Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
File:                     lM53iNLj_vf8ANXOEz19bcAPhik.mft (raw, json)
Hash identifier:          fJF+Ow98NBavmOwIqrifGrV5ijCNh22SBzO8xH4RpHI=
Subject key identifier:   C0:76:80:F2:2E:E4:25:C1:3E:97:A4:BF:AD:14:15:5D:C2:69:28:B9
Authority key identifier: 94:CE:77:88:D2:E3:FE:F7:FC:00:D5:CE:13:3D:7D:6D:C0:0F:86:29
Certificate issuer:       /CN=94ce7788d2e3fef7fc00d5ce133d7d6dc00f8629
Certificate serial:       019356F6C18C6875323666CA6A7C221A6CE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lM53iNLj_vf8ANXOEz19bcAPhik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
Manifest number:          0AE7
Signing time:             Sat 23 Nov 2024 03:00:32 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:32 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:32 +0000
Files and hashes:         1: lM53iNLj_vf8ANXOEz19bcAPhik.crl (hash: nZW539cAvQQxIkTXrWsqUTHWipVQkRxURXfNZ9LBTn8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lM53iNLj_vf8ANXOEz19bcAPhik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:c1:8c:68:75:32:36:66:ca:6a:7c:22:1a:6c:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94ce7788d2e3fef7fc00d5ce133d7d6dc00f8629
        Validity
            Not Before: Nov 23 03:00:32 2024 GMT
            Not After : Nov 24 03:00:32 2024 GMT
        Subject: CN=c07680f22ee425c13e97a4bfad14155dc26928b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:49:16:52:eb:20:dd:e3:37:bd:7f:72:67:6b:
                    a6:bf:5b:c7:70:d6:76:7e:8a:43:29:c3:cf:fb:25:
                    bb:db:91:18:6c:18:22:7a:c7:fa:fa:f6:de:49:55:
                    b5:72:e8:40:93:41:4e:22:93:6e:f6:5a:e6:b3:4d:
                    3b:93:d4:5f:e6:f1:53:b0:37:95:94:9f:4f:dd:69:
                    0c:0e:b6:54:0f:de:21:c7:58:a4:09:39:00:00:82:
                    7d:00:c9:b0:18:67:0e:d5:1b:08:d7:2c:37:c0:f5:
                    98:ab:00:b2:61:21:18:5a:ff:75:5f:ef:ef:f2:07:
                    18:5f:de:19:18:79:72:c2:4d:d5:53:86:25:b8:81:
                    5f:38:90:e6:ca:8b:c9:69:5f:f6:8a:ba:11:df:6b:
                    80:04:04:7d:d0:46:f5:b2:18:a5:4f:3b:b0:40:06:
                    2c:ca:39:0c:ca:5c:6b:0e:18:60:3e:93:80:75:d7:
                    0c:ef:16:8f:a4:55:a6:9a:39:e0:17:c1:54:fd:3f:
                    d1:66:ce:33:49:9c:0d:6e:39:da:6c:b2:0d:dd:24:
                    d0:b3:e6:9f:4d:bf:d2:1e:67:1c:24:bf:9b:d9:58:
                    24:87:0e:1e:90:ef:9a:ff:7c:81:0c:93:48:3d:81:
                    e3:a1:3f:1e:21:d9:7e:ea:92:c8:f7:8a:e1:39:d0:
                    10:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:76:80:F2:2E:E4:25:C1:3E:97:A4:BF:AD:14:15:5D:C2:69:28:B9
            X509v3 Authority Key Identifier:
                keyid:94:CE:77:88:D2:E3:FE:F7:FC:00:D5:CE:13:3D:7D:6D:C0:0F:86:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lM53iNLj_vf8ANXOEz19bcAPhik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e4:10:19:54:1f:b7:02:83:b8:61:ea:f5:c1:eb:be:c7:d2:
         7e:81:4b:85:fe:20:88:68:b9:50:e2:68:fb:ee:41:d4:58:71:
         68:fa:25:c7:9e:86:1c:42:db:82:97:67:52:a6:e2:9f:26:02:
         69:43:be:ae:ef:6c:35:63:4e:a8:2c:9e:c7:33:32:63:d6:8c:
         bf:91:48:5d:df:81:1e:81:b6:4b:6f:74:dc:f6:a8:fc:9a:b0:
         a7:0e:a8:65:b1:c6:9e:56:f0:34:37:39:8e:c6:75:17:69:d2:
         9f:ff:45:7f:b2:5e:29:cb:4f:6b:23:d4:5d:fd:96:99:cd:89:
         a8:3f:fc:9a:f8:ec:39:d1:69:88:2d:3a:29:86:bc:0d:54:94:
         ab:42:6d:23:80:f0:dc:94:88:07:c6:96:e7:89:b3:02:70:8a:
         f9:fd:d5:30:34:ec:48:28:bf:25:b8:75:8c:1c:bf:37:8d:be:
         44:66:e4:7c:9b:1e:ce:85:ae:9d:3f:cb:b6:00:1d:b6:4d:f7:
         fb:62:7a:c5:59:6e:7a:4f:66:52:ba:3f:70:a4:2b:24:2e:13:
         d0:d2:b0:be:a7:8d:a1:72:6b:a8:58:3d:43:3e:3c:b5:db:ba:
         de:7f:8b:eb:cd:91:9c:fd:40:d8:8f:2b:28:6d:93:c1:b1:4d:
         d0:68:4d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----