Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
File:                     VHFLUoQ1EPnzrDC4GbYQ15a338E.mft (raw, json)
Hash identifier:          1nSsr753IAeI93ekB8AahOtk0c4hWHLet15eIRqc0Kg=
Subject key identifier:   B1:66:A7:DF:73:AA:BA:3F:BB:0D:6B:19:DC:8F:B2:46:BE:71:BA:AD
Authority key identifier: 54:71:4B:52:84:35:10:F9:F3:AC:30:B8:19:B6:10:D7:96:B7:DF:C1
Certificate issuer:       /CN=54714b52843510f9f3ac30b819b610d796b7dfc1
Certificate serial:       019367EC2CC85AC8866573C968D17C22CBD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
Manifest number:          0F14
Signing time:             Tue 26 Nov 2024 10:02:31 +0000
Manifest this update:     Tue 26 Nov 2024 10:02:31 +0000
Manifest next update:     Wed 27 Nov 2024 10:02:31 +0000
Files and hashes:         1: VHFLUoQ1EPnzrDC4GbYQ15a338E.crl (hash: /8A3OEWr7lUtVfEAI0nrNfEKzy8wnXkXWE01xKNQ8bM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:ec:2c:c8:5a:c8:86:65:73:c9:68:d1:7c:22:cb:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54714b52843510f9f3ac30b819b610d796b7dfc1
        Validity
            Not Before: Nov 26 10:02:31 2024 GMT
            Not After : Nov 27 10:02:31 2024 GMT
        Subject: CN=b166a7df73aaba3fbb0d6b19dc8fb246be71baad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:62:ed:e9:ca:ac:e9:28:55:db:ec:9a:aa:76:
                    36:f6:06:be:0d:86:f9:a2:20:ab:86:a3:3c:e5:9b:
                    6e:f4:af:44:6e:f6:9e:fc:39:52:58:07:ba:53:41:
                    e4:69:20:2b:d8:07:62:de:82:4f:a8:d9:9b:fc:14:
                    ed:c3:ea:c0:b6:53:54:06:8c:00:a2:ff:ad:15:57:
                    84:5f:cd:ba:c8:fe:a8:10:d1:d1:66:0b:06:dc:f8:
                    df:1c:f7:34:92:fc:ae:31:ae:c8:64:68:47:71:f3:
                    3d:58:cf:bb:81:81:e1:2f:53:af:3c:60:d4:39:30:
                    28:be:c1:cd:58:48:bd:49:55:a2:5f:a2:44:2d:f6:
                    6c:44:59:67:ba:12:ad:6c:37:71:72:d1:fc:76:d9:
                    89:60:f8:1c:53:1f:f9:18:96:94:e4:f4:6f:f1:47:
                    44:91:24:fe:b8:a9:5f:bc:d5:e2:34:25:72:9e:da:
                    f0:41:2c:26:f0:74:f0:49:3e:bb:be:7c:3f:53:06:
                    b0:03:48:c4:6f:73:f3:a8:ab:c3:62:be:69:89:f1:
                    ad:e1:17:07:83:3f:03:84:08:d7:49:8b:8a:53:52:
                    44:e2:e4:8d:8a:0f:3e:bb:d6:69:d8:12:c2:0e:52:
                    1c:9f:10:9e:fd:98:19:7c:8f:7a:38:a7:a6:43:68:
                    24:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:66:A7:DF:73:AA:BA:3F:BB:0D:6B:19:DC:8F:B2:46:BE:71:BA:AD
            X509v3 Authority Key Identifier:
                keyid:54:71:4B:52:84:35:10:F9:F3:AC:30:B8:19:B6:10:D7:96:B7:DF:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:45:85:8f:d7:68:a4:fc:e6:1a:d0:be:d9:5c:3d:9b:91:98:
         b5:48:89:e9:19:84:2b:0d:5e:2c:ce:ac:01:83:ee:d8:f6:c3:
         ef:e0:31:22:a8:a5:3c:8a:26:f8:84:14:f3:59:23:95:b9:1b:
         c1:5f:0b:db:77:a2:f7:47:dc:f3:f9:db:81:2f:30:f3:54:b2:
         e2:23:87:5f:c5:82:af:a7:17:35:0c:aa:46:6a:01:e0:70:b6:
         3d:da:2a:73:e5:7b:e6:ba:f3:37:17:4b:c6:87:64:3a:8f:f7:
         2a:7d:25:e0:27:64:4c:e6:9a:da:2e:82:39:8f:0b:c0:92:c1:
         37:0b:b5:ff:a4:04:0a:ff:80:34:38:01:53:46:b9:39:b8:f9:
         73:3c:27:5b:e4:bd:a3:7b:c8:68:16:ed:64:15:e1:d9:56:56:
         4b:b8:c9:27:c5:07:7e:b6:96:c3:98:29:f3:cd:d6:78:86:d8:
         61:81:0e:1b:fd:13:08:f3:7c:9e:1b:51:8d:5e:fe:b7:0c:31:
         9c:ad:d2:9f:21:12:97:cd:1d:30:01:f1:15:af:13:d6:64:1e:
         a4:2f:84:f6:24:bc:00:0e:85:82:f6:c1:92:67:f5:35:a4:d0:
         67:f1:73:37:38:0e:cf:aa:e2:48:e6:17:52:3a:02:9e:33:46:
         01:13:c2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----