Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.mft
File:                     AlAYGVXVQR9QbrpCutueWqXdhEM.mft (raw, json)
Hash identifier:          LB/qDV7mQWW5UtNcWb+XioArHqat9pBtPWsCJan8hE4=
Subject key identifier:   FB:6B:FD:0D:59:BF:45:E8:8D:D6:9A:1C:59:C7:46:DF:28:24:AF:CA
Authority key identifier: 02:50:18:19:55:D5:41:1F:50:6E:BA:42:BA:DB:9E:5A:A5:DD:84:43
Certificate issuer:       /CN=0250181955d5411f506eba42badb9e5aa5dd8443
Certificate serial:       0193572D722E442479EB7F3190F59B49F3B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AlAYGVXVQR9QbrpCutueWqXdhEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.mft
Manifest number:          101D
Signing time:             Sat 23 Nov 2024 04:00:16 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:16 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:16 +0000
Files and hashes:         1: AlAYGVXVQR9QbrpCutueWqXdhEM.crl (hash: yZ5U1CN8QfpE808QtHSE4i8E1GQVXBCgfgfL+5tCfHI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AlAYGVXVQR9QbrpCutueWqXdhEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:72:2e:44:24:79:eb:7f:31:90:f5:9b:49:f3:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0250181955d5411f506eba42badb9e5aa5dd8443
        Validity
            Not Before: Nov 23 04:00:16 2024 GMT
            Not After : Nov 24 04:00:16 2024 GMT
        Subject: CN=fb6bfd0d59bf45e88dd69a1c59c746df2824afca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:77:3a:52:62:58:d9:c7:ab:88:41:c1:83:9b:
                    4e:12:04:3f:69:e4:ff:0c:4f:fb:22:46:c4:22:c3:
                    6c:b5:f3:dc:4b:ee:3c:75:10:95:3c:28:94:b3:ac:
                    c5:fb:67:23:cc:48:21:60:51:ab:81:1b:5e:d8:b9:
                    f6:be:9a:0a:49:40:de:6e:4f:6e:a1:37:5f:21:c8:
                    4d:84:32:14:4c:da:7f:3a:e9:ec:58:14:2d:6e:cf:
                    b4:a5:6f:78:b6:df:8e:b2:7f:14:dc:51:32:ed:e6:
                    28:16:f2:02:b9:73:76:d0:28:b0:31:6f:45:00:de:
                    92:07:2c:89:ea:34:9a:5f:48:35:ad:c3:26:bc:71:
                    2c:6d:41:05:61:e2:89:3f:5b:4f:e3:91:dd:91:8f:
                    04:6d:cf:ce:50:2f:61:c0:7b:c2:e6:9c:58:88:ac:
                    d7:d2:b8:4a:ad:8a:67:3b:c2:02:f0:a9:fa:21:ce:
                    5d:ba:ee:1e:6e:cd:bd:8e:42:f6:c0:6e:eb:fd:00:
                    86:20:8a:4e:d9:19:6e:47:93:b1:8f:d9:c5:82:3f:
                    08:6f:a0:65:19:84:db:21:5c:44:ea:89:2f:c0:b0:
                    53:0b:a9:32:f5:2a:fc:06:9e:ca:57:c7:0f:51:f5:
                    40:58:aa:05:0d:ea:0e:46:7f:e2:7e:89:2c:69:e3:
                    90:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6B:FD:0D:59:BF:45:E8:8D:D6:9A:1C:59:C7:46:DF:28:24:AF:CA
            X509v3 Authority Key Identifier:
                keyid:02:50:18:19:55:D5:41:1F:50:6E:BA:42:BA:DB:9E:5A:A5:DD:84:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlAYGVXVQR9QbrpCutueWqXdhEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:00:34:20:a2:58:ce:13:a1:d1:d6:58:15:c7:88:d7:f2:0d:
         67:bb:a8:c3:a5:df:51:2a:d9:d3:30:ad:f1:1f:36:d4:5a:42:
         5d:63:af:b4:7c:49:bb:98:1c:62:1c:43:66:d1:6c:62:55:e0:
         cf:a7:64:d6:c3:87:4e:09:85:31:2a:8d:de:85:e8:c4:fc:4e:
         59:e1:3a:b0:7b:1b:6d:f8:e9:b9:e3:02:93:20:fd:de:6b:ca:
         66:e9:25:88:2d:78:51:5d:1c:24:09:a6:8f:1a:d0:50:ac:1b:
         1e:ff:06:8f:16:9d:d9:ff:7f:2f:af:38:48:b8:b9:0c:d4:0b:
         8a:0c:b1:ca:28:9d:56:bd:ab:c3:1b:5a:66:0e:12:bc:23:77:
         dc:f6:ad:fe:26:c3:8d:e3:e3:5e:35:89:db:ce:12:71:b5:9b:
         aa:f7:d3:5c:62:31:d1:02:82:73:03:59:3a:fc:7a:99:b8:0c:
         91:0f:06:49:95:60:f7:9b:b1:f8:7a:ac:ce:b3:91:9a:e3:35:
         e6:c0:42:47:c6:47:2e:9b:15:be:d3:b0:00:44:7e:45:b6:b5:
         fc:fc:53:16:ff:6a:96:cc:1f:7c:d4:bd:a4:c0:38:8a:7a:74:
         5b:4b:53:2e:4d:b8:ef:b6:7f:8a:f1:90:47:7d:fd:42:cc:08:
         d6:c2:30:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----