Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
File:                     5IKZWNgAyhrebhPKeygLIpzmYC4.mft (raw, json)
Hash identifier:          DACSDA+a5PahC8KRaH7jPeoajIRb1JAFxkUUUnYkLI4=
Subject key identifier:   0C:A2:D9:E6:3F:28:86:28:EF:5A:FB:8D:AF:A4:7A:31:86:05:77:A6
Authority key identifier: E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E
Certificate issuer:       /CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
Certificate serial:       01935A66F497EBAF401F8F4658425B01FCC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 19:01:56 +0000
Manifest this update:     Sat 23 Nov 2024 19:01:56 +0000
Manifest next update:     Sun 24 Nov 2024 19:01:56 +0000
Files and hashes:         1: 5IKZWNgAyhrebhPKeygLIpzmYC4.crl (hash: yA4amp/LpCO23dO+5VQtGoSpMSeeL7trDuQ5647uZzI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:66:f4:97:eb:af:40:1f:8f:46:58:42:5b:01:fc:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
        Validity
            Not Before: Nov 23 19:01:56 2024 GMT
            Not After : Nov 24 19:01:56 2024 GMT
        Subject: CN=0ca2d9e63f288628ef5afb8dafa47a31860577a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1c:a4:22:e7:07:52:51:fa:fa:ff:95:7c:3a:
                    b0:8b:04:dd:ba:8d:51:ed:c8:ec:a7:ea:f0:e7:63:
                    4a:33:fb:17:59:59:f7:cb:51:03:66:97:f6:59:8f:
                    22:b5:8c:f9:54:ad:aa:5e:c0:0f:8b:39:b8:67:23:
                    f5:c3:3e:00:8a:4f:e9:f2:61:9c:74:f8:35:7e:3f:
                    a5:11:58:e3:43:2d:09:1d:48:6f:6a:ec:5e:e9:ee:
                    57:51:49:c8:3f:4a:e4:58:a5:27:a3:04:b0:20:2f:
                    ab:5a:ac:5d:fd:ff:4e:fc:13:c0:f1:ec:e9:8c:70:
                    06:e3:57:32:86:86:a3:c4:d8:eb:bb:6e:ad:71:9e:
                    68:36:d7:48:65:04:e6:7b:fd:ae:4c:68:ca:55:1a:
                    ac:a9:18:4e:90:c4:37:94:f2:c6:0f:24:3b:36:4c:
                    0c:c9:66:38:41:0f:6d:a6:4d:10:2e:b0:d1:56:8d:
                    95:85:3d:40:45:e5:cc:c0:aa:a7:4e:e4:60:a6:d8:
                    55:b2:66:22:d5:85:33:3e:69:76:6f:35:91:33:20:
                    4b:05:de:06:d0:b2:11:1a:ef:72:18:38:3e:ec:e3:
                    42:80:22:b8:f5:47:dc:bc:92:ec:43:11:f9:3d:5c:
                    8c:09:3a:15:99:70:d5:62:a8:c8:4d:7d:cc:8f:24:
                    32:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A2:D9:E6:3F:28:86:28:EF:5A:FB:8D:AF:A4:7A:31:86:05:77:A6
            X509v3 Authority Key Identifier:
                keyid:E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:39:e4:0d:f5:03:94:6c:5e:d5:07:84:7a:19:c6:11:dd:dc:
         df:62:49:fc:29:29:59:2b:a1:7c:d6:29:3a:23:51:ea:4f:a8:
         d8:7f:ae:4f:14:fe:6e:58:88:86:91:08:19:3c:96:0b:54:03:
         bb:57:e9:6b:1d:b3:90:0d:f6:f3:7b:b0:6e:8b:c4:b4:50:b8:
         46:b4:90:cd:1f:12:4a:af:14:6e:82:77:37:a2:ba:67:21:86:
         b5:df:6b:81:49:6d:a2:a0:68:67:8c:6c:fd:e8:44:a5:01:74:
         18:2a:75:ca:d2:35:75:6b:6b:cb:c0:b5:78:2c:3e:07:ef:8d:
         21:74:dc:fc:39:4b:ce:2b:3b:32:88:55:4b:5c:c4:65:a2:ab:
         1e:70:83:dd:bc:9e:69:8b:d6:6f:c9:c0:61:5b:06:31:e7:99:
         db:4e:2d:4c:22:19:71:e8:3d:06:9d:29:6c:6d:d2:ed:44:d1:
         27:85:92:75:d0:ab:26:22:d6:80:f2:0c:ae:a2:d6:23:71:30:
         46:8f:7e:35:3d:f6:b8:dc:5a:96:c3:b0:0e:f4:bb:86:51:4e:
         0b:34:22:3f:7f:0c:6c:2e:48:f9:4f:2e:d6:11:66:43:6b:9b:
         0c:10:1c:b9:e6:7f:e1:28:7b:67:56:fb:75:cb:8b:5c:74:09:
         fc:e6:ab:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----