5
        Validity
            Not Before: Nov 23 06:00:56 2024 GMT
            Not After : Nov 24 06:00:56 2024 GMT
        Subject: CN=d1df95fbea17fdca3c57acb21bf2bc8ac73f9262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e6:ec:a0:45:70:a2:47:f1:29:59:18:cd:21:
                    f1:75:8f:71:16:06:b8:f9:b4:b9:71:80:c9:cf:73:
                    05:78:52:dc:00:74:0c:9b:16:f4:bd:04:a5:b4:6e:
                    16:50:06:30:ec:4b:f8:6a:38:a3:3c:c5:5b:42:8c:
                    bf:fa:75:49:6c:4a:04:1d:14:1d:df:fd:2a:6b:0e:
                    39:74:d7:5f:fc:58:84:02:97:4e:72:fc:df:5c:3a:
                    d9:92:5d:5b:4e:a7:b1:7d:50:f3:93:c5:27:4b:ee:
                    47:fc:e0:6c:28:62:2a:0a:7d:8d:9d:85:62:93:bd:
                    db:76:b3:3d:7f:63:2c:2a:6e:32:9d:0d:7f:fb:ab:
                    2c:9b:3a:fa:1b:7d:d7:0c:2e:30:a2:53:a2:b9:79:
                    29:27:c4:a3:b7:77:e9:b3:ec:6e:be:27:7c:3d:1b:
                    f1:e8:de:e5:32:b0:79:7e:8f:21:6d:d9:04:ed:48:
                    ff:55:17:f7:31:75:4b:1f:45:6e:01:a9:03:b9:f1:
                    fb:c2:80:b4:ef:48:01:b7:b0:22:82:99:c8:01:cb:
                    e2:d2:0d:d1:1d:d9:b5:91:f7:9b:7d:be:55:d1:da:
                    78:42:85:3a:99:07:95:8d:8c:06:c8:20:a5:ad:20:
                    82:d1:f4:17:a0:c7:e7:61:cb:28:11:41:ff:a2:e3:
                    76:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DF:95:FB:EA:17:FD:CA:3C:57:AC:B2:1B:F2:BC:8A:C7:3F:92:62
            X509v3 Authority Key Identifier:
                keyid:69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:2c:c0:86:76:15:40:15:10:58:a7:c3:5a:81:04:3c:2b:46:
         07:28:2a:72:33:39:5b:e7:3b:b2:ac:23:31:29:bc:7f:47:1a:
         c3:9c:96:4f:64:d1:4b:34:09:ea:9b:04:b5:9b:5c:91:de:0f:
         ee:f2:6e:d0:2e:8e:e4:37:27:f8:d4:f7:f2:3d:f9:e6:05:ce:
         29:9f:00:f0:42:eb:33:26:b6:81:28:62:fc:6b:e1:67:4a:b5:
         5e:ec:a8:52:c9:ba:15:08:31:ac:02:4f:85:7e:d0:bd:36:50:
         a9:38:15:55:7b:14:f5:d0:e9:1f:7f:73:5d:5e:7e:bc:95:78:
         fb:23:c1:64:a5:77:88:09:e1:d1:61:c5:f7:0f:4a:15:ec:ac:
         db:fb:16:9b:f6:c3:19:6d:24:85:57:b6:c2:87:8a:48:f8:bd:
         31:8f:32:d8:b1:f6:8a:84:33:3d:37:c0:0b:15:db:c8:8c:3f:
         4f:9e:f3:8e:9d:f8:15:68:f6:3e:86:c5:b9:eb:c0:3e:13:b7:
         c5:d3:08:1d:2b:67:8c:1f:45:f6:7d:24:38:64:b7:af:4a:1b:
         e0:6f:77:d1:e3:d2:d9:43:ab:a7:1a:44:6a:b9:12:b4:05:e4:
         6b:01:12:45:02:a2:70:91:82:55:78:63:fa:0b:f3:28:18:e7:
         4b:e7:5f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----