Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft
File:                     tRm7YH6Ot267nMsgIsxkbDzOC2A.mft (raw, json)
Hash identifier:          xgMC5KVI/mmea7dG8aRoVD92tXDicP0TVS9ndlb6pHM=
Subject key identifier:   4C:29:14:0F:99:1D:D0:8E:8A:DB:0E:9C:C6:95:46:DC:98:DF:78:2B
Authority key identifier: B5:19:BB:60:7E:8E:B7:6E:BB:9C:CB:20:22:CC:64:6C:3C:CE:0B:60
Certificate issuer:       /CN=b519bb607e8eb76ebb9ccb2022cc646c3cce0b60
Certificate serial:       0193568A9E236C072EC8FCA23FB12E9A6256
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tRm7YH6Ot267nMsgIsxkbDzOC2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft
Manifest number:          136D
Signing time:             Sat 23 Nov 2024 01:02:25 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:25 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:25 +0000
Files and hashes:         1: tRm7YH6Ot267nMsgIsxkbDzOC2A.crl (hash: Vj/k25q65FbfdR4TMoeUfC7a5eeABMpjwLDf+fA2gog=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tRm7YH6Ot267nMsgIsxkbDzOC2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:9e:23:6c:07:2e:c8:fc:a2:3f:b1:2e:9a:62:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b519bb607e8eb76ebb9ccb2022cc646c3cce0b60
        Validity
            Not Before: Nov 23 01:02:25 2024 GMT
            Not After : Nov 24 01:02:25 2024 GMT
        Subject: CN=4c29140f991dd08e8adb0e9cc69546dc98df782b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9b:f8:0f:29:67:23:45:bc:3e:4a:f4:4a:01:
                    f9:7d:d6:fe:bd:1d:2c:d4:29:a4:8e:c4:b7:c7:62:
                    22:ad:b5:f2:95:7a:0c:33:43:25:d2:ed:67:c6:63:
                    39:37:05:54:26:b8:a9:d1:e3:67:48:19:b7:35:8b:
                    0c:8d:2e:c0:0e:00:47:3f:24:69:1c:c5:44:b3:fb:
                    33:2a:99:26:83:f8:1e:f2:0d:64:26:ba:0f:03:e1:
                    e4:6c:93:7a:5a:2e:1f:4b:9c:2b:34:d6:0f:a9:fd:
                    c0:a3:10:14:d8:92:ef:28:5c:ed:6a:7b:a5:cc:b8:
                    47:b2:ab:9b:a4:44:a6:ae:d2:35:fe:db:55:e1:ee:
                    3b:5c:00:4b:70:97:6b:37:f5:a3:87:10:2c:f2:c7:
                    c8:85:de:df:67:0d:b2:9b:df:b6:e5:b4:ad:f7:14:
                    81:27:cc:a0:db:ac:f0:65:e6:28:74:50:d0:d1:69:
                    50:44:7d:6f:78:8c:b8:08:4c:96:bd:ab:63:c4:1c:
                    a8:84:d5:a1:cb:21:3b:47:d8:53:01:52:1b:42:a7:
                    65:8a:13:04:d2:2b:7a:ad:ef:e5:a4:e0:8f:b8:00:
                    bc:27:5d:b5:d3:62:e3:fa:a0:93:21:05:cb:21:49:
                    8d:ee:1d:50:eb:98:14:4a:c4:2a:62:32:61:38:71:
                    a2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:29:14:0F:99:1D:D0:8E:8A:DB:0E:9C:C6:95:46:DC:98:DF:78:2B
            X509v3 Authority Key Identifier:
                keyid:B5:19:BB:60:7E:8E:B7:6E:BB:9C:CB:20:22:CC:64:6C:3C:CE:0B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRm7YH6Ot267nMsgIsxkbDzOC2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:31:4c:f3:55:6b:27:a6:9e:ac:ab:81:d0:a2:c4:dd:e2:66:
         76:ec:ec:ac:27:19:0d:ff:ba:0a:d9:a2:7a:b3:21:75:cf:56:
         f0:4d:0c:1f:08:e0:b6:23:9c:1c:b7:d1:c5:b8:02:9c:f5:a4:
         86:36:49:26:0d:d0:d7:00:53:48:3c:ce:64:7d:26:fb:26:c9:
         3e:77:ab:34:ba:73:de:4e:56:db:28:64:27:5d:cb:28:81:9b:
         c7:ab:d9:2a:da:40:2e:2e:c2:c1:41:3d:43:ec:84:67:09:7c:
         59:9a:13:7e:6b:b7:6d:8c:5d:1d:43:3a:35:be:3e:fd:5a:21:
         4c:1d:14:94:04:2c:95:d8:97:9f:c5:b2:1c:1d:47:e0:9a:dc:
         ea:6f:9e:9b:19:33:be:58:31:9a:fe:43:ee:99:b6:c9:3d:35:
         e8:17:f0:b8:da:d2:5f:60:59:2d:2f:39:44:af:b2:56:a9:f5:
         f6:17:eb:9b:ef:ae:80:44:33:8c:ee:7a:93:1e:e4:af:48:e5:
         2d:de:ab:bf:48:81:60:de:5f:81:35:40:00:59:90:69:5c:a2:
         95:ec:db:fe:2d:0c:ec:31:0f:1a:1a:8c:59:ed:5e:3f:58:d4:
         70:86:92:32:bc:36:a8:09:a3:36:f5:f7:98:b4:6c:4b:d6:4f:
         58:60:80:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----