Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.mft
File:                     8MFXiVlhvE-EwCh7KZu-H4ql9ho.mft (raw, json)
Hash identifier:          LYxN0reEpdyH4eSHMm208z9aqDY1+cp9owO/99pdJOU=
Subject key identifier:   B4:A9:6D:25:E3:7B:F8:E5:45:16:55:4C:82:11:E0:C4:FE:08:7B:95
Authority key identifier: F0:C1:57:89:59:61:BC:4F:84:C0:28:7B:29:9B:BE:1F:8A:A5:F6:1A
Certificate issuer:       /CN=f0c157895961bc4f84c0287b299bbe1f8aa5f61a
Certificate serial:       0193568B01E3BE60759F703EA7C7A92C143D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8MFXiVlhvE-EwCh7KZu-H4ql9ho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.mft
Manifest number:          0477
Signing time:             Sat 23 Nov 2024 01:02:50 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:50 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:50 +0000
Files and hashes:         1: 8MFXiVlhvE-EwCh7KZu-H4ql9ho.crl (hash: LvVQ0pF6gQVrlUuoF+qJOXw1g6Dv3LANLBSTDCon9Lg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8MFXiVlhvE-EwCh7KZu-H4ql9ho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:01:e3:be:60:75:9f:70:3e:a7:c7:a9:2c:14:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c157895961bc4f84c0287b299bbe1f8aa5f61a
        Validity
            Not Before: Nov 23 01:02:50 2024 GMT
            Not After : Nov 24 01:02:50 2024 GMT
        Subject: CN=b4a96d25e37bf8e54516554c8211e0c4fe087b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f9:b6:14:81:5c:7e:88:b6:ef:39:d4:ff:dd:
                    4f:da:f5:8f:79:f5:24:c5:e2:9d:48:e8:20:9b:4e:
                    23:31:2e:6f:e3:a9:b6:14:53:97:a6:37:49:a6:34:
                    d8:be:99:a5:f8:5e:c4:10:20:a7:e6:e5:ce:7b:dc:
                    91:1e:6f:0f:54:04:7a:c0:ba:d5:7c:e6:23:85:5e:
                    93:8b:a7:b8:0c:87:18:f4:51:a6:4f:07:94:bb:1f:
                    7b:f9:29:79:59:91:28:57:f0:8a:79:ab:2e:d7:6b:
                    05:38:20:a4:4a:1d:49:f2:34:be:4e:d9:f0:3d:e4:
                    a2:e4:3a:af:8e:bb:c5:69:17:18:e0:76:b8:4b:b7:
                    a4:68:6f:a9:57:6d:c3:0b:ab:11:0b:9c:b8:08:ee:
                    1a:ab:ca:e5:e3:00:f4:9d:02:52:f8:4b:9f:b2:5e:
                    79:82:80:d6:a8:7b:4f:ee:15:4e:90:7f:7f:df:22:
                    77:d2:ff:e1:83:f9:00:a3:d7:10:cb:20:aa:c8:8b:
                    6e:f9:4f:b6:a9:9b:24:91:ac:65:e6:23:ab:5e:95:
                    e9:43:33:d7:e1:76:c9:4f:95:7e:48:df:50:92:7d:
                    3f:80:85:ad:50:10:17:33:61:74:c3:75:20:04:de:
                    89:3a:d3:44:de:f8:c8:88:72:95:58:83:29:8b:5e:
                    bd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A9:6D:25:E3:7B:F8:E5:45:16:55:4C:82:11:E0:C4:FE:08:7B:95
            X509v3 Authority Key Identifier:
                keyid:F0:C1:57:89:59:61:BC:4F:84:C0:28:7B:29:9B:BE:1F:8A:A5:F6:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MFXiVlhvE-EwCh7KZu-H4ql9ho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:f6:36:4e:93:80:2a:88:4c:a2:db:a0:db:03:70:a3:b1:4a:
         08:eb:71:6d:70:be:77:02:86:4b:9a:78:6f:c4:c6:92:f1:a3:
         c1:64:34:9a:28:a8:bb:f9:72:6e:29:d7:fa:aa:7c:60:19:9b:
         a2:fe:cb:b8:f1:65:d7:aa:39:ce:e8:1e:16:6e:51:16:7d:e6:
         4b:22:4a:27:83:75:08:09:a9:14:db:76:9a:92:36:02:f3:6e:
         97:19:6d:81:28:c4:16:ed:de:83:4a:05:e2:e4:93:ce:08:07:
         5c:b7:68:cc:a2:98:f0:0d:46:ea:5c:8d:ab:4c:0e:26:84:9f:
         94:c1:29:1d:fc:b1:6d:3e:f2:4a:1e:23:5a:7d:38:d3:02:fb:
         c3:d4:ae:aa:10:bb:6d:04:fa:c2:d9:10:6a:ed:85:b5:c4:f6:
         59:62:19:79:ec:e4:7d:81:ca:75:a6:a8:cf:8b:f9:09:84:89:
         9f:3c:d9:13:77:7f:e9:2f:97:c5:ed:a1:b2:7d:49:63:12:c2:
         6d:05:e7:83:d6:dc:d7:f9:d0:42:32:84:03:97:6d:92:18:ca:
         3b:29:ad:30:82:61:2d:f7:7a:7a:15:ba:dc:9e:58:10:13:0f:
         dc:f4:d8:0d:3f:2c:9a:8d:e4:73:4f:63:9c:06:44:b8:6c:5d:
         28:ef:9c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----