Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/37133f-c704-40d1-a606-fdb60b122fad/1/4cFmtQajq3Eo4X8q_hHiLsoJ80E.mft
File:                     4cFmtQajq3Eo4X8q_hHiLsoJ80E.mft (raw, json)
Hash identifier:          6PSPPg2S2T5/pG4dkpX+artxYJyTWFwXdPTVyyWeda8=
Subject key identifier:   D3:06:A4:2A:C7:1A:6B:66:D8:9F:AF:44:13:AD:1C:50:A7:A1:FE:B9
Authority key identifier: E1:C1:66:B5:06:A3:AB:71:28:E1:7F:2A:FE:11:E2:2E:CA:09:F3:41
Certificate issuer:       /CN=e1c166b506a3ab7128e17f2afe11e22eca09f341
Certificate serial:       0193579BD7B99D105DEB9D26F71DB226515F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4cFmtQajq3Eo4X8q_hHiLsoJ80E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/37133f-c704-40d1-a606-fdb60b122fad/1/4cFmtQajq3Eo4X8q_hHiLsoJ80E.mft
Manifest number:          022E
Signing time:             Sat 23 Nov 2024 06:00:51 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:51 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:51 +0000
Files and hashes:         1: 4cFmtQajq3Eo4X8q_hHiLsoJ80E.crl (hash: W+dzzD729BLscasdrB2Dg1M+Ed0oAPCwyQenE141ur0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/37133f-c704-40d1-a606-fdb60b122fad/1/4cFmtQajq3Eo4X8q_hHiLsoJ80E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/37133f-c704-40d1-a606-fdb60b122fad/1/4cFmtQajq3Eo4X8q_hHiLsoJ80E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4cFmtQajq3Eo4X8q_hHiLsoJ80E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:d7:b9:9d:10:5d:eb:9d:26:f7:1d:b2:26:51:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1c166b506a3ab7128e17f2afe11e22eca09f341
        Validity
            Not Before: Nov 23 06:00:51 2024 GMT
            Not After : Nov 24 06:00:51 2024 GMT
        Subject: CN=d306a42ac71a6b66d89faf4413ad1c50a7a1feb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:81:7b:1f:4f:9a:71:ff:ed:30:05:cf:db:22:
                    07:b6:b4:5d:d1:c6:9e:06:e3:16:6e:23:76:04:4f:
                    3e:41:1f:a4:7b:d1:e2:3b:e5:7d:9c:a3:20:4f:1f:
                    6f:4a:f4:62:70:ba:8a:37:eb:9c:94:b0:82:5d:ac:
                    4f:1c:5c:2a:35:24:83:f3:0b:00:6a:9f:19:f9:78:
                    f3:78:1a:41:6b:38:76:2f:65:60:52:77:12:a5:01:
                    5c:00:08:55:d5:32:ac:d6:39:e6:2f:1c:3b:8a:97:
                    fc:7c:52:03:6b:4c:bd:19:98:dc:5b:4c:52:5e:92:
                    51:55:8a:45:78:6c:d3:34:46:d7:c5:aa:71:d5:52:
                    90:cb:57:98:82:0e:b6:e4:93:aa:9a:28:f4:a9:9a:
                    04:36:43:ca:8f:fa:36:dc:7a:34:09:a6:8b:d9:d3:
                    39:a4:c0:c4:d3:cd:75:59:33:58:8b:86:4e:9a:5a:
                    ac:97:e4:89:eb:f9:eb:52:ca:95:ef:0a:e6:1b:de:
                    85:a8:2f:91:42:be:9a:0a:06:27:41:8d:ca:fa:ad:
                    25:1e:65:4f:63:73:ac:96:65:98:c0:1a:ec:e8:f2:
                    84:72:72:b9:3f:1d:38:af:0b:33:74:35:d9:94:7b:
                    b8:0c:91:9b:46:ea:9e:a8:7c:35:15:2a:95:f1:79:
                    60:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:06:A4:2A:C7:1A:6B:66:D8:9F:AF:44:13:AD:1C:50:A7:A1:FE:B9
            X509v3 Authority Key Identifier:
                keyid:E1:C1:66:B5:06:A3:AB:71:28:E1:7F:2A:FE:11:E2:2E:CA:09:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cFmtQajq3Eo4X8q_hHiLsoJ80E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/37133f-c704-40d1-a606-fdb60b122fad/1/4cFmtQajq3Eo4X8q_hHiLsoJ80E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/37133f-c704-40d1-a606-fdb60b122fad/1/4cFmtQajq3Eo4X8q_hHiLsoJ80E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:6f:dd:67:6b:79:25:e5:b0:80:60:a5:fc:ce:b9:11:b1:ef:
         28:cc:46:c9:b0:f8:38:d2:cb:c2:c3:65:3a:ac:01:42:78:f7:
         0e:44:4f:00:38:4d:5a:b1:6e:14:8e:ee:a3:19:bd:f3:fb:17:
         99:d0:68:97:8b:32:83:59:bd:a6:4b:0a:b7:c5:fd:05:e8:75:
         fa:69:a2:cf:e9:e5:f4:c0:e3:1b:86:3b:d0:7c:69:65:6f:5b:
         20:cc:95:c0:5b:65:a6:33:97:fc:41:36:20:f1:9f:0c:a3:3c:
         b6:d9:86:b3:ed:33:f4:1b:f4:e4:70:38:c6:d4:70:22:54:35:
         d3:11:7c:01:8f:35:18:0c:9d:f0:9e:1e:fa:d0:47:85:b2:05:
         69:0f:f8:de:71:86:1d:5b:3d:41:3d:ba:30:34:92:27:2d:53:
         c1:31:d7:d5:6a:0b:27:11:ea:2d:3b:f5:ba:b1:f7:4e:d7:41:
         24:bf:2f:bc:d2:6e:24:37:47:80:e3:65:8b:f8:40:20:41:c7:
         30:30:93:96:73:2e:2c:bd:d0:e9:e9:f2:a7:91:4c:3c:4e:42:
         e9:66:1b:c7:4c:c8:f2:44:e2:1d:56:69:55:ef:e4:a0:d2:0d:
         49:75:b8:6f:48:8f:f4:34:c2:56:63:84:62:ba:52:83:f6:3f:
         ff:16:3a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----