Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
File:                     id8L4W7M0-twbmQXlLyQ1PfWeMk.mft (raw, json)
Hash identifier:          i1hytCZB3hMYDqqZnxj91iPWN5LjQd3aREBvQ2cjLKw=
Subject key identifier:   EF:53:F9:BB:33:3D:E0:1B:AE:11:33:0D:37:90:93:5C:16:AA:6A:29
Authority key identifier: 89:DF:0B:E1:6E:CC:D3:EB:70:6E:64:17:94:BC:90:D4:F7:D6:78:C9
Certificate issuer:       /CN=89df0be16eccd3eb706e641794bc90d4f7d678c9
Certificate serial:       01935764A2E6DEFF29C7AAF3D4270980E728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/id8L4W7M0-twbmQXlLyQ1PfWeMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
Manifest number:          136D
Signing time:             Sat 23 Nov 2024 05:00:33 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:33 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:33 +0000
Files and hashes:         1: id8L4W7M0-twbmQXlLyQ1PfWeMk.crl (hash: 2s7tCkWSW0cqM2Fi3VfMQlkha8cXq2Rqk0M0601dJT0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/id8L4W7M0-twbmQXlLyQ1PfWeMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:a2:e6:de:ff:29:c7:aa:f3:d4:27:09:80:e7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89df0be16eccd3eb706e641794bc90d4f7d678c9
        Validity
            Not Before: Nov 23 05:00:33 2024 GMT
            Not After : Nov 24 05:00:33 2024 GMT
        Subject: CN=ef53f9bb333de01bae11330d3790935c16aa6a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:45:0d:de:b7:48:7e:b1:93:20:83:f2:11:67:
                    7d:72:fc:ac:b0:81:dd:6f:a5:d7:89:0e:ec:04:37:
                    01:e1:cb:9c:57:8b:93:79:6e:56:77:90:e1:93:b6:
                    7e:af:28:c1:d9:d1:7a:9a:97:4e:0e:06:85:4f:7e:
                    79:02:a4:0f:d9:ce:b4:fc:82:79:5c:2d:57:19:de:
                    34:12:4d:02:a1:cf:e6:31:98:94:ea:72:0f:6f:d1:
                    cb:54:ef:9b:f9:b4:49:55:34:34:6d:5e:48:8e:29:
                    fa:36:1e:a1:1b:e9:af:60:3a:53:31:32:76:d2:67:
                    46:8b:0b:cf:1f:50:95:3b:77:80:d1:95:87:b0:71:
                    89:bf:17:74:38:5c:01:fe:ac:0c:50:f4:53:70:30:
                    51:25:9f:85:fa:3a:73:95:e7:9a:31:9b:0f:fd:52:
                    7c:7d:ef:b9:82:57:35:a0:e5:07:23:37:74:0e:11:
                    d4:ea:6b:dc:96:4c:45:ca:29:ea:35:13:b8:46:d5:
                    4d:ce:8d:c5:72:8a:b3:f8:d1:3a:51:4c:40:f7:cb:
                    67:4a:2d:37:b0:58:97:15:f1:12:f3:d0:11:67:d4:
                    4d:d6:c8:82:5d:2f:fd:b1:e1:9d:0d:aa:b6:bc:28:
                    2e:78:35:3a:ed:d7:90:82:da:92:e6:c3:ef:80:da:
                    50:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:53:F9:BB:33:3D:E0:1B:AE:11:33:0D:37:90:93:5C:16:AA:6A:29
            X509v3 Authority Key Identifier:
                keyid:89:DF:0B:E1:6E:CC:D3:EB:70:6E:64:17:94:BC:90:D4:F7:D6:78:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/id8L4W7M0-twbmQXlLyQ1PfWeMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:9b:16:1d:5d:49:54:59:9a:a6:67:4a:2e:ad:9b:7b:c9:0f:
         21:6c:ea:00:17:6a:43:3d:4c:b2:aa:0e:86:b4:df:45:fb:5e:
         ee:04:0c:a1:0f:b3:7f:a4:f3:72:61:19:90:a9:c7:2a:a4:48:
         8f:39:ec:72:a0:9a:38:e0:4c:4b:98:e7:29:c3:38:fc:de:55:
         e9:7c:39:d2:5b:b8:cc:5c:95:6f:b4:1a:f3:94:0b:54:86:74:
         63:90:8c:72:29:27:1c:9d:98:40:8d:90:92:ee:51:3d:78:47:
         4e:3a:04:14:b0:a7:b1:7c:97:eb:fc:87:d8:aa:e3:e7:30:9b:
         07:d3:fd:cb:28:75:02:fb:7e:e3:7e:f3:f5:b0:58:2f:cc:b9:
         c4:cb:24:7b:8d:a7:85:78:aa:e1:71:8a:a4:d9:d3:70:77:8d:
         b7:cf:0f:a6:9f:bd:1b:bd:69:bd:ae:ec:27:7c:04:5b:df:5a:
         e0:de:c0:c9:f7:55:79:ec:d4:ef:89:f1:da:31:96:95:d4:f0:
         13:5b:e2:88:f2:0a:74:4f:fa:de:51:0a:87:44:80:e6:d1:bb:
         00:cf:d0:2e:4d:69:3f:b1:55:ab:1f:cb:45:e6:59:dd:93:05:
         3e:2d:5c:0c:9a:88:78:af:23:2b:a9:06:d3:7a:63:f0:a7:b1:
         9f:e9:4f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----