Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
File:                     u5O3SkaFwcFKueGSF6qxQWNBEdY.mft (raw, json)
Hash identifier:          IBcj+TJ3pObPGkNWi4N5oHaeBS5ijyz+pTDrSGaGD14=
Subject key identifier:   F8:C6:A3:9B:CC:6E:0A:08:E0:11:E7:C7:67:0A:1B:57:93:21:D4:3D
Authority key identifier: BB:93:B7:4A:46:85:C1:C1:4A:B9:E1:92:17:AA:B1:41:63:41:11:D6
Certificate issuer:       /CN=bb93b74a4685c1c14ab9e19217aab141634111d6
Certificate serial:       019357D28597530EF11D80DFEFF9AF4B4238
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
Manifest number:          0D19
Signing time:             Sat 23 Nov 2024 07:00:34 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:34 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:34 +0000
Files and hashes:         1: u5O3SkaFwcFKueGSF6qxQWNBEdY.crl (hash: 2FDWp47mBqpyYyYjACsKmi+wEYoh95krUbFINozw3/E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:85:97:53:0e:f1:1d:80:df:ef:f9:af:4b:42:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb93b74a4685c1c14ab9e19217aab141634111d6
        Validity
            Not Before: Nov 23 07:00:34 2024 GMT
            Not After : Nov 24 07:00:34 2024 GMT
        Subject: CN=f8c6a39bcc6e0a08e011e7c7670a1b579321d43d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:37:8d:54:20:86:b1:06:07:8a:97:1a:02:8f:
                    39:a9:11:10:3d:e9:b9:c0:ab:18:1f:08:b2:29:4d:
                    b0:ad:d1:4f:a8:55:7e:f0:bf:e8:f2:50:04:67:bc:
                    63:da:2e:cd:9f:13:78:21:bd:9f:fa:63:9c:0c:bb:
                    6b:08:a9:fe:d3:b8:73:f5:e8:b6:b7:1a:ad:0f:e3:
                    95:be:71:7d:4d:b9:4f:ec:f5:32:91:a3:1e:83:24:
                    86:69:7d:d1:cd:af:df:f5:7c:b0:8e:9c:1f:3f:6d:
                    4c:b9:47:bc:fb:79:68:bb:ec:49:1a:ee:6b:ec:e9:
                    9c:31:10:da:dd:3d:00:a7:63:d7:79:98:17:5b:84:
                    b8:7b:7c:68:04:1f:15:d3:9c:9a:53:6b:e3:7a:bf:
                    5e:45:7c:4d:6e:a1:86:19:b2:f8:43:af:0c:d1:86:
                    d0:0c:af:e7:35:51:1c:fa:4b:49:71:21:2f:f1:dc:
                    b9:0f:98:aa:01:68:15:bd:6a:8a:56:3b:ca:16:e2:
                    2b:e8:c8:98:b4:48:1e:f0:a2:67:d6:27:61:1a:fe:
                    59:41:65:ab:bc:e1:3d:94:13:55:5e:a2:8a:ee:8e:
                    ee:17:a3:02:ff:eb:e3:c8:44:07:7a:45:20:52:19:
                    c9:b6:99:bf:f3:d1:f8:23:34:aa:c6:79:93:17:51:
                    c0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C6:A3:9B:CC:6E:0A:08:E0:11:E7:C7:67:0A:1B:57:93:21:D4:3D
            X509v3 Authority Key Identifier:
                keyid:BB:93:B7:4A:46:85:C1:C1:4A:B9:E1:92:17:AA:B1:41:63:41:11:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:f3:30:53:f3:fc:b3:0b:bd:52:8a:16:09:56:2d:a6:ad:47:
         f4:15:2d:2b:cd:a2:b1:49:a5:5b:34:b2:09:72:cb:37:60:25:
         f1:be:cc:2a:4b:38:f4:e6:c0:56:ef:22:aa:58:6b:a8:5a:19:
         4a:00:5d:a6:24:4b:62:af:22:f1:91:1a:50:c1:f0:e7:be:50:
         89:f2:27:3d:cf:66:ce:a9:8d:26:48:37:57:5b:cb:ee:58:9c:
         fa:78:cb:4e:0a:d3:e7:59:24:4b:a5:f5:40:21:b0:d8:c9:4f:
         b8:14:df:99:bd:7f:b2:3f:c3:a0:cc:c4:59:59:3c:4d:b1:ee:
         8e:fc:85:cc:6b:f8:a9:30:1e:99:22:04:48:bc:c3:5e:e9:91:
         5c:ad:c0:12:29:8e:b9:7d:4a:49:64:b0:93:50:b0:24:6c:9d:
         ed:3d:6c:02:98:2b:28:f3:e3:3a:74:bb:5a:36:17:46:6b:0f:
         42:72:d4:cf:9d:3d:be:46:f8:5c:6b:f5:48:2f:ec:94:3f:fd:
         f4:1c:e3:f2:32:6e:bc:2e:24:4c:0c:ea:7d:88:44:10:1e:c2:
         d6:0b:b4:61:7a:83:54:6a:27:74:d2:e9:ba:5a:67:9d:2a:3e:
         b4:39:17:fb:1e:bb:04:0a:bc:0f:0d:1a:5e:85:e5:bb:48:a5:
         89:60:c2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----