Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
File:                     k4KIfhkEky8RhsLDHGqS_17GQ4c.mft (raw, json)
Hash identifier:          xVyL/40FIL8q1sq2ixX2LlupZJSYI6q4b9vLRCP30sM=
Subject key identifier:   86:2A:91:DD:75:6F:3B:EF:DC:5B:8E:9D:BC:01:C0:3B:97:CA:C2:4C
Authority key identifier: 93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87
Certificate issuer:       /CN=9382887e1904932f1186c2c31c6a92ff5ec64387
Certificate serial:       019358404306F8B9500BC7B19EF7797583B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
Manifest number:          A1
Signing time:             Sat 23 Nov 2024 09:00:26 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:26 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:26 +0000
Files and hashes:         1: k4KIfhkEky8RhsLDHGqS_17GQ4c.crl (hash: W/Y7slKJTz+IjW2fq44sODteJKTOXjricePk7LQ3Jz4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:43:06:f8:b9:50:0b:c7:b1:9e:f7:79:75:83:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9382887e1904932f1186c2c31c6a92ff5ec64387
        Validity
            Not Before: Nov 23 09:00:26 2024 GMT
            Not After : Nov 24 09:00:26 2024 GMT
        Subject: CN=862a91dd756f3befdc5b8e9dbc01c03b97cac24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:14:6b:ef:df:00:7a:d1:a7:3f:f6:79:c4:62:
                    b1:93:bc:23:4d:78:4a:43:23:68:80:90:a9:1e:69:
                    78:9a:d9:cb:1d:72:5a:89:7d:7a:54:e7:44:c9:4f:
                    42:e8:88:05:24:de:fb:56:a8:0f:4a:dd:50:f7:de:
                    3e:d7:57:02:1f:06:72:ce:a5:2f:dc:61:eb:a5:37:
                    d0:69:cc:b3:06:36:29:51:05:10:1b:7d:e7:1b:3e:
                    51:75:03:fb:80:7e:79:12:43:8e:7c:c1:7b:c5:1c:
                    75:0d:e3:0c:e3:0d:d9:79:c9:e3:e1:e2:f2:58:78:
                    50:7f:f6:93:6a:de:d8:4c:af:d6:19:6c:28:f0:d4:
                    8f:6f:be:17:51:80:fe:c6:94:20:8c:db:bc:9a:3b:
                    fd:64:d9:8c:d7:11:c9:8e:eb:3e:14:eb:00:cf:6e:
                    9c:9b:92:2f:49:64:57:f8:da:35:37:a5:15:2b:41:
                    a4:21:77:e9:99:45:c4:43:80:c8:f8:b4:de:7e:63:
                    3d:25:51:89:2f:93:92:5f:22:5b:90:e4:18:69:0f:
                    cd:61:50:36:1d:4e:ad:91:f8:45:4b:00:a7:ac:d4:
                    41:40:28:8f:db:5e:72:d1:8c:79:a2:f3:73:e0:0a:
                    7b:4a:5a:c7:12:87:48:ff:b1:a7:79:61:b4:a9:48:
                    26:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2A:91:DD:75:6F:3B:EF:DC:5B:8E:9D:BC:01:C0:3B:97:CA:C2:4C
            X509v3 Authority Key Identifier:
                keyid:93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:5a:f1:90:23:00:6f:c0:4c:c7:44:1f:4b:43:fd:48:da:38:
         61:25:cb:0f:86:9b:88:05:34:98:78:f4:09:52:a6:79:7b:93:
         1e:e4:03:b5:74:99:ed:8f:45:3c:a1:b1:ec:32:6c:eb:ea:82:
         4a:86:40:20:30:d2:1d:37:28:fb:76:f4:a5:a4:aa:12:39:04:
         59:e7:d8:49:d6:76:4f:2e:18:ff:c1:2f:e1:77:31:f3:10:e5:
         87:e1:89:e1:50:3b:58:92:e9:bc:9e:5c:35:36:d6:0f:f9:b1:
         cc:e4:65:a6:80:4f:e7:6e:cd:9a:30:a1:23:f6:d2:e8:cd:fe:
         d8:dc:b3:b3:66:e5:82:e6:5c:25:ea:35:81:0e:a5:88:05:f0:
         35:0a:e0:2c:4b:d1:9d:5a:a9:33:07:9c:5e:41:75:06:2f:62:
         d0:77:79:7e:3f:19:83:f9:13:1f:bb:75:02:f3:a7:14:ed:72:
         c2:e3:95:ee:60:58:b2:6a:83:7e:85:2e:18:fb:88:9a:19:c4:
         e0:d7:ed:de:8c:02:df:67:00:58:8e:cb:06:df:8e:50:a2:29:
         14:41:ce:32:80:1c:ac:c0:2c:07:05:05:35:64:4d:b7:08:04:
         3b:37:e6:16:3c:3f:13:c0:41:8a:51:ed:30:b5:9b:0e:ba:8c:
         03:8e:df:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----