Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
File:                     uocjZRyrzwAJzygaKlHFtOkFYi8.mft (raw, json)
Hash identifier:          eKNYhz7gFv+ztacCWZgFk2nT9/VSjjfGTmQ/h4Yx5Fc=
Subject key identifier:   13:7F:65:DE:B9:2A:6A:68:07:9E:C8:E9:C5:AD:20:74:C2:C0:30:FD
Authority key identifier: BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
Certificate issuer:       /CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Certificate serial:       019357647866505B6F16075A42A27D058209
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 05:00:22 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:22 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:22 +0000
Files and hashes:         1: uocjZRyrzwAJzygaKlHFtOkFYi8.crl (hash: Jf4IhpkvBN0LT2F7hhOmTH6/AIW9la/2HxPB8B2QQog=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:78:66:50:5b:6f:16:07:5a:42:a2:7d:05:82:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
        Validity
            Not Before: Nov 23 05:00:22 2024 GMT
            Not After : Nov 24 05:00:22 2024 GMT
        Subject: CN=137f65deb92a6a68079ec8e9c5ad2074c2c030fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6b:36:01:5d:6e:c5:f7:08:7a:13:21:d8:37:
                    d2:a9:8a:3a:73:b4:f2:cd:3c:ca:0a:d9:6a:fa:69:
                    17:11:b9:83:9a:1d:83:a8:4e:a8:df:0f:e7:c3:98:
                    f3:42:ef:7f:24:ac:0d:72:ba:60:9e:a8:95:10:fd:
                    a3:53:83:1d:b3:ed:21:ed:a9:70:a4:59:d3:8f:c5:
                    21:74:9f:a5:5d:a2:bf:3c:f4:fd:38:cf:1a:41:df:
                    1c:08:2c:21:5e:8e:d8:40:be:70:16:f8:ec:b8:ca:
                    14:73:7c:29:89:cd:ed:a7:17:07:48:a2:00:61:b2:
                    b0:1e:10:ed:f9:e9:42:16:9f:1e:1f:51:af:c6:e7:
                    23:ae:d7:6c:b6:70:00:2c:fb:a7:c1:80:07:cf:57:
                    c9:4c:d6:8f:2e:10:64:05:3a:07:13:15:7c:29:a1:
                    f1:c0:36:91:3a:e6:05:02:45:9e:54:4e:e0:64:86:
                    52:a6:85:5c:6d:75:d7:f7:bb:1e:3e:09:b8:6d:7d:
                    5c:50:7f:b3:73:14:17:1a:3e:91:d4:21:90:d1:10:
                    2f:8f:67:e4:93:72:0d:e7:81:d7:55:6e:93:66:3e:
                    6a:86:ec:17:ad:35:8d:0b:a3:05:a4:2c:9a:25:14:
                    e4:44:86:bc:70:0b:91:60:3a:75:f5:a0:7c:f5:2c:
                    b7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7F:65:DE:B9:2A:6A:68:07:9E:C8:E9:C5:AD:20:74:C2:C0:30:FD
            X509v3 Authority Key Identifier:
                keyid:BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:fd:f6:a5:69:59:b6:79:3b:d2:87:fb:7d:5d:39:a0:c2:0a:
         1c:ae:0a:54:68:63:32:4f:ef:d6:7b:da:d6:f3:96:a7:88:32:
         af:7a:fc:dd:70:e5:89:9a:d5:8a:49:a3:65:ea:1b:ca:11:d3:
         6a:09:c3:78:0f:76:4b:fc:30:85:7a:4c:cf:ba:31:f3:41:a3:
         12:98:de:81:e3:d3:09:b9:f8:5c:dc:cf:e2:02:1f:bf:e9:2a:
         41:e6:36:d3:ef:e5:ce:ca:e9:e1:35:40:a1:d6:93:2c:91:74:
         db:a4:b2:fb:ab:50:8f:8e:99:39:d9:9d:7e:d0:b4:e6:d1:ed:
         7c:2a:cc:b1:06:8f:52:23:7b:69:c9:8c:ed:b4:56:d4:9c:3b:
         ab:ae:3f:9e:36:1a:fc:d6:3a:f5:9f:18:da:55:0c:2c:73:fe:
         9c:88:f4:d0:ba:fd:3a:1b:95:98:16:6c:66:d2:bb:61:75:16:
         e8:c0:f9:b6:f2:c5:7f:d1:17:75:91:ed:84:c1:63:72:f8:a4:
         21:ce:19:88:b8:6a:46:19:06:15:e7:3b:9f:73:84:4a:3d:37:
         06:b7:c8:39:69:a0:98:61:2f:6f:f9:c7:71:b8:d5:80:79:47:
         63:c2:8f:44:0b:c7:f1:3b:69:19:5d:f4:70:bb:4e:56:9c:b0:
         16:eb:0f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----