Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
File:                     61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft (raw, json)
Hash identifier:          6RJq6VrwFV/PKuWpEXPLpiio8fMCu0JENd1nmTDn7ro=
Subject key identifier:   CA:A8:69:39:2B:33:E5:D9:37:FF:86:9B:00:3E:06:D0:64:AF:F6:00
Authority key identifier: EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
Certificate issuer:       /CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Certificate serial:       019369DAB949BF498B2A5739CD5D830E61E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
Manifest number:          0975
Signing time:             Tue 26 Nov 2024 19:02:42 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:42 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:42 +0000
Files and hashes:         1: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl (hash: Ug4EJkSHZFB+oY1RJdxd7TRFGf7F3ZZ8a8nLRn/fg8o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:b9:49:bf:49:8b:2a:57:39:cd:5d:83:0e:61:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb50b439d488e1b1a69e3586098621956c0edc7b
        Validity
            Not Before: Nov 26 19:02:42 2024 GMT
            Not After : Nov 27 19:02:42 2024 GMT
        Subject: CN=caa869392b33e5d937ff869b003e06d064aff600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:71:5b:99:75:61:30:ef:23:b1:bf:b5:1b:7d:
                    a3:47:64:88:2b:4c:01:74:d2:6d:c1:55:1b:76:1e:
                    43:bc:9e:10:86:b8:c9:e1:f5:9c:40:5d:86:5f:3a:
                    90:c1:5a:fb:1c:4f:4a:bd:c7:75:31:22:76:43:07:
                    6a:43:b3:a2:80:aa:45:f2:8d:44:06:b0:8b:94:e7:
                    94:2c:a0:cb:13:7e:47:fb:21:6e:7e:e8:a3:37:17:
                    5e:f2:58:d8:1e:8f:d5:6b:99:cb:f8:a6:39:89:14:
                    3c:5d:42:19:6d:97:ef:4a:25:bb:95:d9:34:99:d7:
                    b9:48:5d:ad:6a:91:bd:cf:3b:2f:8e:9b:a3:f7:20:
                    e0:b0:5f:91:99:6d:99:85:7c:eb:67:cd:d0:aa:5c:
                    bc:27:c7:be:30:37:58:49:ff:60:cd:00:97:e9:56:
                    71:0c:6b:01:14:b6:a0:b2:b4:27:4c:2d:87:7f:d3:
                    7d:24:9c:26:7b:be:77:d1:18:16:b3:13:98:5f:89:
                    e9:10:6b:05:8c:5a:04:c2:6b:d5:52:c3:ff:df:56:
                    f4:8f:57:43:a5:fa:c0:3a:0a:76:8c:1c:0e:68:1a:
                    02:42:a3:f6:47:71:c1:98:f6:6a:27:f9:77:14:ff:
                    68:81:c7:6a:88:8c:2a:60:dd:19:44:1d:ea:37:b1:
                    d3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A8:69:39:2B:33:E5:D9:37:FF:86:9B:00:3E:06:D0:64:AF:F6:00
            X509v3 Authority Key Identifier:
                keyid:EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:0b:c3:56:07:43:4b:1b:7a:1b:e2:8e:3d:32:ca:b7:bb:25:
         fa:b4:db:2b:22:4e:7c:82:e9:ee:21:a2:87:d5:b9:ac:d1:4f:
         d9:10:d7:96:d7:30:ff:df:73:09:35:9f:bc:7b:6d:76:b1:a1:
         ff:2b:85:61:a4:84:17:f4:bc:d2:06:e3:a9:85:d7:55:e9:9e:
         93:95:cd:97:f4:c7:e3:3a:0d:e1:d1:3d:12:2f:40:11:7d:2f:
         be:f9:c7:5a:5b:b0:b6:da:74:19:3f:cb:03:44:fa:c8:cd:6c:
         f4:35:a6:34:9c:39:00:fa:8c:ca:9c:f5:bd:2b:d0:ff:5c:73:
         28:0f:e8:df:4f:2b:a3:97:5e:55:95:ba:95:15:44:d3:35:4c:
         8b:f5:59:72:42:50:7f:67:be:3c:93:4f:9a:10:74:42:8f:9e:
         55:e3:0b:b1:70:05:b1:ed:8e:8e:4d:6f:5a:ec:15:55:f8:b9:
         83:34:55:2a:e5:2a:cc:23:12:ae:4d:d9:55:38:21:71:44:df:
         ab:fa:25:18:1e:cf:35:2d:eb:03:b8:ed:8f:a7:fa:98:09:9d:
         44:7c:dc:32:c8:8f:a7:81:8a:58:0f:da:a9:a0:25:67:39:59:
         c1:3f:83:3e:f4:65:a2:20:00:eb:4a:44:66:83:9e:8b:0c:53:
         a9:66:36:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----