Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
File:                     E93mmrzMZdCGiMqDVCYzohkpMic.mft (raw, json)
Hash identifier:          oueCCVnI8duXm4Mv1ljBAFM+sWt1LlSOtxOq26eyRyg=
Subject key identifier:   3E:D2:D7:87:54:F1:8E:4F:25:B0:D8:2E:8B:89:3D:FE:76:26:C1:56
Authority key identifier: 13:DD:E6:9A:BC:CC:65:D0:86:88:CA:83:54:26:33:A2:19:29:32:27
Certificate issuer:       /CN=13dde69abccc65d08688ca83542633a219293227
Certificate serial:       019359C154D75B9F5E561A6D2149C5436753
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
Manifest number:          099F
Signing time:             Sat 23 Nov 2024 16:01:02 +0000
Manifest this update:     Sat 23 Nov 2024 16:01:02 +0000
Manifest next update:     Sun 24 Nov 2024 16:01:02 +0000
Files and hashes:         1: E93mmrzMZdCGiMqDVCYzohkpMic.crl (hash: i7kthNpOGu/o0C/7CuWPAcEkU2//xJCw+BaK3YcRoeM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:c1:54:d7:5b:9f:5e:56:1a:6d:21:49:c5:43:67:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13dde69abccc65d08688ca83542633a219293227
        Validity
            Not Before: Nov 23 16:01:02 2024 GMT
            Not After : Nov 24 16:01:02 2024 GMT
        Subject: CN=3ed2d78754f18e4f25b0d82e8b893dfe7626c156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bb:bd:3a:82:e6:9b:ba:6f:25:7d:07:f6:88:
                    89:89:ac:de:65:97:43:f1:5d:d6:43:22:aa:e9:c7:
                    e4:06:38:7a:b7:2d:ea:c7:25:30:82:b5:c7:6b:f5:
                    ed:59:c3:42:66:68:99:cd:bb:01:08:0f:a7:63:17:
                    97:76:3f:fb:1e:7d:84:b4:c7:1d:52:4f:46:df:23:
                    ba:2d:1b:1e:a3:97:54:ee:8e:c6:f8:b0:b2:b4:b5:
                    f1:20:2b:22:ad:57:1a:17:22:fc:56:5b:f9:9e:e5:
                    30:0b:36:02:b7:c9:d1:b8:7b:46:d3:74:32:b7:de:
                    3f:aa:b8:ba:c4:63:0b:f6:68:1a:68:9d:73:bb:81:
                    25:97:b7:f5:a9:52:f5:ff:43:cf:3b:de:17:d0:b3:
                    8e:0e:43:5d:8c:0f:3f:e6:b1:45:4d:a4:90:35:5a:
                    2d:d1:75:53:f3:6e:5b:51:3e:30:43:81:23:0a:92:
                    39:00:3e:d6:03:e6:12:b6:ed:e7:8e:5b:92:6c:f7:
                    a4:2d:bb:25:b1:00:b5:18:b7:0b:da:be:b6:c0:c4:
                    2e:d0:44:e2:12:38:29:5e:b2:27:52:5c:96:75:87:
                    47:e3:25:56:ed:d0:86:37:a1:aa:a6:8d:f9:9f:82:
                    04:57:67:e4:43:f6:e0:f8:72:58:5c:b3:39:8b:64:
                    7b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D2:D7:87:54:F1:8E:4F:25:B0:D8:2E:8B:89:3D:FE:76:26:C1:56
            X509v3 Authority Key Identifier:
                keyid:13:DD:E6:9A:BC:CC:65:D0:86:88:CA:83:54:26:33:A2:19:29:32:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:91:28:eb:11:98:3b:5d:f2:4f:71:c4:d2:50:cb:c0:14:e1:
         97:73:49:99:e9:58:ab:13:16:5b:f5:f4:a6:69:4e:d7:2f:4c:
         b7:e1:9d:6a:40:79:ae:67:f8:87:e9:fe:6e:8c:fa:db:54:8c:
         2a:9b:4e:ec:e2:9b:fc:d4:3a:6d:ec:2f:b6:cf:7f:f8:50:a4:
         48:31:90:cd:a5:25:2b:3b:f2:eb:d8:c1:e9:e7:13:bc:aa:79:
         63:07:29:84:cc:32:0d:d5:4f:10:3f:91:42:a2:90:02:5c:5d:
         01:a7:fd:e3:08:17:09:74:7b:d1:d4:0a:2c:ba:fc:26:2c:dc:
         05:ef:a5:52:06:6a:c4:9f:76:cb:e8:14:9c:e1:b1:41:eb:b6:
         0b:0d:9b:eb:1e:2b:19:e3:8c:e6:47:50:f8:2b:99:a6:10:52:
         82:58:8e:92:3d:44:f7:eb:d9:8f:4c:ef:40:28:17:c6:f6:f7:
         c8:5b:c9:80:95:8a:a8:07:a0:0e:4e:eb:82:36:17:e7:00:24:
         5e:9b:da:b1:1e:e9:01:90:cd:6d:ef:06:0f:58:c1:7b:9b:87:
         96:83:e8:45:a7:5c:9c:12:5f:68:4e:56:69:e3:4c:74:ed:ea:
         ea:3d:66:f5:ef:15:3c:35:00:68:08:e4:df:ef:e6:ee:41:97:
         0a:9d:10:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----