Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/764671-69a4-4749-ad34-6148e454c730/1/hr9faTt_Ts8TYEaBZIqmj9rKb38.mft
File:                     hr9faTt_Ts8TYEaBZIqmj9rKb38.mft (raw, json)
Hash identifier:          VrslmQXw8+fUgw4/KSZ3sbW5MQV2cmhJv3nleK6sDy8=
Subject key identifier:   10:B9:4A:CF:11:27:8C:19:BF:E0:55:3D:59:6E:6E:6E:01:B0:E2:69
Authority key identifier: 86:BF:5F:69:3B:7F:4E:CF:13:60:46:81:64:8A:A6:8F:DA:CA:6F:7F
Certificate issuer:       /CN=86bf5f693b7f4ecf13604681648aa68fdaca6f7f
Certificate serial:       019369DA3528FAA393AFDD1E21BC85222424
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hr9faTt_Ts8TYEaBZIqmj9rKb38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/764671-69a4-4749-ad34-6148e454c730/1/hr9faTt_Ts8TYEaBZIqmj9rKb38.mft
Manifest number:          09A7
Signing time:             Tue 26 Nov 2024 19:02:08 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:08 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:08 +0000
Files and hashes:         1: hr9faTt_Ts8TYEaBZIqmj9rKb38.crl (hash: DxrYierlfK1QXi1ql6wWxYG2k7f0kccpKCEfTW6Z/eY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/764671-69a4-4749-ad34-6148e454c730/1/hr9faTt_Ts8TYEaBZIqmj9rKb38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/764671-69a4-4749-ad34-6148e454c730/1/hr9faTt_Ts8TYEaBZIqmj9rKb38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hr9faTt_Ts8TYEaBZIqmj9rKb38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:35:28:fa:a3:93:af:dd:1e:21:bc:85:22:24:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86bf5f693b7f4ecf13604681648aa68fdaca6f7f
        Validity
            Not Before: Nov 26 19:02:08 2024 GMT
            Not After : Nov 27 19:02:08 2024 GMT
        Subject: CN=10b94acf11278c19bfe0553d596e6e6e01b0e269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f4:47:08:21:40:41:35:6d:a1:6d:28:d7:17:
                    4f:8a:dc:2d:00:e4:e4:9e:fe:07:74:3a:51:14:ba:
                    81:ee:ef:64:c8:bd:5c:e9:8c:7a:c0:89:8a:c3:7c:
                    b2:c0:e0:3e:dd:b3:87:68:d0:3f:7c:67:74:91:98:
                    73:93:35:1b:cb:3e:c3:1d:f4:d2:1d:bd:c3:b3:1e:
                    7e:12:c0:54:fe:9b:d9:87:78:76:21:2f:78:4a:c2:
                    dc:33:31:fb:99:cf:4b:13:98:36:b4:15:db:f4:69:
                    6b:63:0f:51:ee:79:20:18:aa:54:00:26:3d:78:eb:
                    a1:bb:f6:a7:11:a9:bb:97:71:72:3b:b9:17:fb:0f:
                    54:9b:99:23:28:3b:77:17:3f:3d:32:f6:01:aa:2b:
                    a9:da:ea:a5:5b:9e:e6:8c:42:85:75:c1:ac:fe:14:
                    ed:3d:b8:a6:0c:c2:c9:3b:e2:5a:30:c4:90:56:3e:
                    fb:c4:5e:e6:7f:85:85:44:77:04:21:f8:b3:d6:92:
                    ad:04:ef:6d:13:20:1b:63:13:b3:6c:2f:a2:0a:9f:
                    65:68:c4:3e:b3:d1:ba:e1:d2:d6:9f:0d:e6:c4:49:
                    08:f1:d9:d0:90:d7:ab:e5:49:dc:8a:56:8f:db:4d:
                    57:d1:fa:63:d9:d1:71:1f:ec:a8:ca:5e:a2:69:09:
                    5b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B9:4A:CF:11:27:8C:19:BF:E0:55:3D:59:6E:6E:6E:01:B0:E2:69
            X509v3 Authority Key Identifier:
                keyid:86:BF:5F:69:3B:7F:4E:CF:13:60:46:81:64:8A:A6:8F:DA:CA:6F:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hr9faTt_Ts8TYEaBZIqmj9rKb38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/764671-69a4-4749-ad34-6148e454c730/1/hr9faTt_Ts8TYEaBZIqmj9rKb38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/764671-69a4-4749-ad34-6148e454c730/1/hr9faTt_Ts8TYEaBZIqmj9rKb38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:c0:c6:3f:7b:e1:1a:e0:7e:7c:51:17:a0:52:d7:60:ca:03:
         67:51:06:aa:eb:a7:5e:42:e0:2b:74:fc:52:89:57:ab:04:0b:
         b3:be:9b:80:43:35:d7:28:36:01:a4:44:4d:a8:5d:dd:99:a2:
         c2:4b:9e:ed:72:90:28:c2:26:8a:95:85:ac:27:1e:4f:3d:7b:
         27:78:a3:f0:e5:31:5c:63:5c:aa:0e:23:b9:cb:39:97:b6:92:
         10:6b:cd:8c:97:82:58:69:1a:1c:eb:59:83:96:5e:34:bd:f5:
         e6:58:59:d3:b0:de:8d:1c:26:bd:9e:d8:81:f8:58:19:1b:b1:
         a9:00:03:3c:bb:43:b1:f7:31:ce:c4:35:07:8e:86:60:d2:36:
         7f:b2:02:a1:62:1f:4a:0f:3a:58:d0:dd:70:76:8e:f6:f9:c3:
         b0:db:61:52:e8:9a:d7:d7:04:b6:0e:ab:a2:f1:39:4a:f4:3a:
         c4:42:2b:08:3a:a4:39:84:76:5c:74:0e:a3:64:c3:8a:c1:05:
         98:ab:6f:21:e5:e5:47:25:83:35:30:20:1e:a6:8a:e5:71:1b:
         93:b2:71:17:ea:72:b6:c3:0f:23:c5:c0:83:45:73:5b:86:f7:
         ee:28:c2:e6:fb:c3:68:20:eb:67:ee:41:6a:40:9a:01:70:bf:
         41:35:5a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----