Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.mft
File:                     627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.mft (raw, json)
Hash identifier:          ExZo9Vx4P8g4ltUTdO/K0ucvSgr2ECRmnTHuAIDLpPI=
Subject key identifier:   AA:E4:B5:89:CE:6E:79:35:3E:58:02:D4:6E:C3:46:A3:63:2D:77:1F
Authority key identifier: 62:72:88:B3:A2:F2:58:73:AA:73:90:6D:D3:7B:AF:FF:0B:1E:F5:DE
Certificate issuer:       /CN=627288b3a2f25873aa73906dd37bafff0b1ef5de
Certificate serial:       024C4EF60E1CEBA0A9481FA360433612A0043EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YnKIs6LyWHOqc5Bt03uv_wse9d4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.mft
Manifest number:          0280
Signing time:             Fri 22 Nov 2024 03:37:34 +0000
Manifest this update:     Fri 22 Nov 2024 03:32:34 +0000
Manifest next update:     Sat 23 Nov 2024 07:34:34 +0000
Files and hashes:         1: 627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.crl (hash: enhHuQd0wybSe0FoNsmwhK+K/usHihBj0NWePw9gHDM=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YnKIs6LyWHOqc5Bt03uv_wse9d4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:4c:4e:f6:0e:1c:eb:a0:a9:48:1f:a3:60:43:36:12:a0:04:3e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=627288b3a2f25873aa73906dd37bafff0b1ef5de
        Validity
            Not Before: Nov 22 03:32:34 2024 GMT
            Not After : Nov 23 07:34:34 2024 GMT
        Subject: CN=AAE4B589CE6E79353E5802D46EC346A3632D771F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:81:12:3f:45:a3:10:3c:96:bc:12:55:df:6e:
                    41:2a:c6:0d:4b:fe:f6:b1:c1:0a:54:8a:c8:ee:b0:
                    a3:38:8f:cb:99:b3:b0:ba:80:c6:e1:76:a7:dd:a2:
                    18:44:1c:89:60:a9:68:04:1b:df:3e:59:21:45:0e:
                    9d:d6:a0:4f:ed:1d:4b:ec:73:a8:24:fa:f8:54:3f:
                    f2:8d:6a:6f:1b:d3:29:81:3a:7f:88:ec:53:a5:cf:
                    b2:5a:94:af:08:c8:5e:08:48:98:15:26:4c:97:37:
                    5e:5c:1b:44:20:bc:ab:44:19:43:64:23:e4:04:e1:
                    33:1f:2f:7c:0c:5e:38:ee:ff:98:3d:07:98:3e:c2:
                    15:31:ed:54:01:22:a3:25:f1:1d:54:42:e4:03:38:
                    ec:3d:e0:4e:ff:56:8c:57:9e:6c:68:64:fe:84:43:
                    57:07:cc:b3:52:38:fc:67:59:ba:ce:75:1e:17:21:
                    6d:36:0e:10:2a:8d:d8:34:04:7f:ca:a8:26:e3:03:
                    31:28:57:4c:8d:d2:4a:f9:04:be:24:07:a3:aa:f8:
                    ab:2d:35:9e:39:5f:ea:3c:38:ef:ef:dc:af:21:d6:
                    46:88:1e:fa:be:80:56:b0:9a:f1:d5:fe:df:02:9d:
                    13:5f:99:d1:13:36:ae:b5:8e:e7:cc:76:13:e0:4c:
                    81:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E4:B5:89:CE:6E:79:35:3E:58:02:D4:6E:C3:46:A3:63:2D:77:1F
            X509v3 Authority Key Identifier:
                keyid:62:72:88:B3:A2:F2:58:73:AA:73:90:6D:D3:7B:AF:FF:0B:1E:F5:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnKIs6LyWHOqc5Bt03uv_wse9d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:76:2a:6d:fc:2d:c4:89:41:cf:2b:74:b6:07:bf:13:eb:84:
         2c:65:a0:2c:66:e6:09:45:ac:69:49:60:c6:b0:62:3d:b1:be:
         ed:41:76:e6:25:98:64:a6:52:66:dd:74:9a:32:07:0d:7f:fa:
         03:4b:ce:10:8f:2e:aa:66:66:73:76:fd:99:ec:16:45:6a:4b:
         e4:61:3b:ec:85:bf:ae:0b:9e:00:cb:1c:14:4f:91:6f:a6:47:
         97:ef:72:1d:c4:09:02:f7:80:78:44:13:30:33:c9:b3:0c:4d:
         b5:92:07:de:d4:31:78:00:0d:15:81:1b:1f:a6:d0:3b:3e:9e:
         28:33:6d:f1:2c:1a:a1:8f:33:eb:63:cb:f4:b9:67:bb:f3:c2:
         0f:bb:fe:dd:10:02:c9:38:87:54:77:2f:41:d7:1e:de:11:df:
         e2:41:2b:a0:58:e5:c5:aa:56:2f:a5:dd:17:28:6e:36:00:20:
         ed:2f:91:b2:97:3d:af:80:11:f2:d6:c1:c5:ca:cb:15:b9:ea:
         80:05:14:d1:74:a0:ce:35:2e:66:0f:c1:b0:69:84:06:95:c9:
         3a:33:aa:55:03:40:ce:ce:12:67:42:4a:db:7c:d7:02:d6:01:
         e0:fa:90:b9:0b:6e:9d:5c:31:f0:95:c2:38:80:2a:e5:43:ae:
         36:d0:6f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----