Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
File:                     SIkYymYYDe4Hm69FBT5M61dikr0.mft (raw, json)
Hash identifier:          VWaZ3ghqcTvWhyVJDHr9jkPihq5sRd96wXkICBlpVO0=
Subject key identifier:   AE:28:1B:C8:BB:68:DD:AB:A0:C5:92:E0:43:07:D4:73:FE:24:9E:7C
Authority key identifier: 48:89:18:CA:66:18:0D:EE:07:9B:AF:45:05:3E:4C:EB:57:62:92:BD
Certificate issuer:       /CN=488918ca66180dee079baf45053e4ceb576292bd
Certificate serial:       0193568AE5F632F08C79C06FA78FACAA3A00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
Manifest number:          1301
Signing time:             Sat 23 Nov 2024 01:02:43 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:43 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:43 +0000
Files and hashes:         1: SIkYymYYDe4Hm69FBT5M61dikr0.crl (hash: lSg36vsdLVdBPttCJQXVkYvJBUd3n8fsaXHRpBPNXEo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:e5:f6:32:f0:8c:79:c0:6f:a7:8f:ac:aa:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488918ca66180dee079baf45053e4ceb576292bd
        Validity
            Not Before: Nov 23 01:02:43 2024 GMT
            Not After : Nov 24 01:02:43 2024 GMT
        Subject: CN=ae281bc8bb68ddaba0c592e04307d473fe249e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fa:a5:08:b4:8b:4e:6e:d8:0a:ee:6f:db:3a:
                    0f:0e:59:11:ee:c5:fa:af:87:fc:69:67:7c:b6:86:
                    16:44:98:1c:a5:39:4e:7d:f4:a4:db:ea:fb:6f:9f:
                    9d:b7:9e:e8:ef:7b:5a:3b:b0:36:32:38:b8:0e:06:
                    48:7f:21:0e:c6:46:70:b3:f7:f3:63:df:14:66:f0:
                    90:82:61:f1:e5:30:7a:fe:de:ca:8d:d1:e9:95:3c:
                    a5:a6:f9:42:19:d0:cc:f1:32:b1:a1:23:96:51:22:
                    20:2a:60:e6:7e:6a:d2:de:8d:b3:d6:48:b5:60:15:
                    f7:67:39:48:16:0c:0a:fd:82:5d:a2:26:2b:32:f3:
                    81:05:35:78:75:08:4e:e2:e7:a6:c1:55:b4:49:fe:
                    2c:96:c4:d5:80:45:54:07:b6:00:4c:83:b6:e0:aa:
                    04:74:df:a1:55:3e:34:c9:09:9d:b3:2f:e4:11:c0:
                    2e:e7:7a:e5:e2:f7:a2:6f:a8:3e:12:59:23:c9:ba:
                    02:cc:78:69:12:82:01:82:8f:f5:58:31:e9:60:05:
                    59:de:a0:0c:b0:2a:5a:18:4b:8d:a0:c5:a4:84:14:
                    ad:73:ae:ab:26:2d:a8:ae:1e:dd:22:4a:71:06:25:
                    3d:9d:9b:8f:30:be:42:36:bd:75:16:1b:e8:ff:42:
                    6e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:28:1B:C8:BB:68:DD:AB:A0:C5:92:E0:43:07:D4:73:FE:24:9E:7C
            X509v3 Authority Key Identifier:
                keyid:48:89:18:CA:66:18:0D:EE:07:9B:AF:45:05:3E:4C:EB:57:62:92:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d6:ad:fc:cc:ed:c4:60:ac:28:57:a3:bd:fa:0e:12:fc:63:
         00:24:5f:1f:21:9c:97:eb:fa:4b:fb:af:c3:8c:43:2c:d5:38:
         b0:d5:66:db:1b:a4:ae:43:ac:5a:e6:91:e4:cc:90:2f:45:16:
         d4:9e:d9:85:06:68:d8:06:72:7a:ab:1a:e4:9f:a7:69:16:db:
         e6:1b:5b:ac:f6:15:88:95:3a:67:78:1d:ef:f0:9b:c2:cc:ae:
         09:2b:85:43:93:f1:50:43:17:51:c7:42:1c:07:15:00:84:e1:
         51:71:1f:39:b2:9f:80:8b:dd:b5:c2:ee:ab:0c:3a:3a:6e:87:
         8c:66:ac:9e:71:f4:62:5c:ed:9d:d9:bc:0c:46:01:6a:dc:71:
         d2:6b:9f:97:a8:ba:44:90:c3:ca:7c:ad:c7:d3:ef:33:fd:45:
         3f:83:37:2c:c0:32:df:4e:63:56:91:6f:82:60:47:2e:b2:7f:
         07:dd:e2:fa:bc:bd:d2:27:4a:30:94:ee:8b:65:3c:3a:71:64:
         6f:4f:05:b8:29:bf:b7:fb:e4:d2:73:9d:ee:21:ef:98:04:0a:
         e9:46:5f:fb:a6:36:22:09:e1:41:92:25:dd:e1:37:b1:5d:46:
         c2:00:5a:1a:78:0e:be:df:be:9f:99:7f:e4:e0:1b:7c:8f:38:
         bb:78:a9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----