Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
File:                     BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft (raw, json)
Hash identifier:          D8jVLB6zJl/rPNu+z7Iy9Bs1XgjLctH8s6gBtkEak5k=
Subject key identifier:   85:C8:F2:A2:D4:DD:88:20:86:4F:93:81:69:0B:5F:FA:33:B2:2D:33
Authority key identifier: 06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53
Certificate issuer:       /CN=06e42d897e96895c70f43ca0350d0ff44b848953
Certificate serial:       01935688DCC4BE37E2523F77D8463B594946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 01:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:30 +0000
Files and hashes:         1: BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl (hash: faNauFDUiw43tDJaOglaD+mwr1mJbXfEwu6nAQktOpo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:dc:c4:be:37:e2:52:3f:77:d8:46:3b:59:49:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06e42d897e96895c70f43ca0350d0ff44b848953
        Validity
            Not Before: Nov 23 01:00:30 2024 GMT
            Not After : Nov 24 01:00:30 2024 GMT
        Subject: CN=85c8f2a2d4dd8820864f9381690b5ffa33b22d33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9e:8b:fa:bc:57:f4:f5:80:25:a0:bd:60:0d:
                    56:c6:a3:a4:ad:ad:82:0c:a1:5a:33:52:8f:fc:ff:
                    ad:f0:17:27:77:73:9e:42:ef:12:d5:75:38:9c:06:
                    80:69:31:e7:11:2f:a1:c9:5e:50:8d:87:0f:06:17:
                    8e:a7:41:de:15:ca:81:37:43:2d:21:00:e9:4b:9b:
                    75:7b:2b:00:d7:17:d8:43:38:07:a4:4e:88:b2:33:
                    9a:c2:b2:92:48:ba:0a:40:91:f0:ef:aa:ad:50:09:
                    69:58:2d:4a:3a:b3:04:5d:14:fc:2f:88:f7:b7:09:
                    7b:cd:2e:af:a3:4b:c8:4f:44:5a:49:ff:6c:83:cd:
                    61:d3:e3:ed:17:5e:25:1d:a2:2d:28:31:84:b5:29:
                    d3:1c:68:46:df:ce:ab:20:b3:ae:a6:d7:d9:17:fc:
                    9f:92:d6:96:00:07:27:25:43:92:cb:40:aa:19:ca:
                    ce:32:67:d1:f7:7c:24:00:56:82:8f:5c:5b:56:c9:
                    45:7c:25:ed:da:ac:42:3a:09:36:45:f7:61:e1:11:
                    a9:79:29:e6:21:8b:b4:1f:fb:5c:ba:dc:03:ab:30:
                    ad:31:db:74:1a:70:08:b4:be:cf:42:2f:70:8b:a5:
                    12:0d:9c:fd:ef:b8:f4:3a:67:4e:79:bc:3f:3c:1b:
                    ad:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C8:F2:A2:D4:DD:88:20:86:4F:93:81:69:0B:5F:FA:33:B2:2D:33
            X509v3 Authority Key Identifier:
                keyid:06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c4:31:06:55:cc:91:ef:7d:de:26:ad:34:b2:0d:a9:ef:ef:
         7a:96:a6:40:5b:7d:79:44:da:be:b9:4b:29:b1:75:1d:e7:49:
         9b:f3:1b:f0:de:6d:e3:89:45:f0:88:5c:32:1d:d4:76:ee:df:
         74:34:db:12:32:b4:c6:2f:91:b7:08:b4:06:75:bf:dd:7b:1c:
         f3:aa:12:90:d2:08:8c:96:61:f4:3d:2c:ed:d2:7c:94:71:c3:
         fa:92:52:45:b2:45:9c:67:b4:ae:fe:25:05:5a:a7:af:90:87:
         b5:d0:31:13:9d:82:ae:58:ff:64:a5:db:d6:0c:90:d2:3b:39:
         f7:9b:78:fb:d4:c4:3a:52:0c:d8:79:91:f0:98:3b:75:df:a1:
         e1:43:1e:3c:bf:e7:97:67:64:09:9a:80:ec:85:81:51:4e:84:
         23:70:f2:89:73:6e:bd:78:d6:17:c2:d7:03:8f:44:12:db:93:
         7e:3f:b6:6e:17:fc:50:52:13:6f:eb:43:9c:fe:32:4f:db:f8:
         bd:a7:9a:f1:35:30:9c:2b:2f:0a:c4:ed:06:a2:1a:a3:22:1f:
         6e:94:ab:bf:2c:4d:ca:44:f9:c9:6d:f9:7e:1d:70:bb:d3:8c:
         17:f4:64:cd:ca:ec:57:8b:0f:3e:42:d8:0f:fa:5d:f4:57:f0:
         93:20:9d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----