Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
File:                     mEL3HQwjZ4gu9HCLIGtLbimjezM.mft (raw, json)
Hash identifier:          l8wFPBfACjjVXSED6NCJG2hZGExYLeJ5t+e8tFaMYhM=
Subject key identifier:   7A:B3:4C:F9:99:C3:DB:DE:24:68:59:3D:9B:08:8D:DB:C4:87:9F:11
Authority key identifier: 98:42:F7:1D:0C:23:67:88:2E:F4:70:8B:20:6B:4B:6E:29:A3:7B:33
Certificate issuer:       /CN=9842f71d0c2367882ef4708b206b4b6e29a37b33
Certificate serial:       0193568B13B55E642EE7BE142E82F1580B5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEL3HQwjZ4gu9HCLIGtLbimjezM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
Manifest number:          1006
Signing time:             Sat 23 Nov 2024 01:02:55 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:55 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:55 +0000
Files and hashes:         1: mEL3HQwjZ4gu9HCLIGtLbimjezM.crl (hash: ydgMVkN1+uJAD4Jc7JzfnIs9p/j3bkAsJKV+GblHzCo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEL3HQwjZ4gu9HCLIGtLbimjezM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:13:b5:5e:64:2e:e7:be:14:2e:82:f1:58:0b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9842f71d0c2367882ef4708b206b4b6e29a37b33
        Validity
            Not Before: Nov 23 01:02:55 2024 GMT
            Not After : Nov 24 01:02:55 2024 GMT
        Subject: CN=7ab34cf999c3dbde2468593d9b088ddbc4879f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:72:6e:21:de:17:80:13:94:dd:c1:1b:66:62:
                    af:18:be:39:52:94:0e:c4:30:f2:ae:89:b9:ea:6a:
                    49:4b:25:24:c1:c5:85:62:73:e3:20:9b:f2:0f:fc:
                    23:f0:8d:77:7f:dd:4d:d1:fa:74:bc:97:8e:cc:9f:
                    8e:9f:46:d5:07:30:0e:f9:42:f9:64:53:f3:d7:1e:
                    6c:7c:0f:54:06:a1:9d:ea:41:45:15:4c:86:3c:c8:
                    8f:af:4f:1a:f2:b3:9c:df:37:fd:df:83:29:0e:9e:
                    c0:4d:7a:b4:85:28:bf:ad:e6:fa:56:be:11:90:05:
                    3f:75:90:21:b7:ff:91:fb:10:ff:9a:56:da:ed:51:
                    fe:be:a5:e9:28:f9:67:b4:c6:f1:2a:29:bb:d5:a4:
                    c0:9d:c2:bc:58:b9:83:de:53:76:b5:5c:bc:9f:a1:
                    a6:99:f7:97:33:7e:eb:44:1c:39:0a:03:21:41:b3:
                    70:b0:23:50:a7:d7:de:9e:ba:f6:4b:6b:ba:29:a2:
                    7c:01:51:db:f2:85:4d:00:46:f5:3b:b6:aa:6d:31:
                    10:97:e6:7e:73:6f:73:93:7d:82:57:1b:ef:9d:ff:
                    7f:41:d2:bb:a9:57:3d:0f:0c:33:a3:0a:08:68:bf:
                    bd:c1:72:fe:a1:4e:75:86:f4:7a:a5:ac:28:9e:d8:
                    ee:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B3:4C:F9:99:C3:DB:DE:24:68:59:3D:9B:08:8D:DB:C4:87:9F:11
            X509v3 Authority Key Identifier:
                keyid:98:42:F7:1D:0C:23:67:88:2E:F4:70:8B:20:6B:4B:6E:29:A3:7B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEL3HQwjZ4gu9HCLIGtLbimjezM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:3c:16:15:be:4e:d6:42:5f:7a:62:87:2b:5b:01:c7:10:60:
         7e:9e:2c:42:f3:aa:03:d1:d6:70:5d:ca:1f:35:18:00:71:f2:
         00:b4:02:b4:44:78:33:b4:d1:e4:db:45:c5:9d:df:bf:8b:ec:
         a8:f0:ce:b4:da:83:24:9d:cd:02:41:71:eb:88:11:60:04:b9:
         56:d9:fe:16:d7:fb:f9:e5:6d:6f:8b:a1:62:35:73:99:ff:b3:
         43:a4:be:17:59:3a:11:99:dc:36:24:38:a6:8d:6e:bb:68:57:
         27:16:4e:64:85:c6:77:29:2d:42:8a:4f:3d:d3:a8:ab:7f:5c:
         8f:ec:b1:0a:fa:f0:ff:82:1f:bd:f1:50:fc:59:71:8e:10:9b:
         16:c5:68:b3:05:06:d3:05:3d:fb:db:2f:26:1b:b1:db:21:3d:
         74:b0:6c:fd:1f:ed:6b:3e:d5:7c:95:f0:9c:58:5a:8e:47:83:
         49:25:fd:a1:de:cb:8c:46:43:60:eb:aa:07:27:e2:ab:a7:06:
         b3:82:92:14:c9:4d:f4:a5:d5:70:b4:66:f3:bd:88:96:2b:c0:
         ae:2d:03:4b:15:63:c2:c0:f4:e1:6a:4f:67:b7:62:b6:85:7c:
         9a:03:04:20:cf:3b:cd:b2:27:29:e5:cd:0c:66:8f:80:24:79:
         3e:7f:3e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----