Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
File:                     8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft (raw, json)
Hash identifier:          J7uzOVSdjaq+zMGJ3XhnVIcD4ze4QSWmTZUjEuLaXEs=
Subject key identifier:   60:49:86:ED:7A:6D:6B:EC:74:49:FF:10:C3:5A:09:90:A5:F8:06:12
Authority key identifier: F2:BF:FA:27:42:56:32:65:03:70:29:A7:8F:93:17:33:90:53:00:9C
Certificate issuer:       /CN=f2bffa2742563265037029a78f9317339053009c
Certificate serial:       01940721890716503C6D829ABCB99434D747
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
Manifest number:          03AD
Signing time:             Fri 27 Dec 2024 08:00:25 +0000
Manifest this update:     Fri 27 Dec 2024 08:00:25 +0000
Manifest next update:     Sat 28 Dec 2024 08:00:25 +0000
Files and hashes:         1: 8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl (hash: Ah6bL+YOpsEvT2Nl700c/ZB3cXumqGQzJwEhaLfKTR0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:21:89:07:16:50:3c:6d:82:9a:bc:b9:94:34:d7:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2bffa2742563265037029a78f9317339053009c
        Validity
            Not Before: Dec 27 08:00:25 2024 GMT
            Not After : Dec 28 08:00:25 2024 GMT
        Subject: CN=604986ed7a6d6bec7449ff10c35a0990a5f80612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d5:79:d5:2d:ab:5b:64:ec:a5:4f:53:c8:cb:
                    c4:0c:01:dd:fb:e7:0c:a8:72:80:c9:1a:75:85:e8:
                    1b:71:97:54:1b:45:5f:ea:08:99:f4:d6:99:7a:a9:
                    7c:a6:e6:40:ba:97:b4:47:47:46:03:e1:d3:6c:d9:
                    71:23:56:18:4e:c2:64:c4:3f:d0:29:07:82:37:0a:
                    52:e9:e0:8d:62:c9:74:ab:a5:f0:49:58:05:ae:f4:
                    2d:70:cb:c5:32:68:66:e6:b3:c0:df:9d:c0:9f:42:
                    dc:b8:30:5d:12:f5:90:44:21:1e:da:7e:17:97:82:
                    61:0a:b5:af:9c:ff:02:01:b5:2e:6d:ec:67:19:9f:
                    fc:43:e2:c4:30:26:04:9e:b6:51:60:31:9b:80:a1:
                    8f:df:81:65:88:90:ae:e2:30:5f:66:44:6d:f4:ac:
                    ed:d6:64:05:0a:cf:83:20:92:1f:25:d3:0e:0e:3f:
                    d7:48:b3:fc:93:af:7b:57:dc:44:c3:95:4a:00:6d:
                    af:35:f2:65:e1:e8:50:38:66:b3:dc:f8:e0:12:1f:
                    67:35:01:76:79:61:1a:5c:c5:36:16:47:2a:67:c8:
                    3e:0a:bf:dd:3e:40:68:c5:3d:ea:43:2b:25:d0:fd:
                    03:8a:9c:de:64:9e:0b:01:a2:63:6f:20:9f:19:44:
                    59:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:49:86:ED:7A:6D:6B:EC:74:49:FF:10:C3:5A:09:90:A5:F8:06:12
            X509v3 Authority Key Identifier:
                keyid:F2:BF:FA:27:42:56:32:65:03:70:29:A7:8F:93:17:33:90:53:00:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:54:cd:d0:d5:f7:0d:e7:8a:91:d4:61:4d:02:7e:72:d2:96:
         ab:ed:dd:eb:cc:10:65:25:db:b8:41:67:70:c3:07:e9:e1:d1:
         94:ee:5a:cb:5a:97:ae:df:6b:5e:fb:25:2e:48:77:88:69:5d:
         98:d1:70:8c:e8:5e:fb:ce:99:79:0d:62:92:5e:aa:6b:33:ec:
         d0:00:48:a9:11:06:8f:51:2b:b4:c3:d0:c8:68:fd:5e:68:a0:
         c6:9a:e1:3d:69:12:06:58:72:81:66:6f:e8:4f:8e:31:54:73:
         1a:a1:68:b4:08:03:7a:04:a7:18:99:96:1f:2c:b3:71:c3:92:
         5e:d2:8b:b9:da:fe:90:6e:03:88:cd:90:d6:46:ff:cb:a8:cd:
         69:97:be:96:ed:9d:55:b0:a3:3c:81:8a:a6:83:64:2e:d8:84:
         1f:b4:a0:b8:cf:f9:71:2c:8e:72:9d:22:64:64:36:e8:16:4b:
         1e:90:75:34:d5:ea:3b:be:b6:1f:88:7c:29:c4:10:e0:5c:d2:
         c4:d6:90:6d:64:22:1d:98:f5:8a:20:c4:1d:66:94:2b:1d:d7:
         66:d8:a2:b9:20:b7:62:7d:73:c4:9b:71:9c:4c:fc:40:98:b7:
         49:a1:03:cb:a9:dd:42:52:6d:d7:22:97:88:e3:63:92:e0:f8:
         11:3a:fb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----