Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
File:                     i4-7JMKLohFyEvDTJzo8KkwnzBI.mft (raw, json)
Hash identifier:          Gi3310znk3vmuZ9cE09Va58v0oHFUVh07cmdtS3+EUM=
Subject key identifier:   0C:96:FA:AE:57:07:8C:9A:BD:80:33:09:8D:91:A2:1F:EC:47:14:04
Authority key identifier: 8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
Certificate issuer:       /CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Certificate serial:       01935764AAB3F9B564986E18EF57CDD91B94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
Manifest number:          08EE
Signing time:             Sat 23 Nov 2024 05:00:35 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:35 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:35 +0000
Files and hashes:         1: i4-7JMKLohFyEvDTJzo8KkwnzBI.crl (hash: P8i2mW+6Ko7jJ+VH3Ix94YyvVT42WQBZxhhB9HnKjSs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:aa:b3:f9:b5:64:98:6e:18:ef:57:cd:d9:1b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
        Validity
            Not Before: Nov 23 05:00:35 2024 GMT
            Not After : Nov 24 05:00:35 2024 GMT
        Subject: CN=0c96faae57078c9abd8033098d91a21fec471404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cd:f6:79:6d:52:99:61:39:0e:7f:1e:71:1c:
                    5f:b0:29:5a:31:08:fe:6e:68:de:0b:e0:0e:19:31:
                    14:f0:b0:b2:f5:53:a5:1e:02:ff:b5:82:58:e2:44:
                    b8:de:31:ad:a1:cd:9b:52:3c:78:30:b7:43:24:b7:
                    ec:57:f6:23:a6:1f:e4:51:64:a4:1b:b4:01:0c:3e:
                    75:05:61:9c:b7:c4:b2:08:b9:d1:9d:98:ff:70:6d:
                    c9:67:c3:ce:3f:71:d6:12:cd:f2:ff:0d:5b:5b:42:
                    ca:a0:f1:19:4a:e1:9a:9b:64:a0:b9:05:76:ce:61:
                    26:43:0e:b9:31:48:aa:2d:62:81:ae:74:08:b4:47:
                    56:1f:f3:8a:f0:b8:95:e4:77:3e:c1:31:f3:b4:19:
                    86:4d:9c:13:c3:cd:b9:2e:a2:d9:9a:cb:d4:c1:dd:
                    f0:32:87:26:a2:c6:1f:03:18:10:7e:40:bc:38:2d:
                    05:a1:ce:f9:d8:11:6a:75:f3:a3:6e:20:7e:de:63:
                    16:1b:32:a5:d6:47:89:71:c8:5f:51:91:38:b2:b0:
                    f8:c1:f2:19:04:11:e9:ed:31:9e:54:3a:fd:36:6f:
                    db:2c:7b:b2:2e:a3:8b:1d:7c:e9:03:ec:82:f7:fa:
                    68:6e:ad:a5:e6:e5:67:3e:97:35:0a:20:c0:cc:b0:
                    b7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:96:FA:AE:57:07:8C:9A:BD:80:33:09:8D:91:A2:1F:EC:47:14:04
            X509v3 Authority Key Identifier:
                keyid:8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:bc:ac:55:1e:98:eb:2e:3c:ce:03:b9:47:ba:9d:3d:fc:38:
         8d:7d:40:36:14:3f:c5:44:2b:76:e1:88:95:c3:d4:e6:1e:45:
         96:cc:cd:3a:d1:ad:64:39:db:63:56:ac:96:d2:f5:fd:24:f7:
         3b:57:36:46:0b:57:38:92:b1:4a:1b:61:d6:36:f4:e1:fc:7e:
         f0:68:2a:15:db:a2:43:16:ae:83:dd:88:eb:fe:fb:45:cd:95:
         7c:93:5a:46:4c:65:e3:74:9d:61:ca:ab:43:43:60:c6:7b:69:
         39:d5:ac:5a:54:44:28:32:f9:1f:bc:a9:30:65:b5:6c:2a:63:
         52:70:94:4a:72:8a:60:3d:f3:a0:33:19:75:4f:67:50:49:d2:
         ad:d3:50:42:85:83:05:9e:b7:25:4b:df:83:88:48:35:01:3a:
         12:50:3c:bb:bb:45:b5:a0:48:60:1e:8b:39:28:5d:dc:64:1c:
         29:35:0b:1f:e7:15:cd:a3:1f:67:15:45:75:3b:f1:6a:92:c2:
         49:48:6a:eb:cf:0b:bf:71:5e:35:0d:d1:97:e1:cb:95:ec:88:
         8b:02:25:5c:ff:7d:a7:4b:15:d9:58:1d:bd:81:2b:d7:e8:d5:
         ca:9d:4c:54:bb:a2:47:ae:30:21:70:85:e2:67:53:0c:28:f3:
         cd:33:b1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----