Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
File:                     tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft (raw, json)
Hash identifier:          fuWKtUVuq9imyQWCtAbaBRX9eokRwfRZdLh86pq1ZMk=
Subject key identifier:   2A:9F:08:78:7B:72:B4:3E:3A:C3:7B:3E:05:54:F0:6B:87:6E:04:49
Authority key identifier: B5:5C:FE:77:1C:F2:84:FE:E8:D0:C2:7B:BC:F1:1D:E1:87:9C:CC:41
Certificate issuer:       /CN=b55cfe771cf284fee8d0c27bbcf11de1879ccc41
Certificate serial:       019369D9CC4E70D2BBF1AFB0B6EA245950A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
Manifest number:          0B63
Signing time:             Tue 26 Nov 2024 19:01:41 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:41 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:41 +0000
Files and hashes:         1: tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl (hash: oeXM1iGscQiE/wsTbtUAdYfec/zGgDye7tiDtJW+FrU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:cc:4e:70:d2:bb:f1:af:b0:b6:ea:24:59:50:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55cfe771cf284fee8d0c27bbcf11de1879ccc41
        Validity
            Not Before: Nov 26 19:01:41 2024 GMT
            Not After : Nov 27 19:01:41 2024 GMT
        Subject: CN=2a9f08787b72b43e3ac37b3e0554f06b876e0449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bd:23:ed:63:6c:84:ac:0d:59:fa:b5:f0:37:
                    cb:2e:11:e3:9b:80:36:72:2b:bb:57:43:76:51:21:
                    af:fd:93:48:a1:b8:6c:64:80:e6:1c:37:18:7d:9c:
                    84:b8:20:e9:cb:35:88:04:2a:7d:73:47:c4:43:82:
                    b3:7e:28:d3:d3:1a:6f:3a:f1:97:cf:b9:6b:26:e7:
                    be:37:94:3d:10:4a:f5:9c:71:6f:6a:db:12:0f:a5:
                    d3:0a:9c:e0:7b:db:f8:ff:3f:98:78:cd:11:30:6f:
                    cf:8a:4d:96:62:5d:13:e3:88:9b:4c:17:2f:5f:35:
                    6d:de:be:97:02:9c:ce:1c:70:4b:2c:3c:57:2b:dc:
                    35:48:fa:bd:32:fb:d1:54:33:12:c2:11:f8:3f:d9:
                    47:16:3b:b5:7d:7c:44:cc:83:d3:6b:20:8a:0f:47:
                    83:37:e1:3a:e4:9d:bc:55:bf:85:c3:05:04:57:da:
                    cc:5a:c6:41:80:85:c2:6c:4a:29:36:5f:04:e9:b5:
                    96:58:bb:b2:3a:3c:1f:56:f2:25:68:6f:d0:ad:1e:
                    2f:78:eb:3a:14:0c:e1:9b:6d:34:2c:5e:46:9d:4d:
                    07:cf:fa:d0:28:e5:4a:a8:c0:29:be:73:9e:c1:0b:
                    a7:fd:ce:3e:09:6b:f7:e1:41:ed:2c:54:4b:d2:ec:
                    a9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9F:08:78:7B:72:B4:3E:3A:C3:7B:3E:05:54:F0:6B:87:6E:04:49
            X509v3 Authority Key Identifier:
                keyid:B5:5C:FE:77:1C:F2:84:FE:E8:D0:C2:7B:BC:F1:1D:E1:87:9C:CC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:42:f5:dd:f9:d6:f1:49:56:58:58:3f:f1:35:cd:10:f7:df:
         6c:43:39:73:45:5d:d4:f0:90:16:12:b5:91:89:dc:4a:4f:27:
         d9:21:12:a7:a1:2f:6c:f3:0c:57:a6:c7:11:a7:6d:04:83:e1:
         b0:e3:7d:65:7d:41:4f:6d:b1:c5:2c:67:65:ce:f1:95:e7:18:
         f7:40:c4:f0:8d:45:bc:c8:d5:fa:2d:5c:c3:2b:44:ba:3c:6b:
         81:d0:9f:32:63:c7:ec:91:14:0a:7a:81:9b:0a:71:e2:a9:32:
         33:6a:d5:74:22:74:bc:68:26:5a:17:47:ee:56:fb:63:e1:76:
         21:39:41:a9:1b:59:1b:71:ae:ff:87:8e:8c:93:1f:cf:38:70:
         24:53:e9:b6:4c:5e:1a:af:7b:84:fe:64:10:4b:ee:d0:9e:68:
         aa:e9:3d:31:ed:36:c1:95:b8:dc:df:5e:6c:4a:32:bf:47:a7:
         dd:96:d9:54:7d:c6:6e:36:6f:e8:23:ec:27:87:3a:86:40:b8:
         b6:03:ec:1d:71:fc:e4:1f:d3:6a:03:f3:f8:8b:74:b0:c9:39:
         75:7c:11:d7:00:4f:f4:39:ad:60:b5:25:cd:d8:ee:ba:56:27:
         ce:79:04:fb:14:ea:c9:da:62:cd:1a:94:e2:26:0a:b0:8d:54:
         40:93:d5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----