Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
File:                     4fI_OJG9feF53kEDCi_R-ljkPRc.mft (raw, json)
Hash identifier:          o9o/KEBbx9YOXC8DE/E8VrNJpiiz9Uz7iJJVBPJOwjo=
Subject key identifier:   74:9C:FD:AD:12:7E:2C:DC:B5:28:0F:64:EB:18:2E:BF:35:F3:11:06
Authority key identifier: E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
Certificate issuer:       /CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Certificate serial:       01936A0F8D4D448243264B0EB2A984B54856
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
Manifest number:          0197
Signing time:             Tue 26 Nov 2024 20:00:24 +0000
Manifest this update:     Tue 26 Nov 2024 20:00:24 +0000
Manifest next update:     Wed 27 Nov 2024 20:00:24 +0000
Files and hashes:         1: 4fI_OJG9feF53kEDCi_R-ljkPRc.crl (hash: 7JGsxmHGQwQOOY1xw3otHea7ZK1YfGPCHqA0ZrFQp1s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:0f:8d:4d:44:82:43:26:4b:0e:b2:a9:84:b5:48:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
        Validity
            Not Before: Nov 26 20:00:24 2024 GMT
            Not After : Nov 27 20:00:24 2024 GMT
        Subject: CN=749cfdad127e2cdcb5280f64eb182ebf35f31106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cd:ee:0a:eb:74:63:6b:3e:29:b4:b7:60:48:
                    39:79:c0:ce:3b:e5:58:69:bb:6f:9a:1c:ce:88:55:
                    db:d8:63:13:0d:d8:bd:46:f4:cb:3e:f0:e7:01:43:
                    d7:c4:45:e4:a5:ef:22:c8:8a:8f:0a:9f:ad:f4:c7:
                    83:d1:52:21:a0:49:a8:f2:25:0c:7f:dd:91:25:22:
                    c3:52:b8:16:3e:03:14:0a:35:8c:4f:d5:3f:a9:43:
                    e5:7a:0d:94:5a:86:e3:fc:c3:64:93:ce:95:6f:cd:
                    23:80:e6:8f:26:52:ed:99:26:2c:eb:10:ff:44:fb:
                    f4:3b:4c:ba:02:09:51:16:42:17:13:48:91:a5:9e:
                    b8:da:36:be:01:2d:84:53:6c:61:2f:33:60:14:52:
                    3d:35:14:7d:9c:c7:7e:b3:6c:2d:ba:11:33:f0:df:
                    c2:6d:e7:e1:07:1b:61:8e:1f:7b:03:9b:58:1b:92:
                    75:d7:b5:8c:d0:fb:25:3a:d0:54:b1:03:c9:83:e8:
                    80:81:ab:3e:2f:50:51:d1:95:eb:41:25:c2:a0:e7:
                    5d:59:fc:37:de:b6:20:c3:0e:ab:bf:4c:95:6d:61:
                    48:1d:16:c9:ac:0f:0f:13:1e:fb:9e:0b:db:4a:53:
                    a7:ff:bb:da:00:fa:ab:1b:77:34:19:2e:8d:62:c3:
                    c4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9C:FD:AD:12:7E:2C:DC:B5:28:0F:64:EB:18:2E:BF:35:F3:11:06
            X509v3 Authority Key Identifier:
                keyid:E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:68:57:58:48:99:0e:99:1f:33:fd:67:96:b5:27:07:1d:63:
         aa:d0:41:ef:0e:73:93:67:13:00:4f:93:b0:ef:f7:84:66:e2:
         c4:f2:3a:e2:28:a0:de:64:26:8d:05:e2:36:33:8a:ed:67:4a:
         36:4f:87:6b:8e:89:f5:38:c7:fe:6b:2e:c2:0d:fc:de:45:21:
         e8:1a:d2:75:e9:76:76:27:70:0f:9f:ba:53:33:ce:fb:6a:7d:
         c8:3a:b2:3d:e1:d2:bb:c6:ce:33:43:06:7c:21:71:16:74:45:
         fb:ee:64:2a:f2:16:4b:15:cc:39:dd:8d:43:c9:fc:f2:f1:55:
         53:b1:6a:ea:2b:a2:08:e7:4f:8f:06:b0:46:be:39:41:42:a5:
         da:ca:df:3d:15:7c:9b:c9:8d:56:ec:d0:4a:e8:d5:2e:9c:7a:
         8c:1c:0d:83:51:53:a2:79:d0:d5:3f:84:6c:4b:b0:55:87:00:
         fe:8e:e8:6a:67:54:36:79:cb:c7:29:33:4e:bb:e2:9e:da:45:
         e5:74:6c:21:4a:11:2b:86:44:b5:83:3b:75:68:42:79:03:46:
         44:b2:81:ed:55:23:c5:90:de:f3:5e:b8:95:4a:d9:89:93:2c:
         91:60:00:ad:40:d1:86:34:ae:40:34:9b:55:ca:78:08:4d:6f:
         a3:ae:54:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----