Manifest

$ rpki-client -vvf rpki01.hel-fi.rpki.win:44595/repo/as60900/0/C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.mft
File:                     C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.mft (raw, json)
Hash identifier:          rv+ky/rjrbeAvGft45LCEZ09lC0g/YMXswGnY38x6dc=
Subject key identifier:   35:9D:25:FC:33:D9:01:5D:A2:03:BF:5C:13:E9:A0:47:23:B3:06:E4
Authority key identifier: C8:9B:31:08:1D:5B:DD:08:D1:8F:BC:D8:FA:BE:E8:1C:4F:B0:51:46
Certificate issuer:       /CN=c89b31081d5bdd08d18fbcd8fabee81c4fb05146
Certificate serial:       3834FEDE7BD1BEFA4C523AF5443801D86D6BBB57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJsxCB1b3QjRj7zY-r7oHE-wUUY.cer
Subject info access:      rsync://rpki01.hel-fi.rpki.win:44595/repo/as60900/0/C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.mft
Manifest number:          17
Signing time:             Tue 29 Oct 2024 04:35:41 +0000
Manifest this update:     Tue 29 Oct 2024 04:30:41 +0000
Manifest next update:     Wed 30 Oct 2024 08:21:41 +0000
Files and hashes:         1: C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.crl (hash: DBM2eJst8hdxNqMqE0/L2c3NpMryp6gaAZEjycvrrFk=)

Validation:               OK
Signature path:           rsync://rpki01.hel-fi.rpki.win:44595/repo/as60900/0/C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.crl
                          rsync://rpki01.hel-fi.rpki.win:44595/repo/as60900/0/C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yJsxCB1b3QjRj7zY-r7oHE-wUUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Oct 2024 23:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:34:fe:de:7b:d1:be:fa:4c:52:3a:f5:44:38:01:d8:6d:6b:bb:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c89b31081d5bdd08d18fbcd8fabee81c4fb05146
        Validity
            Not Before: Oct 29 04:30:41 2024 GMT
            Not After : Oct 30 08:21:41 2024 GMT
        Subject: CN=359D25FC33D9015DA203BF5C13E9A04723B306E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8a:a4:d4:60:59:fb:ba:73:29:14:be:79:7f:
                    31:44:ac:ff:dc:a6:cb:8c:84:bd:1b:f9:73:15:56:
                    6b:1f:13:6c:59:e0:21:1d:94:52:c6:8e:7b:63:5d:
                    52:ba:9b:8d:af:d0:77:ce:a8:df:b8:65:c8:a1:4a:
                    c9:48:27:94:10:26:da:da:14:af:e6:2f:e2:b8:58:
                    66:cb:58:53:80:e0:e6:60:b8:64:34:85:6d:4e:14:
                    01:8d:02:63:5d:a3:fb:7f:c7:50:2d:bd:5b:92:2e:
                    b8:ea:27:f4:2b:d9:d5:45:1c:aa:50:1d:3c:a7:b3:
                    62:ad:1c:13:c0:97:cc:d5:a3:b6:f5:26:4c:b9:81:
                    d1:c5:61:64:43:2b:a4:ce:d5:92:33:a7:1c:be:c9:
                    cb:cf:9a:b1:65:01:3e:27:d4:17:25:9b:f6:cb:fa:
                    78:87:92:e2:7f:ae:62:ff:f6:a8:8e:ba:e1:ae:04:
                    db:f0:65:42:ba:8b:34:9d:89:92:76:f8:8c:1e:03:
                    80:16:e6:63:77:00:1a:63:f4:b9:a2:1c:a9:14:e4:
                    1e:0f:87:7e:37:dd:d3:73:3b:76:59:c2:fb:2e:49:
                    0b:81:32:ad:f2:55:ef:8b:6b:33:2b:7c:5f:6e:4f:
                    55:a0:e9:8e:ff:b7:3d:3c:f3:45:b8:88:3e:3c:42:
                    7e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9D:25:FC:33:D9:01:5D:A2:03:BF:5C:13:E9:A0:47:23:B3:06:E4
            X509v3 Authority Key Identifier:
                keyid:C8:9B:31:08:1D:5B:DD:08:D1:8F:BC:D8:FA:BE:E8:1C:4F:B0:51:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki01.hel-fi.rpki.win:44595/repo/as60900/0/C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJsxCB1b3QjRj7zY-r7oHE-wUUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki01.hel-fi.rpki.win:44595/repo/as60900/0/C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a8:79:b1:e2:ec:66:a9:9e:2a:f7:f0:c5:7b:22:47:2c:75:
         75:98:5e:1b:bd:06:15:3a:d1:f0:66:22:ad:d2:fa:74:a6:f2:
         66:c4:1f:50:8f:b6:22:53:55:c6:2e:83:bc:38:02:50:a9:0f:
         f8:55:28:c9:2b:34:85:1d:44:f3:fc:e5:63:67:a2:de:a4:b4:
         37:ac:01:d6:c9:12:6b:43:f2:4d:19:63:6a:19:79:11:7b:c9:
         69:41:fb:b7:eb:45:52:53:d8:f4:f2:26:d3:f1:66:d5:4d:10:
         4a:2d:c5:4b:af:7e:47:83:25:4c:a2:4a:89:f5:33:48:a9:7b:
         a6:07:db:55:9e:bb:da:3c:bc:00:26:72:7c:35:9c:db:d0:fd:
         51:99:d8:d7:80:69:9a:3e:ad:96:63:9f:20:0a:ca:98:d1:42:
         d7:c8:a3:ef:a0:c6:e3:2f:83:16:5b:f2:cf:dd:76:1e:03:5e:
         63:96:41:a6:ee:bf:9c:db:14:5e:e1:2a:36:fd:0b:12:d7:e8:
         66:b6:0e:a5:5c:b0:a5:24:d7:4a:b4:d2:97:f6:d8:6a:63:c1:
         4e:4d:63:cc:40:47:5d:7b:be:c8:06:4d:b7:5b:25:96:22:ce:
         75:da:ad:54:06:71:2a:32:b5:4c:d2:40:ab:1c:b9:a1:9a:f8:
         a6:6d:5b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----