Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
File:                     468Yd0OnoHf2oeBmX92q700SSfs.mft (raw, json)
Hash identifier:          BCWtq0fiDYNrr+UD2e3YP1hgpPLSqRBLfiNlwIgAqs4=
Subject key identifier:   D4:75:DD:4F:90:77:EF:E1:43:5D:7A:ED:D6:5A:15:D4:69:D2:67:17
Authority key identifier: E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
Certificate issuer:       /CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Certificate serial:       01935688C29742B78E7793FE4658DA8558F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
Manifest number:          06CD
Signing time:             Sat 23 Nov 2024 01:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:23 +0000
Files and hashes:         1: 468Yd0OnoHf2oeBmX92q700SSfs.crl (hash: J/JQw4FsGay2/pEGzB/Am9mdruLT4WL8oSb4UbRklAc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:c2:97:42:b7:8e:77:93:fe:46:58:da:85:58:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
        Validity
            Not Before: Nov 23 01:00:23 2024 GMT
            Not After : Nov 24 01:00:23 2024 GMT
        Subject: CN=d475dd4f9077efe1435d7aedd65a15d469d26717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:c5:44:ca:d1:5b:cd:57:03:30:3b:4a:bd:
                    fd:a4:5d:ef:7c:bf:5c:e1:15:03:93:7a:72:3b:68:
                    f9:a9:b1:10:14:ef:ac:f6:31:68:bb:df:63:57:9f:
                    07:45:01:f2:bc:ab:e9:f4:03:bb:ad:ae:51:d3:ed:
                    89:28:97:bd:18:28:13:9f:f3:9a:f2:a2:75:1d:12:
                    b4:8d:84:f7:41:20:d6:f4:5a:d2:66:b8:71:08:07:
                    92:07:5c:9f:1a:62:79:4c:3a:95:16:92:e6:61:66:
                    11:93:be:2a:c1:88:73:9d:a0:bb:f6:9f:f3:ed:86:
                    17:e2:c7:43:e9:50:10:6a:62:43:55:47:c7:ac:e1:
                    7f:5d:73:a1:a7:7e:36:c0:4a:0d:4c:06:55:2a:20:
                    6d:a6:6f:52:0c:15:3d:a3:0f:8f:ec:ff:e5:ba:fd:
                    49:5e:35:2a:e7:85:cf:7e:a4:f4:b4:75:0b:5b:cf:
                    4d:c6:17:0c:57:7d:62:40:b4:72:f9:71:e6:e2:91:
                    3e:b1:f1:2f:62:7e:41:d0:df:0f:de:6e:50:9c:eb:
                    bc:0e:5d:be:2d:2b:9e:43:14:69:0b:7c:b6:f6:0d:
                    f3:56:9b:7c:93:a1:97:5c:d3:50:c0:8b:62:92:ec:
                    ec:c6:7c:8c:04:7a:fa:da:73:54:d1:8e:98:e8:f4:
                    5e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:75:DD:4F:90:77:EF:E1:43:5D:7A:ED:D6:5A:15:D4:69:D2:67:17
            X509v3 Authority Key Identifier:
                keyid:E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ba:f5:d9:e1:5b:f0:46:27:4e:56:d2:f9:0a:7e:73:96:1f:
         73:f8:71:d6:7d:8a:5e:a2:68:22:4d:74:1d:85:0a:f9:d0:47:
         d1:ce:d7:ec:79:28:16:4a:ef:af:2f:71:16:7f:61:df:f7:13:
         53:f9:59:b4:c7:4f:a2:f8:48:75:a3:ad:9e:5d:4c:32:16:f1:
         cc:d1:48:6d:14:5f:17:b8:11:22:f1:92:0a:1c:1e:d1:5b:7e:
         3d:04:04:3d:6f:ac:fe:d3:4e:41:e8:14:d8:86:43:b8:ff:04:
         36:3c:15:ae:8e:25:0c:6a:f1:44:a4:97:01:d9:31:bd:6e:20:
         6e:1d:4e:47:e1:cf:b6:29:88:41:cd:59:3f:07:ff:66:f1:84:
         b8:4b:ff:43:37:24:0f:69:a7:8e:0e:8d:53:fc:c9:e7:f3:58:
         7a:99:a4:d9:3e:c0:fa:f7:24:bc:a5:11:45:27:7c:7c:34:9a:
         21:dd:bc:42:39:b1:62:c4:39:1f:97:9a:41:a1:9c:2a:2d:30:
         82:41:8e:cd:77:9d:66:ef:89:5c:93:00:53:0e:ba:5b:2a:dc:
         af:61:c5:57:c5:35:fe:19:eb:e6:03:29:e1:30:01:49:30:50:
         cb:78:1b:3f:38:4a:7b:da:1f:5e:66:4d:70:1f:00:23:6a:7e:
         60:9d:c0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----