Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
File:                     sworSE4m8w01_YKjRCf_IgHLUAM.mft (raw, json)
Hash identifier:          rjaHvEVqVT0IsQOK5MJzLuSSvCJ1sWeMNaD9lLb/4MQ=
Subject key identifier:   E0:A3:F1:DE:E5:F5:C7:B0:58:A7:0A:F6:8B:52:2D:3F:48:6D:93:C6
Authority key identifier: B3:0A:2B:48:4E:26:F3:0D:35:FD:82:A3:44:27:FF:22:01:CB:50:03
Certificate issuer:       /CN=b30a2b484e26f30d35fd82a34427ff2201cb5003
Certificate serial:       019359C0FAB0D31617A28D9258B58EA8B411
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 16:00:39 +0000
Manifest this update:     Sat 23 Nov 2024 16:00:39 +0000
Manifest next update:     Sun 24 Nov 2024 16:00:39 +0000
Files and hashes:         1: sworSE4m8w01_YKjRCf_IgHLUAM.crl (hash: oG+StuOdZXPfV44bpeuGvyv2z5ENpnCBlS/3rA1LiCI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:c0:fa:b0:d3:16:17:a2:8d:92:58:b5:8e:a8:b4:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30a2b484e26f30d35fd82a34427ff2201cb5003
        Validity
            Not Before: Nov 23 16:00:39 2024 GMT
            Not After : Nov 24 16:00:39 2024 GMT
        Subject: CN=e0a3f1dee5f5c7b058a70af68b522d3f486d93c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ff:29:7c:ac:2d:e9:b3:16:36:ee:9e:de:55:
                    8a:1f:40:77:94:40:1f:a2:1a:95:17:fa:cc:cf:8c:
                    0f:98:7e:17:21:b0:c7:e6:c2:3a:11:76:71:8e:90:
                    31:9d:db:e6:f5:87:c7:62:bc:6c:9a:48:77:0e:81:
                    1e:5f:37:67:f0:10:ef:ec:10:fb:ff:29:ca:99:1c:
                    0b:bc:f3:31:c4:db:18:04:97:17:36:a2:64:5a:a8:
                    0e:81:39:f3:7f:f5:6e:04:99:2f:52:a9:46:29:41:
                    80:14:2c:05:d4:81:3a:8d:81:e7:65:78:cb:b2:7a:
                    27:20:1f:c7:12:81:9c:26:08:2d:6d:ca:13:24:34:
                    05:71:10:39:18:e1:e7:2e:28:43:d3:85:80:3b:f9:
                    a7:86:f2:9f:59:fc:b1:57:c8:f7:48:b0:2c:99:89:
                    2d:22:dd:cc:9f:92:03:69:a1:7b:8a:39:fc:54:a9:
                    d8:fc:35:f0:be:f3:e4:dd:3f:f6:ea:f5:a4:81:ec:
                    0a:7f:90:76:53:15:a1:65:5f:64:0a:c5:9d:53:07:
                    a1:5a:40:32:b7:26:45:d3:39:81:32:77:77:f1:aa:
                    82:cc:b2:3d:47:3c:e0:4d:fe:8f:4a:ef:07:ac:6b:
                    b7:d9:1c:56:90:ba:8c:99:00:87:5d:99:1f:2a:c6:
                    8d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A3:F1:DE:E5:F5:C7:B0:58:A7:0A:F6:8B:52:2D:3F:48:6D:93:C6
            X509v3 Authority Key Identifier:
                keyid:B3:0A:2B:48:4E:26:F3:0D:35:FD:82:A3:44:27:FF:22:01:CB:50:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sworSE4m8w01_YKjRCf_IgHLUAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f69912-03b6-408c-a2c4-3a0467d5f105/1/sworSE4m8w01_YKjRCf_IgHLUAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:41:1b:09:e2:57:fa:43:46:8e:05:de:01:c0:da:15:f4:cb:
         db:79:a8:e4:cd:e6:5c:51:35:e3:ec:c3:91:d9:4a:ad:d6:64:
         f6:6d:96:d8:0c:0b:0c:7c:e5:0c:69:86:12:c5:69:e5:7e:4d:
         4d:a6:a1:a9:90:15:e7:71:13:cb:ab:b1:4b:54:b6:e8:df:bc:
         ad:77:9e:c5:75:58:ad:90:cb:b5:8c:c1:e3:2e:8d:72:c9:e4:
         94:c8:a6:72:ff:42:b9:6e:a6:3e:10:46:7c:59:bf:09:c5:4c:
         44:ab:ee:ca:28:ed:2a:00:2c:c4:27:34:fd:40:8a:65:d3:e8:
         0b:c0:36:eb:ff:c2:0c:25:4d:72:0a:d7:3d:9f:e5:ca:62:5f:
         cd:6d:28:15:de:0c:ac:5b:c9:bc:e2:5b:1b:24:ba:16:e6:0f:
         4f:bd:04:c8:0f:eb:7d:ad:ae:31:f7:06:98:d6:7d:e9:ea:10:
         a6:10:54:6d:49:e6:68:fc:8c:d2:f3:0f:c8:2d:20:e5:8e:6e:
         c3:d3:69:e3:f4:d7:18:0f:0b:82:f8:1a:ce:35:b5:28:ef:17:
         e2:8f:05:2e:79:dc:6b:9e:ee:a5:f6:72:eb:24:68:94:e4:7e:
         39:6e:38:de:a3:3c:16:14:fd:38:ee:66:ef:c7:d6:79:ed:38:
         bc:39:74:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----