Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
File:                     P4_xyWZv4ZXySqH-jDRdecSOe8A.mft (raw, json)
Hash identifier:          giDotEHljsYvfbFajTMm8JpqNC3FsnfGZvWEsb1DoQk=
Subject key identifier:   FB:5B:54:66:6E:C4:A9:B5:AC:36:F7:CE:64:01:D2:A2:6A:81:35:6F
Authority key identifier: 3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
Certificate issuer:       /CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Certificate serial:       01936933D0CDCC0E3F00682AC7E9B96C8004
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
Manifest number:          0766
Signing time:             Tue 26 Nov 2024 16:00:23 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:23 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:23 +0000
Files and hashes:         1: P4_xyWZv4ZXySqH-jDRdecSOe8A.crl (hash: T0KT5RNj+OEsNcr/kZmGNcbBMiIdEbk+yMu+FJ1qBkQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:33:d0:cd:cc:0e:3f:00:68:2a:c7:e9:b9:6c:80:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
        Validity
            Not Before: Nov 26 16:00:23 2024 GMT
            Not After : Nov 27 16:00:23 2024 GMT
        Subject: CN=fb5b54666ec4a9b5ac36f7ce6401d2a26a81356f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:99:f2:6f:27:d6:72:2c:62:91:69:5f:0e:cd:
                    41:e2:ca:e0:06:c4:3e:4f:b9:92:38:ff:ae:f0:86:
                    0e:b3:d8:ea:cb:b5:c0:7a:70:76:e1:df:07:61:f1:
                    b1:08:ed:2a:42:40:87:3a:24:7d:13:42:d0:16:42:
                    f9:9c:3f:0b:18:75:a9:74:f6:55:ec:bb:af:1c:b5:
                    ba:60:39:9c:4c:27:cf:74:40:36:f1:ae:7b:d3:bc:
                    b1:f7:3c:80:cc:49:82:5a:13:fe:80:1a:56:87:55:
                    06:a8:f7:e2:d1:9e:5d:0a:90:78:23:11:9c:82:06:
                    69:e4:ae:79:82:23:a6:c5:3b:b3:c8:1b:84:3b:94:
                    e1:6a:35:c1:ae:6d:2d:43:a6:ad:37:c3:c6:f3:fe:
                    1f:bf:58:60:4a:1d:be:80:97:23:29:51:75:5c:9a:
                    f5:1d:52:33:39:54:e9:a9:9e:b9:06:75:9e:3c:b2:
                    6e:d0:4f:14:4a:6c:4b:01:38:f3:c7:9e:d2:28:4b:
                    3f:1f:d3:b0:68:f4:33:89:12:e3:7b:68:1f:52:5d:
                    52:e0:df:46:c8:b9:ee:11:34:1a:19:1a:c6:81:ed:
                    01:b7:7f:06:6e:05:cb:18:60:8e:49:fa:34:ea:19:
                    8a:77:3a:b8:ff:72:a4:7e:0f:e6:8a:48:28:3a:9a:
                    6d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5B:54:66:6E:C4:A9:B5:AC:36:F7:CE:64:01:D2:A2:6A:81:35:6F
            X509v3 Authority Key Identifier:
                keyid:3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:c4:3d:fe:9a:28:2b:1e:90:02:d2:66:a7:bf:a7:d3:05:56:
         48:fe:b3:c4:6a:8c:f6:d9:23:44:1b:45:87:f4:15:25:b4:25:
         05:8d:47:30:38:03:98:42:d8:ab:21:54:bf:81:24:dd:d3:28:
         09:72:d3:d0:a6:6e:2e:77:cf:c1:4b:10:64:ad:b3:a4:de:8b:
         f5:ae:3c:75:fd:5c:36:7b:fa:90:2d:03:65:8e:a7:56:7e:a8:
         a5:78:b1:e4:b8:e0:91:33:54:44:b1:fb:45:d8:59:b3:73:db:
         aa:08:91:be:dc:69:2e:ec:66:31:fc:55:d3:cb:1a:82:dd:0c:
         c3:c1:20:be:ec:6c:e2:e1:77:99:73:92:c4:86:98:55:73:e2:
         7c:68:ed:5e:20:b5:56:8b:16:d2:2d:45:98:bb:ab:d3:00:c1:
         e6:8b:2b:92:a9:4e:23:28:c9:9d:06:29:f4:17:66:4c:b3:11:
         17:e1:f5:d6:4a:b4:74:94:9b:dd:50:bd:f3:a8:05:af:a4:8f:
         ec:5a:96:2c:14:c4:c6:1c:f0:2d:15:0e:02:03:66:27:84:8d:
         99:ef:3e:94:a9:ae:ff:8a:b7:77:7a:eb:ce:92:e8:25:c9:fc:
         3d:df:bd:07:65:1d:47:a7:48:33:06:4f:4b:3f:fe:a9:db:a1:
         54:28:af:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----