Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
File:                     b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft (raw, json)
Hash identifier:          Y9MwW3LBJP3xr+EZDU8tN/YReTKa7hMav9k6hpGnWe4=
Subject key identifier:   70:EA:0C:0A:A6:F6:48:2D:A5:57:DB:15:A7:F1:54:51:46:84:8A:77
Authority key identifier: 6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
Certificate issuer:       /CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Certificate serial:       019355083DE89C2C678997A69E50D2BDF054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
Manifest number:          136C
Signing time:             Fri 22 Nov 2024 18:00:23 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:23 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:23 +0000
Files and hashes:         1: b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl (hash: KaeEZ0iDBglRUCQsacm213cTYGAK120Vsjhfb5rSIIs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:3d:e8:9c:2c:67:89:97:a6:9e:50:d2:bd:f0:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
        Validity
            Not Before: Nov 22 18:00:23 2024 GMT
            Not After : Nov 23 18:00:23 2024 GMT
        Subject: CN=70ea0c0aa6f6482da557db15a7f1545146848a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:88:f9:66:57:78:07:6d:f8:b5:82:4f:38:03:
                    15:f7:ca:25:af:d2:b2:04:ab:8d:00:b0:a6:3c:00:
                    50:be:fb:68:44:d7:32:1a:f4:41:22:d1:b4:ba:f5:
                    7a:92:c6:ce:d2:b0:3b:c1:b9:9b:ef:16:72:fd:c7:
                    53:83:62:87:d6:ce:3d:a3:81:fb:5c:7e:6d:0e:f6:
                    70:60:66:33:a3:10:b7:e8:e3:b3:7f:bd:e6:de:91:
                    55:59:de:3d:ff:b6:ed:af:1c:95:e8:33:44:0d:20:
                    42:1e:d0:6d:11:c8:01:98:8e:45:93:93:8c:c1:eb:
                    dc:fa:16:fb:e3:11:82:a1:7b:ea:ec:ff:19:af:92:
                    12:68:b1:f9:96:af:04:79:d9:49:8e:ed:be:07:3a:
                    c9:06:79:1a:a6:a1:df:ab:2c:c8:90:77:39:88:fb:
                    ee:02:36:2c:cd:a7:9a:8f:b4:f2:81:35:56:91:f3:
                    2b:9f:33:8e:fa:8c:7f:df:6a:19:b9:43:8e:d7:f8:
                    1c:81:9f:fe:4e:25:11:40:f7:d5:ca:a9:93:1b:b8:
                    4c:0b:8f:3e:32:4d:e6:69:c7:52:d9:04:0c:56:08:
                    37:01:72:56:b4:bc:7c:69:46:10:ff:bb:7c:c8:0c:
                    dc:27:1e:5b:da:92:1a:37:e5:08:2a:87:9c:50:41:
                    59:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EA:0C:0A:A6:F6:48:2D:A5:57:DB:15:A7:F1:54:51:46:84:8A:77
            X509v3 Authority Key Identifier:
                keyid:6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e9:7c:b1:9b:f8:98:99:7c:93:88:39:09:f5:8f:ae:66:cd:
         f6:ab:8c:28:dc:6c:85:54:87:03:f5:ca:ae:52:fc:20:a7:e6:
         45:13:0c:34:ec:d4:a8:26:b8:01:93:e3:a8:c9:fe:88:8a:e8:
         65:b0:03:cd:29:59:cb:88:d2:f1:3d:9a:99:b6:54:ab:e4:b0:
         30:49:49:a8:43:dd:65:06:99:fd:ef:29:a7:b0:ce:be:7f:93:
         1e:80:3b:80:28:78:3c:07:b8:39:2c:21:34:cd:f3:68:25:e8:
         fb:d1:38:1e:46:f3:7e:99:34:38:e2:42:a8:9f:0b:68:91:ae:
         af:91:d6:ab:79:1e:bd:8f:2a:3b:65:ce:9c:5e:13:b0:fd:52:
         05:76:e5:a2:ee:95:2b:85:e2:a9:4d:e1:18:2d:7c:0e:07:c5:
         3c:04:b1:dc:47:98:62:5f:bd:c9:fc:46:36:a9:56:7a:ef:01:
         58:87:d3:da:6a:45:f8:17:c1:a6:18:d5:c4:66:b7:c9:13:1f:
         72:e6:db:79:51:e4:a7:1d:37:13:03:2f:e4:62:68:a7:9c:a7:
         88:6c:21:d0:19:d1:06:38:49:35:ce:14:36:23:7e:3b:6d:39:
         6b:92:5c:4e:3e:1b:4c:15:03:d0:5a:66:f6:38:3e:a6:a1:a6:
         e6:c1:de:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----