Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
File:                     C86QcAXcPrBHC8PbRpCNoQkXuEo.mft (raw, json)
Hash identifier:          ltHDjYXXn/W5Iwa1J5rozRiGywh28MUQ9pKJJj/F3XA=
Subject key identifier:   18:10:50:9D:72:82:7F:4C:83:C9:3E:53:91:D1:A9:D7:60:77:11:19
Authority key identifier: 0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
Certificate issuer:       /CN=0bce907005dc3eb0470bc3db46908da10917b84a
Certificate serial:       019369DABC0AF09C379450B4726B3A1C61E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
Manifest number:          0D2A
Signing time:             Tue 26 Nov 2024 19:02:42 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:42 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:42 +0000
Files and hashes:         1: C86QcAXcPrBHC8PbRpCNoQkXuEo.crl (hash: pCW6ZGft/FmL+8vOvA/5kH3AUNFulgKl9w2VeWXuykk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:bc:0a:f0:9c:37:94:50:b4:72:6b:3a:1c:61:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bce907005dc3eb0470bc3db46908da10917b84a
        Validity
            Not Before: Nov 26 19:02:42 2024 GMT
            Not After : Nov 27 19:02:42 2024 GMT
        Subject: CN=1810509d72827f4c83c93e5391d1a9d760771119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fd:6f:3a:a8:5a:18:9a:b5:f7:a5:aa:51:2a:
                    3c:6c:69:04:49:1d:e0:04:d8:02:13:2c:42:46:2a:
                    b3:75:36:1d:14:36:55:df:32:cb:75:ba:ed:be:5b:
                    a8:33:b1:e4:99:91:92:aa:fe:66:62:2d:11:93:05:
                    20:8d:5b:39:25:fb:5f:05:32:79:5e:55:2a:7f:51:
                    07:7c:e0:52:e5:96:4c:9a:04:ee:c3:3c:30:bb:69:
                    a8:17:26:b2:9b:f3:9b:a4:41:be:e5:d0:b9:4c:38:
                    08:cf:4f:f6:cc:ad:d7:43:b9:05:d0:e5:a6:e4:d0:
                    0c:70:1f:5b:60:26:ad:44:e2:0e:e8:f1:3b:e4:db:
                    f8:9d:3b:45:31:ed:58:24:0b:75:73:7e:0b:92:01:
                    94:e4:ef:09:2a:fa:92:11:78:b4:46:cc:e6:9c:36:
                    a2:2f:9d:21:b0:45:24:f0:66:25:a2:56:d5:13:da:
                    85:a4:d0:3a:84:e8:0e:87:c2:92:57:9a:ab:02:05:
                    a1:21:d8:31:51:1c:a1:5b:bd:83:ba:74:18:af:9f:
                    39:fd:59:3e:c1:3e:36:3b:31:21:bf:91:95:a3:5a:
                    3d:08:ee:4a:ac:fb:bb:ff:9d:81:41:c5:8d:5d:eb:
                    47:37:20:c5:d3:cb:90:73:30:a1:1e:4d:94:f9:a2:
                    2b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:10:50:9D:72:82:7F:4C:83:C9:3E:53:91:D1:A9:D7:60:77:11:19
            X509v3 Authority Key Identifier:
                keyid:0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:e2:43:de:0d:bf:69:84:11:c4:9c:24:de:40:c9:75:3b:25:
         89:02:4f:68:1e:86:07:7c:7a:93:e4:7c:a4:02:65:d7:1d:a1:
         f1:fa:04:e2:1a:e7:b1:bd:76:f2:d7:4c:6f:39:3a:3b:4d:ab:
         21:40:c4:ad:1b:f9:ba:ff:43:f9:05:a9:0b:a9:36:27:8f:2e:
         5a:67:ce:e0:31:92:c4:1d:00:59:88:b7:0a:65:97:5e:3e:45:
         09:a0:8f:42:18:43:8b:ad:d1:6f:5d:a4:a7:48:47:01:6d:d3:
         a2:4b:77:7d:6c:06:6e:e8:27:7f:f3:8b:b7:e2:14:7e:6e:9c:
         59:ea:0f:84:22:30:4f:6c:8e:e8:a0:c5:3c:65:25:01:2b:e2:
         7d:25:2a:05:24:63:f9:37:c7:5b:02:16:39:81:9e:59:cd:51:
         21:46:51:6c:78:23:52:96:91:32:f5:ba:2b:df:5e:2d:75:46:
         aa:2d:67:bc:41:d6:d6:2d:36:ca:11:e2:d0:16:be:e4:bd:66:
         65:97:09:24:7b:a5:97:bb:d9:f5:83:6f:24:7f:99:0d:c2:30:
         49:8c:e9:36:94:be:c6:09:55:8a:ce:1b:00:83:87:f8:c8:b3:
         18:eb:2a:6f:1c:80:7b:8f:f0:e0:16:82:4c:3f:10:d5:07:a2:
         f8:ed:de:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----