Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
File:                     ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft (raw, json)
Hash identifier:          zFCFIWXXZkpsTM416PzwLbn/D3+MwsF8j3+8TfJlAdo=
Subject key identifier:   F3:BE:02:02:C0:D3:59:E6:6D:A3:B8:66:E9:69:F8:8F:C5:23:D1:AE
Authority key identifier: BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8
Certificate issuer:       /CN=ba58275572434893b9cbd14e4ade708929e467f8
Certificate serial:       019369D8CCC844A45D8E6C5536174BE102E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
Manifest number:          0F56
Signing time:             Tue 26 Nov 2024 19:00:36 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:36 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:36 +0000
Files and hashes:         1: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl (hash: Vlm3M/GGdWbJ71IlZdgl/tbT7Z/dVGftA2wA5FAzNOg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:cc:c8:44:a4:5d:8e:6c:55:36:17:4b:e1:02:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba58275572434893b9cbd14e4ade708929e467f8
        Validity
            Not Before: Nov 26 19:00:36 2024 GMT
            Not After : Nov 27 19:00:36 2024 GMT
        Subject: CN=f3be0202c0d359e66da3b866e969f88fc523d1ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:58:8b:e8:a8:cd:b1:c0:07:37:71:1e:90:1b:
                    4d:e6:42:bb:b8:15:cb:3e:01:69:e5:1e:6a:33:aa:
                    f6:96:ac:16:4a:d7:ca:37:b9:d4:9e:b6:7e:cc:1f:
                    98:f5:1e:a9:7e:27:28:9b:c7:5e:fa:2f:30:08:81:
                    af:06:02:4c:86:28:37:8c:7f:86:db:d6:ec:0a:31:
                    7b:b2:18:a5:70:6f:f2:b6:7c:eb:c5:9e:dc:58:ad:
                    9e:e5:de:3c:58:c4:cd:2f:ca:d1:fc:6b:1a:a1:2a:
                    5d:c0:90:d9:c3:ee:fa:3d:30:b4:e0:ab:d1:8d:fc:
                    d7:2f:06:e8:25:f9:ef:4f:c9:23:b6:c7:10:23:8a:
                    73:5a:d0:45:2f:f4:9c:39:fd:cc:fc:f6:e3:86:49:
                    e3:f2:2a:12:9d:4d:e0:a4:b0:d6:d0:02:a5:62:3f:
                    82:f9:eb:91:69:1a:27:ed:4a:db:d8:29:97:72:6e:
                    d0:23:a3:9c:68:cc:e7:31:ac:f2:41:7a:1e:43:03:
                    1d:52:75:aa:cf:0b:4d:5a:fb:07:ed:97:80:d3:b8:
                    1e:34:19:73:a6:5c:a8:a4:89:3f:0a:7d:20:fb:02:
                    86:5d:dc:40:6c:25:de:c5:48:7a:0a:30:27:e7:1e:
                    40:cb:9a:98:59:40:2c:96:29:6a:bc:66:83:89:63:
                    3a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BE:02:02:C0:D3:59:E6:6D:A3:B8:66:E9:69:F8:8F:C5:23:D1:AE
            X509v3 Authority Key Identifier:
                keyid:BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f7:f1:79:be:37:84:c3:a2:7d:8d:2a:01:95:90:bb:a6:61:
         78:64:fd:39:31:d1:11:f8:33:7c:91:48:69:f4:71:de:42:47:
         69:67:b8:8a:6f:b3:f6:bb:9d:36:e1:2a:ac:0a:ec:5c:5d:73:
         f3:91:00:40:6e:84:9d:ed:5a:06:e2:b5:15:08:c0:70:50:32:
         2d:23:5b:0e:0e:6e:f1:25:f9:87:a7:33:23:0b:b6:8f:8a:87:
         18:e7:89:58:53:99:33:69:89:12:57:65:bc:b8:7c:e7:0e:f3:
         18:99:8e:e4:cc:b4:83:4b:07:db:fc:75:3d:df:cd:24:6e:f1:
         08:3e:a4:7f:38:18:15:83:7a:a4:16:b2:4e:c3:fc:7d:ca:f7:
         57:bc:a6:8d:ba:9e:fd:c4:cc:85:86:e8:c8:87:79:9b:de:b1:
         4a:11:53:5a:eb:37:7e:f5:8c:69:99:94:26:37:de:8f:dd:6d:
         95:3f:1e:6c:6d:64:f4:15:f9:52:2e:49:23:6a:6d:c5:6f:cd:
         10:b9:7d:1d:54:25:c2:ec:86:68:96:4b:ad:44:5e:cd:16:b9:
         d0:29:b7:ef:8d:d1:c0:ff:6d:fa:c8:bc:02:b2:31:53:da:52:
         90:d0:3b:89:b6:1b:f9:a3:76:0a:a4:90:e2:64:ec:aa:5a:4c:
         c8:43:d1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----