Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
File:                     SKvTlzl8CmIzcipFkF6MZzEgx6w.mft (raw, json)
Hash identifier:          sQoe6hvmGngtRI6PlJlyia4gGxw3BvS4LLnuvbGyjnM=
Subject key identifier:   70:81:3F:1F:5B:72:42:6F:A3:EA:A0:AB:48:31:36:86:15:81:F6:FE
Authority key identifier: 48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC
Certificate issuer:       /CN=48abd397397c0a6233722a45905e8c673120c7ac
Certificate serial:       01920B0433B52212B13B1987482EDAAD87AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
Manifest number:          4A
Signing time:             Thu 19 Sep 2024 16:01:17 +0000
Manifest this update:     Thu 19 Sep 2024 16:01:17 +0000
Manifest next update:     Fri 20 Sep 2024 16:01:17 +0000
Files and hashes:         1: SKvTlzl8CmIzcipFkF6MZzEgx6w.crl (hash: 5e5bKvJwlOvbYh6FLdOr3zklsJBZd2pf/w4XoweG5qA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 13:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:0b:04:33:b5:22:12:b1:3b:19:87:48:2e:da:ad:87:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48abd397397c0a6233722a45905e8c673120c7ac
        Validity
            Not Before: Sep 19 16:01:17 2024 GMT
            Not After : Sep 20 16:01:17 2024 GMT
        Subject: CN=70813f1f5b72426fa3eaa0ab483136861581f6fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b2:95:7b:df:63:1a:29:ff:3e:31:bd:53:5f:
                    cc:dd:71:a0:5b:db:13:6f:27:c3:f3:d6:bf:70:b8:
                    0a:69:e9:cd:7c:4f:8d:bd:d2:4e:be:59:78:b3:92:
                    89:3f:e6:5c:6e:ce:d5:8a:9c:11:3f:af:84:e8:76:
                    64:df:4b:f2:08:18:5f:56:3c:86:c7:a5:38:1c:93:
                    01:ec:ab:81:0b:bf:cf:f7:11:65:3e:f0:11:67:65:
                    a8:2f:a4:a6:d5:48:c0:d4:8c:00:c4:f4:13:59:65:
                    53:f1:00:7a:4e:7f:ce:51:b5:58:35:ac:17:f1:b1:
                    65:39:ae:6a:3a:7d:91:65:9e:d5:df:50:56:39:48:
                    b3:ca:62:24:75:68:c9:12:c5:36:f9:f0:9d:b1:0d:
                    28:d1:98:1e:35:25:3b:dc:40:27:44:4b:1c:e8:fa:
                    4f:fe:ea:f5:70:aa:4d:9e:aa:10:ea:d3:26:52:ac:
                    e6:2d:77:16:07:73:df:f4:14:8c:b2:99:80:31:5f:
                    57:43:d4:b6:d9:de:fc:e0:9e:7a:bc:90:21:5a:4a:
                    65:d8:c9:74:24:fb:34:7a:e1:cf:54:cd:cf:7b:c9:
                    57:73:5b:e9:48:93:4f:54:63:12:30:7c:66:64:e8:
                    a0:82:b0:8c:10:d9:f0:26:51:58:39:a2:ba:08:73:
                    dd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:81:3F:1F:5B:72:42:6F:A3:EA:A0:AB:48:31:36:86:15:81:F6:FE
            X509v3 Authority Key Identifier:
                keyid:48:AB:D3:97:39:7C:0A:62:33:72:2A:45:90:5E:8C:67:31:20:C7:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvTlzl8CmIzcipFkF6MZzEgx6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c670e2-5401-4243-a9bb-3736d40ca07e/1/SKvTlzl8CmIzcipFkF6MZzEgx6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:3a:ca:6c:9c:38:3f:2b:fa:5d:96:15:36:9a:6e:a2:13:0f:
         c7:90:a6:35:3b:e4:c2:0b:9e:62:4f:58:58:b2:a6:2d:4b:49:
         f7:5b:1b:19:77:0a:3f:f8:fc:b8:33:a5:a0:17:13:f0:9d:1d:
         c4:49:49:29:7c:8e:73:94:63:0c:25:84:bb:9c:7b:6a:72:e3:
         e2:1d:82:6f:81:9c:eb:54:06:5d:14:db:8a:05:4b:95:75:28:
         a4:f6:1e:7a:ad:b9:59:85:e4:ec:01:93:0f:e0:43:6f:65:de:
         88:e8:f7:72:00:dc:b8:64:e1:4a:a5:1b:5a:05:4b:04:a9:71:
         f8:e6:65:56:bb:5f:87:ff:3a:4e:75:5f:66:68:a1:78:df:8b:
         2e:38:e0:e8:9b:0d:66:38:78:92:bb:b9:fe:89:93:ae:a5:e1:
         4b:b5:6b:58:c5:4c:cf:8b:7d:2c:9c:ed:88:86:a6:60:93:a1:
         a7:16:cb:54:2d:2b:ab:5b:e3:c1:a2:3e:a5:76:5b:d2:fd:72:
         c8:72:47:c0:df:c4:b7:63:d0:cb:e1:41:5e:87:83:61:be:91:
         1e:15:10:6c:60:44:8f:08:a8:06:c0:aa:c8:37:9b:44:93:7f:
         62:30:49:f4:b7:fe:7a:6b:87:91:27:35:20:9b:86:d2:ac:2f:
         e1:98:b4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----