Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft
File:                     UC_eWr0nGEuqmtq3za-8w6VEGus.mft (raw, json)
Hash identifier:          cFSa6o4SCdBrH3FoxL8wA4aC5x9OTnLP4ZGsLB4gRJw=
Subject key identifier:   AE:57:45:EF:31:4E:59:65:47:55:29:F0:47:F7:16:C7:94:0C:A2:47
Authority key identifier: 50:2F:DE:5A:BD:27:18:4B:AA:9A:DA:B7:CD:AF:BC:C3:A5:44:1A:EB
Certificate issuer:       /CN=502fde5abd27184baa9adab7cdafbcc3a5441aeb
Certificate serial:       01936B22931F7343A2A39E85F23AB5D912DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft
Manifest number:          10B4
Signing time:             Wed 27 Nov 2024 01:00:48 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:48 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:48 +0000
Files and hashes:         1: UC_eWr0nGEuqmtq3za-8w6VEGus.crl (hash: cUHUC4qqc7AA5dUVHmz7aM6EEvDNBhftaBBrYm73lPQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:93:1f:73:43:a2:a3:9e:85:f2:3a:b5:d9:12:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502fde5abd27184baa9adab7cdafbcc3a5441aeb
        Validity
            Not Before: Nov 27 01:00:48 2024 GMT
            Not After : Nov 28 01:00:48 2024 GMT
        Subject: CN=ae5745ef314e5965475529f047f716c7940ca247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c4:33:32:ac:38:f6:c8:1e:eb:2f:7d:07:46:
                    8f:a4:e1:ca:93:11:48:3a:be:68:86:c6:81:ef:a9:
                    9d:52:4c:64:1e:16:0d:41:af:0a:52:f8:57:e2:89:
                    00:d4:06:94:62:18:d3:1b:2d:24:d3:10:e3:b6:07:
                    ff:7a:43:53:fb:b0:78:84:72:6f:27:db:86:59:7c:
                    05:33:a5:20:2f:39:73:87:7e:e2:1f:9a:79:64:86:
                    96:0a:ed:c7:be:f1:99:78:f2:11:29:6f:dd:3e:0a:
                    35:b9:97:e3:f4:27:42:92:57:b4:0e:ed:d5:1f:0b:
                    8d:91:e5:f5:48:d0:0e:56:92:71:0e:e9:35:78:78:
                    40:51:9c:24:95:07:ba:2a:e9:af:bd:0b:92:c5:73:
                    17:da:7b:87:e2:c4:89:b1:31:fd:53:e8:17:1a:ea:
                    13:46:d7:48:48:47:1a:3b:64:3d:65:d0:73:bd:b6:
                    71:72:4b:25:dc:41:d4:8d:64:ad:43:11:bd:f8:05:
                    57:33:b8:41:c0:7e:35:2f:f2:55:6d:6c:82:a4:fd:
                    8c:bb:bb:68:06:a0:c9:76:58:37:74:b4:0a:c9:1a:
                    60:65:c7:c9:53:44:16:80:62:33:fc:20:07:22:40:
                    7e:79:ee:03:ff:77:9a:30:10:3a:d6:9e:d7:ef:11:
                    3c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:57:45:EF:31:4E:59:65:47:55:29:F0:47:F7:16:C7:94:0C:A2:47
            X509v3 Authority Key Identifier:
                keyid:50:2F:DE:5A:BD:27:18:4B:AA:9A:DA:B7:CD:AF:BC:C3:A5:44:1A:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:01:48:6c:b0:16:07:4e:d4:d7:36:11:18:9e:94:17:7b:76:
         90:ab:aa:82:91:9d:84:ee:84:5a:32:e0:bb:74:bc:ee:8b:6f:
         27:56:51:fe:ae:12:0b:45:98:43:73:db:bb:4e:a6:83:73:28:
         59:f2:54:cd:32:ca:e5:08:1d:ce:48:40:2a:de:73:bd:0e:81:
         4e:70:14:18:c9:ef:2b:7f:85:4c:89:21:6c:87:77:0c:e1:39:
         be:ac:be:b2:8e:9e:a3:dc:6f:94:dc:60:e7:36:f5:2b:b3:b7:
         c2:37:42:3e:ac:14:14:93:51:16:12:f5:5b:f1:58:b0:39:51:
         94:71:ff:cb:f1:fe:07:d7:c5:06:74:4f:2a:7f:ec:15:d9:9d:
         46:ed:be:ff:ea:ab:c0:3a:b8:b7:a1:02:1e:52:ef:0b:9e:95:
         0c:cf:1e:2b:44:13:39:e4:74:ec:e1:02:0a:ff:06:53:db:88:
         7f:3f:94:1b:66:ff:5f:a2:16:30:7c:c2:30:a7:18:28:9b:93:
         99:e9:bb:a7:70:fd:55:01:ce:c3:e5:ba:fe:7e:b3:94:98:a3:
         72:7b:a3:01:36:6c:50:e8:a7:0a:ef:a0:f0:f2:a9:71:23:66:
         0b:5d:80:8a:73:92:0a:a2:17:81:d3:47:ef:0a:9f:d4:d7:49:
         7b:f5:64:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----