Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
File:                     9Y-A0jqdiu1P4xH3IiCcldqarUY.mft (raw, json)
Hash identifier:          rZxT/BHAs7aTqi2FZWNDALbIPQKEoX+WhTPAvCjBBhM=
Subject key identifier:   8E:75:0D:62:B0:47:00:41:09:61:93:02:9C:BF:7E:1C:5B:11:67:C9
Authority key identifier: F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
Certificate issuer:       /CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Certificate serial:       019357D2F4BC109B2AAE159E61896B1977D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
Manifest number:          0A4F
Signing time:             Sat 23 Nov 2024 07:01:03 +0000
Manifest this update:     Sat 23 Nov 2024 07:01:03 +0000
Manifest next update:     Sun 24 Nov 2024 07:01:03 +0000
Files and hashes:         1: 9Y-A0jqdiu1P4xH3IiCcldqarUY.crl (hash: tExpHBLEtKLr5z0yj5QH4U5DbJMb8I2wjfYnwVM04xI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:f4:bc:10:9b:2a:ae:15:9e:61:89:6b:19:77:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
        Validity
            Not Before: Nov 23 07:01:03 2024 GMT
            Not After : Nov 24 07:01:03 2024 GMT
        Subject: CN=8e750d62b0470041096193029cbf7e1c5b1167c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:56:22:89:14:6a:76:9e:50:3d:d9:eb:1c:c1:
                    40:75:46:a8:96:52:01:14:47:81:72:60:71:31:a3:
                    02:84:ef:bc:80:89:cc:f6:9f:0b:ee:c5:3b:16:d7:
                    7e:61:d8:c7:d9:8e:89:9f:8d:3e:96:2f:fa:b8:36:
                    ac:8d:72:35:be:fe:8b:37:37:f4:cb:63:ef:0f:4b:
                    c1:a4:ec:44:97:f7:92:fd:da:2e:57:eb:98:bf:43:
                    60:69:eb:d9:81:e5:df:e7:16:b6:7d:b3:61:db:2a:
                    ac:9d:e8:83:4d:24:ac:25:32:ea:37:88:c3:5e:74:
                    a1:21:ce:56:d2:ea:d3:10:4e:b7:55:ac:58:97:02:
                    bb:a4:cc:a0:7c:68:91:24:f0:ed:d9:be:7e:ef:1e:
                    6b:ca:67:75:85:ab:4f:ed:49:11:d6:74:e8:f4:92:
                    44:ee:c0:6f:37:8a:84:56:87:e6:91:56:33:cd:ac:
                    eb:8d:62:db:15:2b:8c:b5:90:2b:8f:12:6e:42:1d:
                    aa:7e:b7:bf:9e:cd:98:c9:51:ae:a8:aa:92:5d:05:
                    58:33:b8:57:59:d5:b3:81:1a:0b:59:67:9b:59:db:
                    ef:e7:45:eb:62:b9:4f:44:b0:c2:35:fb:aa:b2:32:
                    39:b1:46:ba:a8:8e:f0:5d:a7:88:e8:2f:04:af:71:
                    08:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:75:0D:62:B0:47:00:41:09:61:93:02:9C:BF:7E:1C:5B:11:67:C9
            X509v3 Authority Key Identifier:
                keyid:F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f8:c7:ea:84:59:81:f3:65:67:ae:14:f0:d3:0b:11:89:fe:
         c4:09:25:45:b2:d9:71:60:21:81:00:56:72:be:da:93:6c:37:
         9c:f5:73:7b:3d:48:fe:81:cf:03:02:56:a5:ea:47:82:8c:59:
         2b:a4:21:5c:a9:b6:93:46:5b:9b:df:f4:7e:61:ae:56:a1:fc:
         71:e9:a0:c2:b0:c4:61:6a:47:4b:53:0a:5f:19:7b:47:c5:0c:
         66:d3:82:f7:77:88:6a:00:36:27:6f:e7:bd:5c:8b:29:8c:86:
         1b:06:e0:54:74:be:81:da:34:2e:09:64:b1:fc:c8:20:55:fd:
         88:7c:8f:b7:b0:59:65:a3:e4:bb:02:c6:6e:14:d6:7e:e0:84:
         35:15:6a:75:dc:df:fa:7d:0d:51:99:4c:2d:88:ca:a6:3a:ce:
         bc:16:47:69:09:c4:18:d4:ec:f5:59:a4:74:0f:e5:8f:e7:e9:
         d7:fa:54:c2:25:ec:ce:44:54:a9:61:46:58:6d:2a:99:16:1d:
         81:84:0e:6b:57:70:f5:98:aa:17:85:43:d5:ca:28:81:14:db:
         9c:77:c6:44:ec:a5:e9:e0:d5:4a:91:b2:22:74:95:dc:bf:7f:
         a6:17:ec:02:17:7e:12:4d:1b:6c:2c:4a:ac:08:98:53:b6:5b:
         17:11:73:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----