Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
File:                     1uDRyowZYcCxEoqlW4V5axIECpU.mft (raw, json)
Hash identifier:          fgPfMci12ExdVZzkF54o8RD1EpFg15HIxfhOBDMOTrA=
Subject key identifier:   2B:F7:41:06:79:35:13:D4:1F:5A:FC:95:C0:8D:A9:6E:FE:97:7D:E1
Authority key identifier: D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95
Certificate issuer:       /CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
Certificate serial:       019369DA8557520ECFA7E72EEFE1FCB5AF0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
Manifest number:          0886
Signing time:             Tue 26 Nov 2024 19:02:28 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:28 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:28 +0000
Files and hashes:         1: 1uDRyowZYcCxEoqlW4V5axIECpU.crl (hash: 927tBg9MJnmayTzPLdd0Ujk9ZynBcIe1K9fdD23iw4g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:85:57:52:0e:cf:a7:e7:2e:ef:e1:fc:b5:af:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
        Validity
            Not Before: Nov 26 19:02:28 2024 GMT
            Not After : Nov 27 19:02:28 2024 GMT
        Subject: CN=2bf74106793513d41f5afc95c08da96efe977de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d1:88:4b:cc:b0:a6:fe:c6:4b:4a:bd:db:77:
                    8a:62:d7:9b:a9:b9:9c:cb:8d:3e:67:ac:3e:90:4f:
                    81:d2:80:b9:4a:d7:20:05:d4:47:91:a2:9a:8f:ce:
                    f8:c2:93:11:b4:45:2e:5b:7b:f1:34:f2:13:67:56:
                    f4:3c:8d:18:b6:22:1a:20:03:49:68:af:dd:82:e0:
                    2a:60:60:95:fe:95:4e:c5:1d:0d:43:f8:ac:23:86:
                    9f:a4:94:05:cb:7b:4b:a4:ca:df:88:fe:44:71:80:
                    17:48:ac:af:c2:27:33:34:ba:ef:d6:d3:ec:a5:59:
                    e6:68:48:a4:46:ca:60:6d:5c:76:c7:3c:cd:b4:ee:
                    d4:22:9e:97:4f:39:0a:f6:6d:44:4f:14:89:ba:90:
                    40:f9:4f:43:3f:3d:84:48:15:cf:27:5b:13:2a:ef:
                    87:1c:2d:83:c6:3a:01:e6:bf:d7:c6:4c:db:e5:d5:
                    9f:54:22:f8:95:40:1c:69:4d:55:64:2e:34:5c:c7:
                    f2:34:ab:db:87:f8:69:b6:a9:d0:9c:9c:0f:28:30:
                    82:6a:b9:23:b6:81:5f:48:43:40:b5:d7:d1:1b:a2:
                    c3:52:98:7d:4c:01:a7:86:2c:22:40:12:2a:e3:db:
                    28:f8:99:98:a0:63:73:ee:ae:c8:06:91:2c:97:e7:
                    60:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F7:41:06:79:35:13:D4:1F:5A:FC:95:C0:8D:A9:6E:FE:97:7D:E1
            X509v3 Authority Key Identifier:
                keyid:D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:36:83:df:e8:ed:10:86:1c:7e:27:29:71:cf:b7:d0:8d:fb:
         b3:c9:28:7e:7a:a8:a5:ec:a1:78:31:5f:09:cb:c6:30:20:e6:
         09:60:ae:3c:de:f5:e2:bc:32:ea:b9:f3:ae:2d:7d:20:57:41:
         0b:c4:85:d1:cd:af:a3:6c:a6:d5:14:40:e3:e8:7a:f6:f4:f9:
         d4:28:43:87:45:c2:14:8a:9a:9e:b1:98:e3:bf:ef:ec:f3:81:
         db:63:ed:3b:61:6d:76:6f:9e:84:52:3e:63:d3:19:0e:4a:9d:
         0d:54:06:41:a2:81:54:42:c7:2d:cc:03:2c:8d:e7:98:b4:c4:
         74:3b:c1:2c:22:06:ff:16:72:1d:6b:7b:e8:8e:f0:6d:f8:19:
         4f:38:e9:f1:05:82:c1:9f:6b:2e:63:46:2c:b6:ad:35:fc:4c:
         e4:e3:38:74:0d:c6:3b:f0:90:a7:90:40:60:58:7c:2f:74:67:
         6d:d1:cf:cb:74:9f:64:b9:e7:f9:c7:ae:bb:bb:09:6e:26:48:
         5a:d9:b1:a4:1f:98:86:43:08:dc:0a:0b:c4:64:3d:28:1f:21:
         c0:52:de:70:2d:b0:00:82:ca:ea:0d:66:4d:2c:4f:02:5c:f6:
         6b:a2:47:5e:fc:38:b1:ba:ca:a4:30:20:6b:aa:11:15:95:a9:
         3e:36:a1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----