Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft
File:                     A_JvJX_M8HUxzX5_6EFhtP9emmM.mft (raw, json)
Hash identifier:          Oz4BMLcXK+GMSFQGjEML2E1Z75Fb79sSSD5aTbttxvo=
Subject key identifier:   77:B1:57:27:4C:1A:A9:D0:FE:C3:6B:26:58:20:7B:38:17:B6:E7:76
Authority key identifier: 03:F2:6F:25:7F:CC:F0:75:31:CD:7E:7F:E8:41:61:B4:FF:5E:9A:63
Certificate issuer:       /CN=03f26f257fccf07531cd7e7fe84161b4ff5e9a63
Certificate serial:       01935689095B05B51A731E0D870AA5327E05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_JvJX_M8HUxzX5_6EFhtP9emmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft
Manifest number:          0920
Signing time:             Sat 23 Nov 2024 01:00:41 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:41 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:41 +0000
Files and hashes:         1: A_JvJX_M8HUxzX5_6EFhtP9emmM.crl (hash: 20GBx0jH3tnuXtsej52jMw0AIhJ3pWY8HKYO8F3Bmh0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_JvJX_M8HUxzX5_6EFhtP9emmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:09:5b:05:b5:1a:73:1e:0d:87:0a:a5:32:7e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f26f257fccf07531cd7e7fe84161b4ff5e9a63
        Validity
            Not Before: Nov 23 01:00:41 2024 GMT
            Not After : Nov 24 01:00:41 2024 GMT
        Subject: CN=77b157274c1aa9d0fec36b2658207b3817b6e776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7c:b4:5e:95:27:fc:60:5e:f4:de:f6:89:cc:
                    36:35:b6:36:62:7f:db:3a:a8:62:65:11:6b:9f:49:
                    48:f2:9a:a6:71:55:c7:d6:64:69:55:49:cc:3f:f3:
                    ac:1b:92:54:d0:c5:e7:cd:82:ae:92:9b:6b:ef:d7:
                    7e:f3:8d:49:6e:2f:e6:f7:f5:77:ed:10:cd:ec:50:
                    72:9e:68:2d:40:98:e3:6c:1f:ee:f8:6f:62:21:d8:
                    ea:8e:f5:79:17:e2:a1:a5:71:f1:35:cc:f5:f7:45:
                    6d:86:77:2e:e5:43:85:23:31:6c:74:7d:c7:ae:4c:
                    4d:72:c9:2b:77:fe:1a:ab:17:4b:1a:89:45:e9:38:
                    ca:d2:be:92:3d:ab:a6:80:fe:71:9f:0b:4c:a7:cd:
                    02:d3:61:ba:e8:55:c0:f3:98:78:24:47:b4:e0:6d:
                    a4:3b:5a:c0:81:65:d2:b4:7a:71:f5:92:9d:ff:12:
                    e4:d3:96:78:56:23:ba:e4:65:03:1b:40:d7:09:b8:
                    ce:e2:5d:c1:74:22:61:14:b6:bc:3a:29:e0:4f:6c:
                    4e:f2:4e:c4:0c:12:9f:3e:92:26:88:de:22:ee:af:
                    15:d1:d2:0f:ea:5d:bb:ad:d2:d8:4d:75:2a:4b:45:
                    4d:0f:f5:e2:7e:35:dd:2e:fa:15:cd:04:c6:dd:49:
                    06:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B1:57:27:4C:1A:A9:D0:FE:C3:6B:26:58:20:7B:38:17:B6:E7:76
            X509v3 Authority Key Identifier:
                keyid:03:F2:6F:25:7F:CC:F0:75:31:CD:7E:7F:E8:41:61:B4:FF:5E:9A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_JvJX_M8HUxzX5_6EFhtP9emmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:cb:2a:22:dd:9f:e8:71:68:9a:4f:c3:9a:cc:08:88:4a:5f:
         b9:40:a8:db:af:b9:ba:ed:23:bf:29:ef:19:bd:0f:96:95:88:
         e6:a2:15:26:f1:a6:fd:15:9e:39:39:a6:3f:6f:dc:ba:30:e3:
         ff:7a:66:67:1b:20:ae:b2:1c:78:aa:20:96:37:21:a1:08:e1:
         d2:68:1f:b1:dd:19:80:05:c6:bb:50:2f:f9:a7:89:a8:ed:9d:
         42:77:8a:ca:bb:a8:c1:65:6c:74:7e:6f:36:e6:0f:81:7b:7e:
         75:6a:a6:df:12:12:5b:54:e5:1c:cd:c5:a3:45:70:28:de:c2:
         f9:48:93:0a:a5:97:24:f2:3f:de:84:1e:e8:f5:aa:a2:83:d5:
         33:bc:62:8c:ec:7b:4d:8b:21:97:3c:c3:5a:09:23:94:64:dd:
         bb:3b:71:cb:0b:77:0c:7e:d4:ed:4d:34:96:5c:b4:5c:52:6e:
         89:c8:4c:11:1a:13:82:c7:26:19:54:4e:20:a6:ac:46:80:de:
         17:e3:c3:12:13:e1:a0:56:61:17:35:ed:15:8f:7e:8a:24:f2:
         b2:46:cb:90:63:c9:ee:10:eb:00:c1:0a:f2:f4:ef:8d:8e:a9:
         6c:d5:d3:06:10:00:ae:44:26:ea:9a:55:5b:6b:71:0d:07:b5:
         f1:38:75:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----