Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.mft
File:                     h16pmc28YATHGlRwyg7HrnOCCPo.mft (raw, json)
Hash identifier:          IsjaMAYd1znmzd/6Zh+QlSmMwPhMMScoQKNz3vKCoBc=
Subject key identifier:   54:1C:D6:05:0B:24:1C:B5:5E:35:48:D0:99:8B:46:69:C6:7E:B1:37
Authority key identifier: 87:5E:A9:99:CD:BC:60:04:C7:1A:54:70:CA:0E:C7:AE:73:82:08:FA
Certificate issuer:       /CN=875ea999cdbc6004c71a5470ca0ec7ae738208fa
Certificate serial:       0193572E14A519110AEE8BC71C0BB2107FDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h16pmc28YATHGlRwyg7HrnOCCPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.mft
Manifest number:          02D2
Signing time:             Sat 23 Nov 2024 04:00:57 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:57 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:57 +0000
Files and hashes:         1: h16pmc28YATHGlRwyg7HrnOCCPo.crl (hash: ZwZu1QiBzS60QzLiHuARpASIdWMN5Gj8vVqJff8hJ1I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h16pmc28YATHGlRwyg7HrnOCCPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2e:14:a5:19:11:0a:ee:8b:c7:1c:0b:b2:10:7f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875ea999cdbc6004c71a5470ca0ec7ae738208fa
        Validity
            Not Before: Nov 23 04:00:57 2024 GMT
            Not After : Nov 24 04:00:57 2024 GMT
        Subject: CN=541cd6050b241cb55e3548d0998b4669c67eb137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fa:ac:c4:b1:fb:69:ff:47:0e:68:41:ab:95:
                    4c:c9:5f:0c:94:20:0b:25:5b:9d:e2:2a:4a:63:c2:
                    83:a3:d6:cd:84:f9:2c:bd:34:5c:cf:e3:7f:2d:73:
                    74:3a:ed:74:c5:9e:1d:6c:a7:9c:41:c6:3c:88:69:
                    49:71:65:02:0c:06:00:f7:14:00:d8:81:73:b2:fe:
                    77:15:9a:9e:04:d2:5f:09:e8:75:ae:11:0d:4c:91:
                    66:b8:59:c0:7c:ca:eb:39:42:77:ef:b7:45:29:22:
                    34:ef:61:e9:2a:c2:b3:e0:f3:35:bc:b0:7f:80:fc:
                    ed:21:ab:8c:60:d3:28:bb:39:85:43:38:cd:51:43:
                    ef:3b:3b:88:d9:22:4f:56:e3:fb:3e:86:eb:99:fe:
                    00:35:18:80:85:a5:a0:fe:f9:55:bd:2f:86:f5:6c:
                    f8:62:fb:43:78:f9:fa:84:bd:86:74:07:db:79:ca:
                    18:cc:b7:ce:69:6d:f6:1e:d0:c2:04:d8:85:07:ae:
                    53:ec:0c:d6:54:22:f3:b8:e7:5c:05:48:ee:ed:2d:
                    12:70:ed:b9:26:5e:b5:8f:36:f8:b4:dc:e4:62:6c:
                    12:d4:c3:2f:c6:66:e7:bb:b4:28:7e:24:0f:89:3a:
                    f5:5c:a5:54:71:0b:a2:0b:a5:f1:d2:89:99:2c:6c:
                    12:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:1C:D6:05:0B:24:1C:B5:5E:35:48:D0:99:8B:46:69:C6:7E:B1:37
            X509v3 Authority Key Identifier:
                keyid:87:5E:A9:99:CD:BC:60:04:C7:1A:54:70:CA:0E:C7:AE:73:82:08:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h16pmc28YATHGlRwyg7HrnOCCPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:61:fb:20:50:76:04:cc:62:20:eb:74:77:27:cb:5e:ed:cb:
         05:a3:8f:01:13:c1:4b:cc:c1:cf:e3:aa:1f:d5:c9:80:39:48:
         17:e2:5b:fb:99:68:43:37:d9:8a:48:de:50:03:3d:d5:c4:c1:
         d3:7b:ea:6d:cf:f9:26:d4:ed:28:59:e2:70:5d:70:8f:f3:1f:
         82:94:e2:5a:05:89:31:68:6d:22:34:97:0f:70:27:08:86:65:
         17:a1:1f:35:e5:d4:1a:ae:c5:51:2a:8c:64:43:54:0c:6c:2d:
         33:ac:ef:0b:87:38:d4:af:19:9c:5e:ce:7e:72:ef:ec:91:70:
         5e:1a:94:f8:64:5b:80:76:a9:5d:fc:27:23:44:b7:25:19:e8:
         b2:b0:4f:e2:e5:7e:57:90:2e:c7:77:58:35:06:fe:cf:73:3a:
         a0:8b:2a:b9:78:2f:6b:99:12:d7:03:7d:8c:ab:23:c0:0e:28:
         fa:bb:96:96:66:f9:51:fe:07:fb:8e:fa:65:63:7c:b8:9c:00:
         c7:10:01:69:e7:54:3a:40:dd:0d:2e:83:e8:54:cb:9c:ca:d1:
         32:2b:4e:eb:40:7a:55:05:b9:ac:69:b7:f4:55:a2:fd:58:d8:
         73:84:9e:cf:98:cb:38:c2:c1:77:7e:84:b7:db:b4:2e:bb:c7:
         21:23:27:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----