Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
File:                     2GkQtETemfqBw5NVDJfkoyC86BI.mft (raw, json)
Hash identifier:          jEsGl0RdyJ4cEbF0x+hQUgTgO2b5iNsjWM+dprBJfS0=
Subject key identifier:   EC:15:DF:04:EE:7F:E3:52:73:F4:4A:AE:19:35:F9:52:48:B3:15:C3
Authority key identifier: D8:69:10:B4:44:DE:99:FA:81:C3:93:55:0C:97:E4:A3:20:BC:E8:12
Certificate issuer:       /CN=d86910b444de99fa81c393550c97e4a320bce812
Certificate serial:       019356F711A4F49043391E56BDDCE5DA2E7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
Manifest number:          0A79
Signing time:             Sat 23 Nov 2024 03:00:52 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:52 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:52 +0000
Files and hashes:         1: 2GkQtETemfqBw5NVDJfkoyC86BI.crl (hash: W4MyvOEZYE7lY9sU8UvMJ2I6aqf5Kqd/3aypOoGRSDI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:11:a4:f4:90:43:39:1e:56:bd:dc:e5:da:2e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d86910b444de99fa81c393550c97e4a320bce812
        Validity
            Not Before: Nov 23 03:00:52 2024 GMT
            Not After : Nov 24 03:00:52 2024 GMT
        Subject: CN=ec15df04ee7fe35273f44aae1935f95248b315c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d7:35:48:a3:59:14:d4:0c:f5:80:98:61:3b:
                    e7:cd:79:e3:67:f1:29:62:6e:74:57:91:45:ec:5b:
                    d0:e4:79:58:29:21:91:3b:8b:f8:e4:82:df:51:07:
                    08:91:5d:31:8d:86:3c:36:34:bb:66:82:9a:97:30:
                    e8:80:0a:00:fa:91:ee:5a:9d:21:8b:4e:32:0e:87:
                    61:04:b2:28:c9:ce:23:fd:ab:49:13:21:fe:ea:ab:
                    f9:fd:e8:d7:4b:74:b2:e5:8f:0c:89:b5:eb:51:02:
                    99:8d:54:e4:c5:7a:fe:e0:14:56:a9:fb:de:2a:3c:
                    1e:be:ba:4b:ce:ee:8d:24:59:c6:3c:9e:1f:bf:98:
                    9f:af:2f:cc:07:a7:ee:37:9a:73:71:2e:fe:c0:5f:
                    82:46:74:b6:15:aa:6f:7e:e5:8c:20:3f:01:09:4c:
                    83:94:7a:87:8e:e3:d7:7e:62:38:5b:a4:8b:c7:f5:
                    63:20:a9:f0:b0:0f:37:dc:3a:04:bd:ea:aa:a3:90:
                    d5:b5:81:6d:49:ed:e4:84:fb:21:45:1d:71:58:55:
                    f4:0e:b9:b1:04:67:5e:55:82:5e:84:a0:43:43:ef:
                    00:d7:2f:f1:de:ca:dc:15:48:7b:b5:7e:ba:01:ab:
                    d1:70:38:59:30:e8:19:52:81:dd:34:90:7a:99:02:
                    10:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:15:DF:04:EE:7F:E3:52:73:F4:4A:AE:19:35:F9:52:48:B3:15:C3
            X509v3 Authority Key Identifier:
                keyid:D8:69:10:B4:44:DE:99:FA:81:C3:93:55:0C:97:E4:A3:20:BC:E8:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:d3:d0:6a:e2:92:45:bf:d2:2e:39:33:eb:77:aa:7b:67:b4:
         d1:2f:41:18:12:88:b0:b0:e9:01:9b:5d:dd:fa:33:70:a6:1a:
         59:e0:3a:d4:f3:70:50:49:22:57:5f:34:bb:0a:12:b6:2b:12:
         ba:5d:91:d1:a4:60:03:82:64:5d:96:65:f6:d8:a0:8c:b2:4e:
         7c:b2:b8:e3:23:61:10:a8:f8:20:4a:05:94:33:f1:a6:4f:69:
         e1:5b:52:36:af:b9:18:3c:6f:29:1c:ad:75:d9:41:4d:fc:7a:
         cf:f5:96:12:73:00:46:4a:92:e1:fe:42:2b:f0:f5:61:b1:c3:
         7c:bc:fc:90:be:76:10:b7:29:88:be:50:49:9f:a4:bb:37:ed:
         b0:32:68:59:eb:7f:72:34:e2:18:f7:44:df:1c:8d:cd:92:aa:
         2d:b2:a2:72:ff:11:38:79:4e:e2:8e:97:f6:db:6c:8d:c4:3b:
         d6:a7:aa:f3:3a:f3:05:ad:3c:0c:30:76:d6:3f:a4:ab:a1:71:
         c2:32:3f:96:24:91:4c:0c:24:c9:f2:00:a0:49:02:ff:2c:0f:
         9a:98:2b:5e:e1:f6:4e:7c:32:38:e1:62:5e:d4:6d:1a:bb:14:
         33:e9:93:a7:d0:3c:55:4b:48:5e:52:1d:57:67:59:31:5e:01:
         4f:f3:c4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----