Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
File:                     I8cVVBujctWQ1odn14zmmEABMFk.mft (raw, json)
Hash identifier:          ocAf8P9mOISf0WlslE2d3w6fPhZJOkn8aTo0lJFCqBQ=
Subject key identifier:   7E:63:52:85:F6:EB:0A:7A:6C:41:CF:D4:46:F8:D5:18:66:AF:6D:30
Authority key identifier: 23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
Certificate issuer:       /CN=23c715541ba372d590d68767d78ce69840013059
Certificate serial:       0193568B18B2515F614589C19D59099674AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
Manifest number:          136D
Signing time:             Sat 23 Nov 2024 01:02:56 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:56 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:56 +0000
Files and hashes:         1: I8cVVBujctWQ1odn14zmmEABMFk.crl (hash: unImVEVDSDOVHA1n8WSH0VE6zfnLB7+ZpBFaRLJ4vaM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:18:b2:51:5f:61:45:89:c1:9d:59:09:96:74:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23c715541ba372d590d68767d78ce69840013059
        Validity
            Not Before: Nov 23 01:02:56 2024 GMT
            Not After : Nov 24 01:02:56 2024 GMT
        Subject: CN=7e635285f6eb0a7a6c41cfd446f8d51866af6d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e9:19:1c:2a:4e:62:c3:32:ab:00:a4:e1:92:
                    16:e4:b4:81:3e:dc:17:c8:93:e4:07:e2:76:34:ab:
                    ad:e5:33:a7:c2:20:31:b5:f1:a9:b1:3d:6b:2f:5d:
                    8a:f1:d0:e8:69:e1:ab:ed:61:b7:3e:b3:0e:16:6f:
                    ae:6f:a1:90:1a:1c:66:40:03:d5:a7:13:03:e0:ed:
                    d2:e8:ee:45:46:68:6d:17:5c:51:b2:b3:35:d2:54:
                    de:67:bc:28:49:cc:f5:e3:f5:ba:c7:54:c8:fd:42:
                    66:f1:4f:75:0c:6d:33:59:fd:9d:88:3d:eb:00:d0:
                    65:f9:94:12:6f:8e:16:44:5d:36:b1:8f:e2:8f:ab:
                    47:30:3c:aa:bf:8a:28:ed:08:a2:80:b7:d5:27:7b:
                    1d:d2:1a:a5:32:80:2f:e6:d7:b8:66:e1:bf:12:8a:
                    e4:fb:0a:94:d2:11:dd:e2:e2:10:00:17:dc:14:27:
                    2a:93:9e:2b:4a:c6:fb:fc:5e:05:ff:9e:aa:34:4c:
                    8f:b0:9e:42:f2:e1:f6:bd:ee:fa:f2:f9:ad:bf:94:
                    85:e5:c5:f4:8c:74:73:c3:99:52:79:8d:e0:a7:d1:
                    5f:cd:49:dd:c9:db:13:07:d8:44:e5:b5:83:29:eb:
                    e7:45:f9:86:e0:b3:3d:b0:86:97:f0:79:b1:2a:d9:
                    c1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:63:52:85:F6:EB:0A:7A:6C:41:CF:D4:46:F8:D5:18:66:AF:6D:30
            X509v3 Authority Key Identifier:
                keyid:23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e3:5c:49:54:de:4c:9d:44:08:d9:2e:d0:aa:ea:d1:ed:7f:
         3f:4e:ae:fd:0e:1c:33:f8:b8:d7:77:8e:08:a1:ba:36:07:83:
         28:79:ac:9f:e1:ef:b0:ab:6d:25:69:f7:94:62:16:0d:bf:e6:
         25:e1:d3:e4:e4:07:29:6a:4d:01:1a:42:66:d5:fd:47:11:21:
         4d:f2:12:bf:5b:08:39:48:b1:4a:7a:f3:28:13:50:a8:ed:10:
         dc:91:80:b0:ef:50:d6:37:cd:18:24:01:b8:14:6a:f0:76:8a:
         ba:d3:22:fc:d3:b3:bd:9c:10:25:77:a0:cb:b9:75:61:49:07:
         8e:8a:f4:77:6f:80:68:69:1b:28:9b:2a:60:fa:6d:65:47:af:
         3e:7b:22:25:4b:b4:1c:9f:89:dd:12:4e:78:ad:ea:f7:2c:7b:
         87:09:e1:41:dc:ad:60:f1:c6:61:1c:3b:9a:4b:76:31:27:16:
         32:d0:c5:4f:36:25:68:3d:9f:b5:91:76:03:7f:bb:b9:91:dd:
         93:03:1f:f2:91:76:98:e0:2a:08:94:6c:0d:b4:e7:c6:59:4f:
         6b:67:e9:1e:91:69:00:a8:4b:45:49:e8:2a:af:d8:e0:92:f6:
         b8:16:20:56:49:73:82:c0:79:f7:50:22:2a:3c:c6:2a:ed:e6:
         41:bf:cf:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----