Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
File:                     SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft (raw, json)
Hash identifier:          WPdepxJ552IMdku9VMeT5Zrdo1GlhZInr7FpyAT38uY=
Subject key identifier:   F1:D8:FE:A7:12:4D:08:92:AF:D4:32:B0:05:D8:22:14:56:DF:11:AB
Authority key identifier: 4B:38:1B:AA:0A:0A:DD:32:A9:F9:41:4F:9B:2C:9A:5A:32:25:34:2E
Certificate issuer:       /CN=4b381baa0a0add32a9f9414f9b2c9a5a3225342e
Certificate serial:       01936A7D70936A61A45712DF8C1ABC02C785
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
Manifest number:          0C03
Signing time:             Tue 26 Nov 2024 22:00:25 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:25 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:25 +0000
Files and hashes:         1: SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl (hash: C4MHevV5E3CJE0Hhr6CTl7c6kD5BxcOXh/DvXoD/+tM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:70:93:6a:61:a4:57:12:df:8c:1a:bc:02:c7:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b381baa0a0add32a9f9414f9b2c9a5a3225342e
        Validity
            Not Before: Nov 26 22:00:25 2024 GMT
            Not After : Nov 27 22:00:25 2024 GMT
        Subject: CN=f1d8fea7124d0892afd432b005d8221456df11ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a7:80:6a:88:a8:53:50:7a:57:38:41:b7:29:
                    71:db:7e:41:d2:6f:0d:3b:26:cf:8c:7b:d8:7c:9a:
                    f8:1e:34:13:bf:6a:8b:ff:e3:d5:14:22:23:a4:d5:
                    a2:11:e5:29:66:57:13:aa:4e:21:b9:7d:8f:1f:ee:
                    bf:db:e8:eb:83:f2:3b:35:14:23:7e:f3:10:72:e1:
                    d9:0c:56:28:06:55:b2:a2:13:e8:04:46:e6:02:49:
                    76:44:c6:6e:23:01:a3:ac:9e:3d:ac:5a:b6:3a:8a:
                    3c:1e:86:24:ae:7f:24:ab:ff:dc:fb:54:89:6e:f2:
                    57:1b:29:3e:03:f6:25:07:05:1f:b8:d6:f0:d0:a9:
                    75:36:a3:04:43:92:45:f9:23:95:5a:9d:48:69:e6:
                    c5:3b:aa:05:16:7e:be:86:06:ca:86:66:29:31:d4:
                    83:b5:9b:f4:f8:26:2b:f0:7a:ab:36:9d:6a:af:23:
                    d8:17:da:de:89:32:65:e0:bb:ba:e3:d1:0f:fd:d3:
                    2f:fd:f3:a1:50:1e:c6:c1:e8:f6:a2:eb:97:67:c2:
                    9f:2d:ef:75:27:37:e3:e0:58:c5:68:2b:f9:24:5d:
                    88:d2:1e:9d:7d:f4:87:08:3f:39:e8:80:f2:90:d4:
                    d7:25:7a:5c:80:f5:d3:19:bf:3c:75:96:f4:c6:da:
                    57:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D8:FE:A7:12:4D:08:92:AF:D4:32:B0:05:D8:22:14:56:DF:11:AB
            X509v3 Authority Key Identifier:
                keyid:4B:38:1B:AA:0A:0A:DD:32:A9:F9:41:4F:9B:2C:9A:5A:32:25:34:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c4:27:09:06:7c:dc:f2:f4:8d:98:e5:5b:98:08:cf:c8:7d:
         a7:61:21:5b:b3:d0:be:ee:05:aa:0f:3a:24:c4:22:17:55:7c:
         7b:ea:0f:3c:71:92:83:3e:3c:95:85:4e:e1:86:29:28:18:15:
         ff:6e:33:6a:90:d6:51:2f:c2:e5:e6:03:27:80:36:70:a4:0e:
         6b:00:f7:c8:24:f7:f0:93:29:9d:cf:63:a5:4d:a4:2e:8c:04:
         a5:9e:3f:e6:d7:1d:63:91:38:22:04:76:0a:66:81:d4:f5:15:
         41:c2:2f:78:a1:b3:03:82:41:c6:f1:5c:a9:4f:bd:cf:48:24:
         57:1c:9f:26:18:e8:61:3c:c2:71:7f:42:bc:82:8e:c1:26:e0:
         bc:6d:0c:45:2d:40:02:b3:3a:5e:d1:ea:49:b3:e6:d5:e9:29:
         4e:29:a2:3c:33:a5:b9:04:4e:fb:a4:35:df:c5:37:d3:c4:15:
         fa:be:a4:87:3d:7c:a2:3b:4e:f8:96:57:1f:ca:e8:c6:a0:5e:
         49:0d:6e:f5:81:14:0f:79:02:56:50:a9:bd:4a:49:cd:46:fe:
         8f:d0:70:b4:42:5b:a4:0c:55:b6:0f:bd:54:f3:25:f2:63:4b:
         e7:f4:b5:80:12:72:7d:c0:1b:89:4c:21:87:0a:33:d5:bc:e6:
         73:59:f9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----