Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
File:                     pmAQdyZRcCotMzyDFfGukvbMdJA.mft (raw, json)
Hash identifier:          0xnt3VVLRP9m9M9HN7evUlm7cEcMpcUIagWdHowC92c=
Subject key identifier:   F0:AB:3F:28:79:33:BA:53:D0:4D:9B:92:EA:34:8A:E5:CC:79:71:36
Authority key identifier: A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
Certificate issuer:       /CN=a66010772651702a2d333c8315f1ae92f6cc7490
Certificate serial:       019357D2EAB38211B0912BEA8791BE415FCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
Manifest number:          12AA
Signing time:             Sat 23 Nov 2024 07:01:00 +0000
Manifest this update:     Sat 23 Nov 2024 07:01:00 +0000
Manifest next update:     Sun 24 Nov 2024 07:01:00 +0000
Files and hashes:         1: pmAQdyZRcCotMzyDFfGukvbMdJA.crl (hash: g4YoG24suWpYW2m+kFYe8Zd8kwpRQ51r1RTcjxc9qPo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:ea:b3:82:11:b0:91:2b:ea:87:91:be:41:5f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a66010772651702a2d333c8315f1ae92f6cc7490
        Validity
            Not Before: Nov 23 07:01:00 2024 GMT
            Not After : Nov 24 07:01:00 2024 GMT
        Subject: CN=f0ab3f287933ba53d04d9b92ea348ae5cc797136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2b:22:89:1d:f7:03:9b:a4:e3:86:c8:63:bd:
                    11:05:7d:bb:97:c8:24:cc:8e:17:ad:94:8a:66:5b:
                    25:55:e1:d8:53:b4:2a:f8:da:3b:7b:86:30:6c:12:
                    b4:e4:a0:8b:04:3e:1d:3b:e7:7e:0b:a1:d5:6f:68:
                    1f:35:bb:d7:02:83:d6:41:f1:82:4a:3e:71:68:62:
                    6f:05:68:00:8a:a8:2d:10:00:7c:0d:b4:41:26:4a:
                    5f:95:72:dd:01:35:f5:be:c8:2a:b2:00:68:76:8e:
                    06:fd:94:5e:5a:5f:ec:e8:07:da:23:85:5d:c2:33:
                    75:8c:5d:b7:1c:63:67:14:ac:cf:fe:a2:71:0f:00:
                    7d:27:b7:77:b1:73:b7:54:91:14:d6:92:7d:78:9c:
                    47:9e:74:69:58:8a:54:7c:00:01:94:c2:71:c7:fc:
                    a9:e2:87:b6:d6:29:38:13:bb:e3:05:01:5b:da:06:
                    87:97:d3:91:36:62:fa:b1:e6:0f:46:a4:8a:da:49:
                    c0:3a:d3:f5:e2:a5:54:66:c2:e8:51:e0:fa:8a:8e:
                    50:04:0f:d1:12:36:76:a0:c3:e8:e1:1f:e7:b3:82:
                    c8:0e:c0:ff:01:0f:f0:8e:c6:af:22:79:7d:d2:cb:
                    cb:d6:69:c0:fd:fe:93:8b:c7:5a:a2:72:5a:9a:a0:
                    18:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AB:3F:28:79:33:BA:53:D0:4D:9B:92:EA:34:8A:E5:CC:79:71:36
            X509v3 Authority Key Identifier:
                keyid:A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:02:25:ab:61:56:ca:aa:f0:02:60:ca:9c:0f:05:da:84:6d:
         7a:f8:e0:c8:bd:06:af:b0:af:0e:f3:7f:80:28:83:2d:fb:cb:
         b7:6b:de:a4:53:a7:9d:37:06:89:28:44:39:c7:30:2f:b3:28:
         30:1c:b4:2f:8a:7e:32:e0:57:21:21:da:60:3a:e2:80:5f:25:
         82:d7:b6:ce:48:51:b4:39:d5:99:56:ee:fe:fc:4f:72:c3:55:
         a8:fe:f4:2a:9c:0a:50:2e:41:4f:f1:90:65:04:cf:c3:5a:35:
         38:37:00:5c:0f:cc:72:f0:87:75:f2:ef:d3:90:a5:c1:b4:b1:
         d5:05:15:b4:f3:74:a1:34:e3:5d:d1:65:a6:c7:2f:a6:47:c6:
         b7:5b:3b:0c:8b:cc:0b:fc:cc:7a:7c:fd:ad:98:89:6e:15:98:
         c5:1a:40:c4:43:31:33:0d:f2:53:a9:5c:c0:c0:34:c7:7b:c0:
         e0:53:df:9c:b2:61:38:51:fd:6b:d4:bb:d3:03:3f:4d:cc:81:
         cf:3b:b0:81:ed:a6:86:f3:1a:bf:86:87:9b:8e:98:7d:81:4f:
         52:4c:40:ac:36:b1:8b:ec:b5:39:01:53:ed:fe:65:a6:16:c7:
         e4:97:e9:4b:69:e7:ed:40:05:b1:b9:14:75:35:88:e7:87:cb:
         39:e6:ec:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----