Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.mft
File:                     MFTtpIzl_KSJJbrLoUeMisotOcw.mft (raw, json)
Hash identifier:          /Zp+1Tnh/YUULO/Dd7ln8Pcf8HGd0XL0NMASp9f6CLo=
Subject key identifier:   92:DE:E1:6B:79:84:58:42:73:08:A7:C2:17:45:CD:B8:3A:29:A0:BB
Authority key identifier: 30:54:ED:A4:8C:E5:FC:A4:89:25:BA:CB:A1:47:8C:8A:CA:2D:39:CC
Certificate issuer:       /CN=3054eda48ce5fca48925bacba1478c8aca2d39cc
Certificate serial:       0194BABBC6C6195B3E78FB5047F0767E8DF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MFTtpIzl_KSJJbrLoUeMisotOcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.mft
Manifest number:          134D
Signing time:             Fri 31 Jan 2025 05:00:55 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:55 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:55 +0000
Files and hashes:         1: MFTtpIzl_KSJJbrLoUeMisotOcw.crl (hash: yR4iXnSwA6SHbqBgfR91cqMffh5g6N5VslTmx77/hSI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MFTtpIzl_KSJJbrLoUeMisotOcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:c6:c6:19:5b:3e:78:fb:50:47:f0:76:7e:8d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3054eda48ce5fca48925bacba1478c8aca2d39cc
        Validity
            Not Before: Jan 31 05:00:55 2025 GMT
            Not After : Feb  1 05:00:55 2025 GMT
        Subject: CN=92dee16b798458427308a7c21745cdb83a29a0bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:70:ad:98:64:4e:42:d8:81:69:5f:6b:70:
                    23:b1:5c:62:9f:a9:a2:86:e1:73:e7:23:78:1d:36:
                    92:25:c8:bd:ba:3d:b2:b0:0a:68:40:b0:31:7f:17:
                    14:1b:cb:dc:dd:0a:91:74:2e:4c:f3:1d:f2:53:9c:
                    50:34:09:7c:fe:db:6b:a0:89:8b:c6:02:cc:88:3f:
                    0f:37:0c:fc:9e:40:c4:72:dc:7d:2e:37:fb:a0:26:
                    96:4e:dd:6d:b8:c2:e5:dd:48:95:92:f8:f3:6f:90:
                    f7:ec:e2:c7:ab:40:34:f6:67:e0:33:0c:92:ee:71:
                    a5:d9:37:dd:58:b8:7a:4d:49:83:31:97:e2:f2:68:
                    77:b6:65:ed:53:bf:5c:a2:17:c4:3e:dc:41:d2:ba:
                    a9:9e:d5:54:1d:0e:4d:82:8c:78:53:39:f6:50:16:
                    48:70:44:56:e4:f5:f5:b8:2d:32:ad:3c:5c:f6:de:
                    a6:92:1d:06:7f:c4:27:81:83:ed:c0:c2:35:c8:e3:
                    77:14:fa:24:89:e0:5e:44:7c:57:1b:8e:f9:65:7a:
                    1a:3c:6a:b3:f2:0d:fe:9d:37:86:81:0d:1b:5c:04:
                    31:be:33:7f:e4:89:50:f0:28:cc:d6:b7:20:2c:d2:
                    50:3d:7e:22:32:f9:b9:d9:e2:8b:c8:e7:52:a2:bf:
                    c3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DE:E1:6B:79:84:58:42:73:08:A7:C2:17:45:CD:B8:3A:29:A0:BB
            X509v3 Authority Key Identifier:
                keyid:30:54:ED:A4:8C:E5:FC:A4:89:25:BA:CB:A1:47:8C:8A:CA:2D:39:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFTtpIzl_KSJJbrLoUeMisotOcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/89ba09-95e2-4fbe-98bd-722ce4030aa1/1/MFTtpIzl_KSJJbrLoUeMisotOcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:9a:4a:88:2c:78:f3:b6:53:95:a8:5d:83:d0:44:f6:e3:6b:
         da:21:09:23:10:95:c9:dc:d5:8e:a1:0a:62:fd:e0:56:8f:a9:
         b2:43:5d:a5:8f:39:80:fa:63:86:93:30:68:92:ca:f4:ee:56:
         17:1a:0f:1d:b9:c5:f2:af:50:cd:1b:eb:df:71:20:ea:7f:f8:
         4e:00:00:1f:5f:bc:88:a5:70:83:b9:df:b0:1f:f7:41:50:b7:
         92:a0:c3:43:7d:de:8a:18:6b:9d:8e:a6:6a:40:c9:c6:f5:f8:
         56:d5:cd:ad:f6:f6:d2:b5:77:c5:60:b7:42:eb:99:20:7e:f9:
         6d:bc:c5:bf:45:ff:51:8c:23:82:91:42:3d:f7:43:01:65:50:
         76:05:15:02:df:00:9e:e9:93:33:d5:ad:55:4a:4b:01:bf:dc:
         a6:c9:d5:0c:ff:12:7c:81:11:80:be:0d:63:fd:83:45:c4:8f:
         d8:ef:10:1b:6b:25:49:b8:b1:d4:b8:0b:5b:4f:17:af:ea:9d:
         b7:2b:fc:ab:58:c0:f6:ae:67:4b:0f:2a:8b:e0:81:07:39:f6:
         90:03:e2:03:d9:05:47:e3:56:5c:ce:60:f0:0e:ba:ce:e6:27:
         84:f6:3f:9e:1f:e3:59:8a:38:f9:c5:67:77:ec:7b:67:79:e5:
         65:5f:58:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----