Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/x8AThitsVvQ950jt8kqTGRudFhw.mft
File:                     x8AThitsVvQ950jt8kqTGRudFhw.mft (raw, json)
Hash identifier:          fregUpLFLi9KgdDtx8Qw/M6+jhg1YKBXbKeHa35BJn0=
Subject key identifier:   40:26:71:9D:8D:AA:67:66:6B:EE:D1:F6:9A:0C:BE:58:42:28:17:9C
Authority key identifier: C7:C0:13:86:2B:6C:56:F4:3D:E7:48:ED:F2:4A:93:19:1B:9D:16:1C
Certificate issuer:       /CN=c7c013862b6c56f43de748edf24a93191b9d161c
Certificate serial:       01936B5927EB339EFD096463DD9BEBEF7635
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x8AThitsVvQ950jt8kqTGRudFhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/x8AThitsVvQ950jt8kqTGRudFhw.mft
Manifest number:          014D
Signing time:             Wed 27 Nov 2024 02:00:25 +0000
Manifest this update:     Wed 27 Nov 2024 02:00:25 +0000
Manifest next update:     Thu 28 Nov 2024 02:00:25 +0000
Files and hashes:         1: x8AThitsVvQ950jt8kqTGRudFhw.crl (hash: 9IDSpJ2qmOl/PWsDtrL/uv8wXN3fXQIRMfaol3kAbAc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/x8AThitsVvQ950jt8kqTGRudFhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/x8AThitsVvQ950jt8kqTGRudFhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x8AThitsVvQ950jt8kqTGRudFhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:59:27:eb:33:9e:fd:09:64:63:dd:9b:eb:ef:76:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7c013862b6c56f43de748edf24a93191b9d161c
        Validity
            Not Before: Nov 27 02:00:25 2024 GMT
            Not After : Nov 28 02:00:25 2024 GMT
        Subject: CN=4026719d8daa67666beed1f69a0cbe584228179c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:86:0c:ef:4e:c9:7b:84:d2:92:0d:2a:e5:6d:
                    86:34:b4:ba:0d:11:51:86:d3:86:a5:d9:22:23:c9:
                    a0:cd:1e:c6:4f:ad:b5:32:1f:a0:e1:c1:81:c1:76:
                    9a:22:6f:f5:5d:63:a0:07:54:ad:1d:37:c3:86:e4:
                    9e:cb:04:25:8e:21:d9:25:a7:1d:fa:3a:32:53:36:
                    51:0e:2a:59:97:2a:ff:7d:46:2d:1f:cf:a5:a3:c0:
                    cb:a2:26:0a:3a:81:d0:fb:5b:dd:8d:0f:e9:5b:3c:
                    6f:96:2a:b4:37:ac:97:14:f8:be:3b:0b:45:e2:24:
                    74:8e:59:3f:d9:02:6c:4c:66:16:e5:4c:64:63:b5:
                    73:ba:dc:8e:49:9f:e1:e6:3a:9c:87:5f:b7:00:6f:
                    b3:33:58:aa:13:96:9e:4b:e7:25:c2:00:45:4d:da:
                    0a:2f:02:73:14:70:15:71:de:5d:93:98:0d:c6:35:
                    1b:85:5c:98:12:9d:c0:db:5a:1c:4e:9e:6f:05:55:
                    58:c0:13:48:71:3b:9a:4e:66:d6:1d:b7:50:04:1a:
                    cd:d4:49:26:df:c4:b6:0a:e3:2a:c8:8d:d7:4e:c6:
                    c7:d0:80:91:e5:88:bb:b1:52:cc:76:fc:48:e9:4d:
                    fc:98:79:fe:e2:92:a0:5d:d6:99:f9:2a:2d:9e:35:
                    b5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:26:71:9D:8D:AA:67:66:6B:EE:D1:F6:9A:0C:BE:58:42:28:17:9C
            X509v3 Authority Key Identifier:
                keyid:C7:C0:13:86:2B:6C:56:F4:3D:E7:48:ED:F2:4A:93:19:1B:9D:16:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8AThitsVvQ950jt8kqTGRudFhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/x8AThitsVvQ950jt8kqTGRudFhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/x8AThitsVvQ950jt8kqTGRudFhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:33:7e:30:d3:42:5e:17:9b:a2:79:92:15:23:18:76:85:6c:
         2d:42:01:d2:5b:96:59:36:c4:9d:a2:9c:5e:99:f0:80:43:cf:
         36:9c:87:e3:37:2f:27:14:a0:3e:c2:7d:9b:e8:13:7d:21:fe:
         2d:63:8d:25:db:36:6c:04:3f:12:94:94:d6:19:2b:e7:b3:5e:
         af:cd:ce:93:ca:8e:d8:eb:e6:e0:c6:c8:95:95:04:ff:c9:dc:
         07:01:b7:d7:bf:c0:40:be:2f:11:d1:f3:4e:43:0e:7e:f5:1b:
         7d:11:fe:b0:3c:d8:2e:f5:f8:c8:64:d9:57:4f:76:7c:51:fd:
         dd:e3:02:f1:e7:74:9b:b4:fa:f1:68:96:2d:02:7a:f6:2a:70:
         11:39:8e:86:88:70:c4:00:bc:3f:86:e4:7f:78:5e:6a:05:eb:
         c2:51:1e:b2:0c:c3:11:16:c2:88:fe:b7:cb:04:29:c5:a6:b4:
         c4:5e:58:3c:cc:3d:9d:4c:70:0a:fd:ed:37:89:39:36:09:00:
         7d:1e:c8:e3:41:be:3b:77:62:f6:6a:b9:09:cc:4d:91:06:34:
         01:38:63:91:e1:f7:e9:56:9c:2e:bf:0d:eb:fd:bb:ff:5b:78:
         16:d4:eb:02:39:98:50:d2:5c:ce:c8:1e:5f:55:0e:f3:8d:1f:
         bf:86:6a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----