Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
File:                     NO2iVBz8z2guKd2uYx7cjR57b2A.mft (raw, json)
Hash identifier:          UpaeGsUbexoxNXvc96/1dS9W6BDRWabXVRReeDO5APg=
Subject key identifier:   C3:DB:F4:E8:0F:47:9E:49:D5:99:8E:DE:AA:FE:93:C6:13:84:FC:EC
Authority key identifier: 34:ED:A2:54:1C:FC:CF:68:2E:29:DD:AE:63:1E:DC:8D:1E:7B:6F:60
Certificate issuer:       /CN=34eda2541cfccf682e29ddae631edc8d1e7b6f60
Certificate serial:       019369D8F989DBC0C022462B2DB3B3DE954D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
Manifest number:          0429
Signing time:             Tue 26 Nov 2024 19:00:47 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:47 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:47 +0000
Files and hashes:         1: NO2iVBz8z2guKd2uYx7cjR57b2A.crl (hash: /CZq73oxu1BGdz9EYyH2vg3Kjw/DKeHyD+NBomTAjXU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:f9:89:db:c0:c0:22:46:2b:2d:b3:b3:de:95:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34eda2541cfccf682e29ddae631edc8d1e7b6f60
        Validity
            Not Before: Nov 26 19:00:47 2024 GMT
            Not After : Nov 27 19:00:47 2024 GMT
        Subject: CN=c3dbf4e80f479e49d5998edeaafe93c61384fcec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3b:3c:8d:8c:0e:8e:a2:6b:8f:c2:55:c6:0d:
                    95:70:bf:cf:d4:97:c5:9f:0c:26:e2:99:52:a9:8c:
                    ab:87:ea:e2:08:71:73:ad:25:05:01:0e:50:ed:13:
                    2b:f2:d0:52:84:ef:56:0a:d6:2a:d5:e0:64:1a:14:
                    fc:ba:9e:5a:2f:42:66:81:eb:bb:ec:6d:66:24:15:
                    14:4e:e2:41:05:de:b2:5d:81:a2:7b:50:06:96:ed:
                    d0:bb:df:94:9c:04:7f:09:f3:9d:a5:a5:07:9c:96:
                    97:e3:76:b5:a4:71:6a:4c:5a:89:e3:2f:7c:fa:bc:
                    f5:ec:b5:ee:ff:70:ad:5c:78:ee:55:7e:dc:2c:b6:
                    48:85:81:5f:20:d4:4b:32:f8:33:c5:e9:48:80:dd:
                    62:00:17:15:30:34:61:37:eb:5d:fe:5b:07:e8:ca:
                    67:d6:1c:fc:d9:44:cf:73:97:c8:7b:d0:b8:64:61:
                    0c:14:10:32:ef:25:4b:cb:d1:54:f0:d4:43:6a:fb:
                    42:11:27:60:b8:a8:ef:52:9b:14:d6:4c:bf:82:18:
                    ec:c3:77:62:ee:02:dc:cc:92:fc:f2:6f:a9:83:bc:
                    bb:d0:f2:29:bb:4b:a8:67:af:48:89:a9:5d:64:fa:
                    a4:89:28:2f:9d:e7:7a:12:92:5a:a4:26:52:cf:a1:
                    27:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DB:F4:E8:0F:47:9E:49:D5:99:8E:DE:AA:FE:93:C6:13:84:FC:EC
            X509v3 Authority Key Identifier:
                keyid:34:ED:A2:54:1C:FC:CF:68:2E:29:DD:AE:63:1E:DC:8D:1E:7B:6F:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:86:b7:23:ef:80:0c:ea:8b:cd:0f:84:4d:93:4b:84:d9:6e:
         fb:5d:0b:60:37:e8:52:d9:bf:95:bd:bb:2f:41:ef:de:c9:c4:
         21:db:9b:b1:d8:4c:c3:91:b0:5c:21:98:27:98:96:93:26:5a:
         98:da:6d:8d:f2:ae:f2:22:39:10:e7:44:76:6a:e4:4a:f3:25:
         c6:0e:66:4f:23:49:c0:10:83:e8:38:cd:ce:b3:4c:ed:7e:f1:
         e1:87:05:ef:c1:73:e5:2c:0c:8d:9a:9e:67:2f:16:d4:c3:ef:
         36:55:d9:37:d5:67:a7:b2:76:80:05:e0:f3:ec:0d:55:6c:d0:
         ff:31:bf:1f:eb:4f:92:c3:c1:28:fe:f5:cf:f5:de:4a:9c:39:
         94:ce:f2:e0:6e:51:c1:6c:a3:7c:d1:52:9f:40:76:84:20:96:
         8c:1b:a0:82:73:a3:6b:39:2c:f8:a7:16:95:69:88:57:37:78:
         75:a0:72:0b:14:25:ce:e0:93:18:48:16:28:eb:fd:72:eb:15:
         cc:d7:38:4e:a7:df:c2:4b:4b:49:c8:0c:b1:15:bc:fb:68:a7:
         a5:ec:b7:61:5c:ad:53:a8:d6:ad:17:fb:ac:86:32:b2:5d:4f:
         e5:a3:ba:50:f7:fb:75:41:83:31:b3:45:51:c0:91:b0:52:50:
         a2:a2:10:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----