Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
File:                     jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft (raw, json)
Hash identifier:          4/5MQZ0ipWc4bHqzsAmGhNDmxw6ga3E+qPjF5V/2dUk=
Subject key identifier:   C3:CC:4E:BF:AD:5E:90:84:B1:74:8D:E9:BB:14:56:51:4C:2A:66:99
Authority key identifier: 8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE
Certificate issuer:       /CN=8c5002f639e81958d0f9b3585aed76707d2625de
Certificate serial:       019357D257451CEBCEEAD5B13E105E157140
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
Manifest number:          136D
Signing time:             Sat 23 Nov 2024 07:00:22 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:22 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:22 +0000
Files and hashes:         1: jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl (hash: Rspc7XaOOO/HJfdsQqyoDwo85hiilMG8C0GvmABtfNw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:57:45:1c:eb:ce:ea:d5:b1:3e:10:5e:15:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c5002f639e81958d0f9b3585aed76707d2625de
        Validity
            Not Before: Nov 23 07:00:22 2024 GMT
            Not After : Nov 24 07:00:22 2024 GMT
        Subject: CN=c3cc4ebfad5e9084b1748de9bb1456514c2a6699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:78:ea:9f:57:77:03:a0:e3:bc:89:aa:32:9b:
                    69:b0:6f:ed:0b:b2:f7:d5:1e:fb:06:9f:a5:0d:d5:
                    55:96:9b:a9:b6:d9:6c:3b:66:f4:36:1d:05:c9:3f:
                    3d:3e:48:d7:6b:3c:7e:8e:ef:ef:0e:3c:b9:be:e5:
                    67:d3:60:fa:15:96:c9:36:87:d7:ca:bc:f7:6d:75:
                    99:e2:b0:c7:48:89:28:2c:50:b0:da:38:8e:02:37:
                    84:4b:8e:a3:e7:01:61:0c:71:41:66:64:fb:8d:8d:
                    7b:b7:73:24:d8:f3:0e:65:d3:87:01:e4:57:cd:65:
                    e3:ec:9e:24:f4:96:57:c7:ab:23:27:1c:09:ec:25:
                    ba:ce:61:dd:41:44:5f:35:33:5a:c9:e3:28:e4:61:
                    e0:86:b6:b4:94:7b:47:81:0a:65:d9:a6:eb:e8:d9:
                    e1:a4:d6:bd:bd:51:d8:d2:e7:90:7d:0e:06:2f:ad:
                    ea:88:95:49:d5:29:1e:46:bd:ed:05:c8:8e:86:c9:
                    20:5b:e0:26:47:90:e9:07:8f:e4:d4:17:93:5b:cc:
                    43:64:13:8e:a3:54:d2:40:5c:3d:97:2d:46:94:61:
                    b9:c2:d0:5f:e8:08:70:0c:fc:17:ad:3e:c6:49:dd:
                    d9:0f:aa:80:a3:8e:49:3c:a7:da:74:a3:e9:1c:0c:
                    9c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CC:4E:BF:AD:5E:90:84:B1:74:8D:E9:BB:14:56:51:4C:2A:66:99
            X509v3 Authority Key Identifier:
                keyid:8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:d5:5c:1a:f8:9e:9d:6b:5e:ac:b9:74:24:4c:6d:9a:00:b9:
         63:47:53:de:31:6a:ce:f1:87:a4:45:4a:92:de:fa:c0:a7:21:
         b8:0f:c3:be:1a:54:47:eb:83:a5:ad:5b:98:ae:0c:80:71:6e:
         3f:7c:58:eb:9b:fc:4d:33:63:d6:fc:06:f2:c5:74:2c:f7:d1:
         63:f7:f6:ee:62:96:ef:db:b9:43:10:2e:d3:62:d7:50:d5:bb:
         f3:d3:1d:56:3b:e7:4b:8e:5b:48:6e:57:0f:12:07:95:29:10:
         85:eb:e7:cb:2c:fd:47:3c:e5:fa:0b:c8:8c:b0:ac:49:83:d7:
         54:5d:7e:e8:30:13:d9:d2:05:68:aa:18:f0:48:9a:3d:9a:29:
         7d:97:b6:82:20:cc:57:6d:ed:87:36:5c:32:cf:91:78:3b:d3:
         06:38:1a:7b:d5:e3:92:b9:e9:c9:73:5d:ad:97:a5:8a:60:2d:
         d7:ee:bd:df:14:1a:0c:51:71:7e:6a:62:a2:b6:0c:05:1d:02:
         b2:a6:02:6b:ed:50:50:64:06:a2:f4:09:c5:db:3f:be:1a:0c:
         81:1f:6a:14:d0:f2:6c:fc:51:fa:cf:27:1a:6c:a8:4d:75:41:
         c0:19:07:34:bb:79:4f:38:5b:52:62:16:f8:16:0a:5f:dd:8b:
         78:7f:a5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----