Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
File:                     nYwI9K2P6tNx2j58ArbP1on8pbo.mft (raw, json)
Hash identifier:          JrNX8/jPzX9yRuDQomMvgzl108xTGjJStMe0D6MHqEM=
Subject key identifier:   A2:83:9A:FA:AA:ED:14:5C:72:F0:0B:CF:B8:39:D1:2D:EA:88:5D:66
Authority key identifier: 9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA
Certificate issuer:       /CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
Certificate serial:       0193568976671697E349D47DB4CFA461DAC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
Manifest number:          06CC
Signing time:             Sat 23 Nov 2024 01:01:09 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:09 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:09 +0000
Files and hashes:         1: nYwI9K2P6tNx2j58ArbP1on8pbo.crl (hash: 72kUjpceWQbhc8anznyGBYBFyCA/liv1kVV+rgRycSk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:76:67:16:97:e3:49:d4:7d:b4:cf:a4:61:da:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
        Validity
            Not Before: Nov 23 01:01:09 2024 GMT
            Not After : Nov 24 01:01:09 2024 GMT
        Subject: CN=a2839afaaaed145c72f00bcfb839d12dea885d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:78:9e:9e:93:a7:8a:29:77:89:76:e6:cd:52:
                    8e:f3:96:c1:f8:68:09:82:3b:fa:3c:63:98:4d:1b:
                    16:64:18:6d:4c:fb:71:93:c1:16:1e:67:89:21:d6:
                    fd:e1:ca:e0:d2:70:04:1a:d3:7f:ce:ff:a5:4e:4b:
                    a0:18:56:02:48:95:14:38:1f:2f:bc:de:89:f1:4e:
                    18:8f:cb:66:3e:e1:91:5c:f5:91:7a:77:90:33:94:
                    cb:6e:9d:1f:41:5b:5b:67:f2:74:fc:ef:07:95:e0:
                    0a:68:f9:0b:59:d6:eb:65:f9:84:10:37:37:7d:d1:
                    c8:9e:32:da:df:a0:76:0a:f6:cc:54:75:21:7b:0b:
                    04:da:e4:22:94:0a:f1:fc:75:16:f3:c1:30:2e:d6:
                    b3:41:ba:ed:75:dc:b2:96:77:c5:52:06:64:62:7d:
                    e6:cc:ae:f1:10:c3:0d:38:08:2f:96:36:40:48:6d:
                    53:a4:20:c8:7c:e4:d9:d9:8c:9b:e0:e1:5d:38:d2:
                    9a:57:78:f8:82:6f:e2:a5:12:2b:cb:0f:73:e9:6b:
                    80:a7:e6:f2:45:2e:32:f8:f9:cb:96:79:fa:1b:6a:
                    d8:1e:b2:06:c2:4b:15:76:08:6a:22:d6:2a:3e:22:
                    79:4a:a7:2a:f3:c6:25:d8:e9:28:0c:8a:18:f1:6f:
                    25:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:83:9A:FA:AA:ED:14:5C:72:F0:0B:CF:B8:39:D1:2D:EA:88:5D:66
            X509v3 Authority Key Identifier:
                keyid:9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:4a:e4:85:63:bf:61:68:23:5f:d5:81:c1:9d:21:5c:78:1a:
         aa:85:b5:d4:12:7e:77:bd:ce:9c:94:93:3a:62:8c:16:46:56:
         13:2a:88:30:32:9b:19:c6:dc:19:2a:5f:9b:00:6e:2f:95:ec:
         5e:76:43:d5:78:f5:13:69:03:86:29:95:07:81:44:24:38:a6:
         ac:d8:da:61:62:d5:d1:0c:f3:14:1a:f1:85:40:f4:ce:96:bd:
         dc:8c:da:26:4e:73:0d:d5:79:59:43:49:3c:44:bb:e9:87:36:
         98:ca:8f:f2:a2:03:83:9e:88:4b:d2:bb:ab:ad:00:2c:52:f5:
         0c:c0:b6:53:ef:f5:c2:cc:8d:07:07:e2:ce:f4:76:bb:9c:5e:
         70:f3:3f:36:59:d2:83:eb:a6:f3:89:9d:74:57:6d:52:06:e0:
         84:c6:64:75:29:41:e6:c3:ba:f7:17:ad:d9:3f:9b:47:1c:d0:
         78:f5:27:97:a6:2d:55:cd:b1:54:ef:4a:f8:e7:d2:c1:55:c8:
         cd:22:6f:14:85:dc:11:d7:27:8f:61:bb:a0:2e:c0:e9:d1:fe:
         13:6f:87:86:f7:29:65:58:07:24:f1:05:04:db:2f:7e:ac:e4:
         fc:6b:89:3d:7c:9b:d6:b6:c9:9d:53:9b:93:bb:cd:fc:90:6b:
         05:1f:9c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----