Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
File:                     JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft (raw, json)
Hash identifier:          OmOJ7nsmT7eZdEHx97wHkl6mbyhQZ8SYOpYlDLDiG6k=
Subject key identifier:   90:2A:64:1F:E8:EE:4D:AF:1E:A9:B5:8A:80:C8:87:4A:1C:28:7D:65
Authority key identifier: 24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84
Certificate issuer:       /CN=24d26a5146996d220461081072c76396582fca84
Certificate serial:       0193572DC8041B1446332BB04F7AA95D9499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
Manifest number:          0581
Signing time:             Sat 23 Nov 2024 04:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:38 +0000
Files and hashes:         1: JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl (hash: 5ca52vvaPPvV6DVj2AauXWvgTySFQskSQBJ5TYVTJcs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:c8:04:1b:14:46:33:2b:b0:4f:7a:a9:5d:94:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d26a5146996d220461081072c76396582fca84
        Validity
            Not Before: Nov 23 04:00:38 2024 GMT
            Not After : Nov 24 04:00:38 2024 GMT
        Subject: CN=902a641fe8ee4daf1ea9b58a80c8874a1c287d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:79:81:e7:18:17:81:f0:05:8c:8a:b4:77:f3:
                    3c:59:96:6e:9a:c0:ca:b8:b1:8f:87:a6:03:04:86:
                    c8:30:dd:66:b3:f8:7c:1f:51:6b:38:f0:02:0f:00:
                    3f:e1:28:ab:3a:92:4a:9b:51:0f:4d:40:b5:89:c3:
                    31:ae:55:45:48:b2:19:8f:7c:1c:29:6d:f8:b1:2a:
                    b9:c5:bc:35:25:99:69:ef:d0:44:6f:c0:74:c7:b6:
                    3d:72:b2:3f:31:9a:99:c0:5a:e9:c5:19:ee:5c:1b:
                    a1:1a:0b:5f:a0:72:4c:94:67:63:66:34:35:31:d1:
                    87:e0:86:1c:f9:e8:b9:d4:74:f5:b7:b9:40:82:63:
                    a1:3f:ee:64:77:92:61:26:c7:94:b4:ad:d4:8e:52:
                    e5:57:d8:c6:04:b3:e3:95:6e:5d:e9:13:fd:78:cd:
                    23:bd:97:c6:86:e9:ba:3d:2c:2b:44:2f:d3:36:66:
                    b2:f0:14:6f:1c:20:21:e2:9d:94:34:6c:dd:b1:66:
                    bf:47:91:a0:16:42:21:36:d3:75:95:f5:32:0b:cb:
                    04:0d:e2:74:7d:71:7d:4c:bb:c9:7d:5f:41:e2:07:
                    2a:9e:ec:f1:9e:07:72:c9:02:21:21:12:73:5b:2a:
                    ce:72:7c:9b:4a:0c:57:d9:80:85:cd:69:17:d2:90:
                    9b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2A:64:1F:E8:EE:4D:AF:1E:A9:B5:8A:80:C8:87:4A:1C:28:7D:65
            X509v3 Authority Key Identifier:
                keyid:24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ed:b7:54:84:b5:73:6d:7a:a8:94:56:7f:a3:aa:1f:ff:d1:
         ba:9d:06:d6:d9:13:c5:15:7d:c2:0d:f4:7b:e9:0c:c0:8b:17:
         7a:02:9f:6d:08:60:63:6d:26:75:d8:25:42:5b:a7:5b:e5:80:
         f6:cf:e6:ff:ad:93:a8:22:4a:dc:e5:78:d1:c6:e8:92:bb:e2:
         f4:b5:83:0a:f3:20:3f:db:8d:b8:9a:04:2b:41:3b:f4:89:69:
         21:14:93:7b:1f:eb:83:1c:75:e2:c8:4a:b2:98:b9:d4:0c:8d:
         6d:d3:a1:8d:31:11:59:98:38:25:20:68:9d:a9:53:e9:40:1d:
         a2:da:c4:67:de:98:16:4c:9c:e6:fa:5e:a9:ab:d6:a2:88:f7:
         2e:9f:13:d9:40:21:4f:66:64:12:a3:1b:69:67:c8:0b:b5:97:
         e8:37:5a:80:99:2a:36:36:42:cf:06:d3:df:77:44:06:e8:33:
         3d:dd:94:69:28:22:5d:63:6c:d7:e7:5c:88:8d:84:d1:62:ed:
         60:10:6f:00:04:7e:68:3c:92:9d:3a:2b:cd:97:b2:11:78:29:
         fa:94:bf:63:e3:f7:bb:15:0c:ae:a6:96:f8:50:dc:56:e0:01:
         9b:72:89:a8:30:bd:1f:a9:7b:5e:9b:c2:50:4d:02:90:a6:9a:
         d8:4d:c2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----