Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
File:                     n-JpKxvOewMnwf51yJKZ4vhiF_w.mft (raw, json)
Hash identifier:          p/IQN7ExtnVslMYyZe9OzZKNMeff3NZ2w84RTZD/VWQ=
Subject key identifier:   39:A1:82:81:49:7C:96:7A:A0:AF:70:C7:07:B5:AC:11:27:25:41:E5
Authority key identifier: 9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC
Certificate issuer:       /CN=9fe2692b1bce7b0327c1fe75c89299e2f86217fc
Certificate serial:       019356BFBC34E59022475CDE0162BBFBB8E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
Manifest number:          C1
Signing time:             Sat 23 Nov 2024 02:00:26 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:26 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:26 +0000
Files and hashes:         1: n-JpKxvOewMnwf51yJKZ4vhiF_w.crl (hash: haulmtzc5qz6evcgT1RKFU6/NBzxcdQ7CzIT/MBU6RA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:bc:34:e5:90:22:47:5c:de:01:62:bb:fb:b8:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fe2692b1bce7b0327c1fe75c89299e2f86217fc
        Validity
            Not Before: Nov 23 02:00:26 2024 GMT
            Not After : Nov 24 02:00:26 2024 GMT
        Subject: CN=39a18281497c967aa0af70c707b5ac11272541e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d9:e4:8e:24:6d:11:85:39:b9:ed:d9:9f:a3:
                    d0:4a:31:dd:98:04:dd:ad:43:5e:29:d8:75:3b:1b:
                    a2:5f:a2:29:85:45:a7:be:1c:7b:94:e3:25:a6:bc:
                    3c:d7:02:8f:94:17:87:b8:76:92:1c:22:72:f1:d8:
                    18:26:ff:ad:d8:26:21:14:ef:65:f2:6d:fc:ad:08:
                    76:3a:ef:64:5e:1d:34:73:13:54:7e:01:bb:87:d5:
                    a7:a5:90:86:e2:35:01:e2:88:96:24:59:7b:cd:0f:
                    4d:f9:3b:d9:ea:96:c3:3c:87:1b:e6:f9:ab:54:4c:
                    d6:ca:f5:9c:3e:7a:88:4c:e6:4a:07:e7:94:0c:7a:
                    6d:ed:33:19:c2:8d:a9:c6:7a:71:e0:d5:70:59:7a:
                    55:d0:0a:73:13:ed:37:f0:23:b1:01:74:8b:a3:73:
                    37:09:58:7d:ed:49:e4:e4:cb:18:d0:2f:00:d4:32:
                    17:58:0e:64:eb:ca:ba:30:c1:1f:03:c2:6a:b9:0c:
                    03:ac:fb:00:12:ef:91:65:95:62:9b:12:ff:17:0d:
                    15:ea:96:bb:cd:33:84:6e:32:26:b4:f8:c3:b6:d6:
                    98:ff:60:b3:5a:ef:7c:d8:8d:39:d2:ea:fc:05:e6:
                    b5:60:87:ea:6e:76:93:76:38:0b:c7:b1:b6:e6:f0:
                    a1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A1:82:81:49:7C:96:7A:A0:AF:70:C7:07:B5:AC:11:27:25:41:E5
            X509v3 Authority Key Identifier:
                keyid:9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ff:0d:9e:06:3e:d6:d5:b1:a5:28:98:1f:f6:3e:fb:30:1b:
         f5:a0:1e:18:3c:e4:96:3d:26:83:e6:3c:89:e9:18:c1:92:a1:
         2c:b1:d7:cb:16:64:62:64:8b:a6:dd:e5:19:12:6c:75:ea:f1:
         40:6c:53:6e:6b:f2:de:a3:96:4b:96:2f:9e:21:62:50:75:f5:
         67:29:c0:be:f2:9c:c4:35:ed:bb:15:8d:c8:15:89:f5:61:b9:
         aa:f7:43:23:92:96:56:5c:bd:3d:81:90:73:0d:84:77:4c:28:
         e0:fc:b5:39:4c:a1:d4:d7:d9:85:07:66:f1:da:9e:fe:db:04:
         37:65:26:01:e6:2d:5b:cb:c0:00:1f:a8:d8:71:bd:58:23:64:
         72:b0:25:17:40:39:ea:6f:af:19:aa:87:39:f8:ae:af:a9:fa:
         c0:03:0e:29:46:66:55:f3:c6:fe:c0:d0:5a:2a:fd:f7:d0:d3:
         4f:0e:a0:9f:d9:22:71:c1:be:04:64:2b:23:f3:e1:03:9e:14:
         6a:b9:7d:e9:99:ae:86:ea:c9:74:a6:d6:b7:d9:f1:1a:e4:e8:
         4e:8e:c7:98:dd:ec:b3:f8:8b:55:50:de:1c:87:61:b9:42:78:
         3e:fd:13:fa:53:6a:b1:04:d9:a4:37:99:86:18:ab:17:f8:76:
         ef:83:bc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----