Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft
File:                     Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft (raw, json)
Hash identifier:          mfEiO0ckriZnmIXR3vXF8eu/sZ9mWvLbqALcGeR8bQI=
Subject key identifier:   14:B1:D0:7A:02:81:39:A3:69:AE:BD:2D:41:C1:43:46:92:5A:61:75
Authority key identifier: 12:29:FE:67:7F:47:DF:0F:D7:CC:34:95:F1:72:D9:3B:3C:BA:0E:00
Certificate issuer:       /CN=1229fe677f47df0fd7cc3495f172d93b3cba0e00
Certificate serial:       01901BFDA5980FFB920B18A746EB4DFAB1E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ein-Z39H3w_XzDSV8XLZOzy6DgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft
Manifest number:          0A2D
Signing time:             Sat 15 Jun 2024 13:02:06 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:06 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:06 +0000
Files and hashes:         1: Ein-Z39H3w_XzDSV8XLZOzy6DgA.crl (hash: QwQ1J5mNxit2XamOUty42CZwJyTjKfs9THGkjmymG08=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ein-Z39H3w_XzDSV8XLZOzy6DgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:a5:98:0f:fb:92:0b:18:a7:46:eb:4d:fa:b1:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1229fe677f47df0fd7cc3495f172d93b3cba0e00
        Validity
            Not Before: Jun 15 13:02:06 2024 GMT
            Not After : Jun 16 13:02:06 2024 GMT
        Subject: CN=14b1d07a028139a369aebd2d41c14346925a6175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8c:9e:0e:bd:d5:fe:8d:c7:b1:9c:fd:50:a3:
                    f4:5f:33:ec:42:bb:0b:85:f9:89:23:9e:bb:13:58:
                    e5:12:03:e6:c3:d0:b1:01:39:5e:40:40:23:d2:24:
                    66:21:8c:e0:17:aa:90:6f:9c:70:f9:66:99:c0:a3:
                    43:b5:78:2d:a5:55:a2:fc:d0:b2:e1:b8:4a:41:95:
                    ec:7f:0b:99:ce:6d:fe:e5:e7:fe:2e:88:75:1d:06:
                    57:cf:84:f4:37:59:38:a9:5a:21:7f:ab:24:d8:cc:
                    ee:ed:16:b0:f6:d2:0a:05:b2:7b:9f:85:b4:63:52:
                    8d:47:99:e8:b3:45:32:67:bf:ad:de:16:3b:cc:dc:
                    91:d2:6e:92:8c:76:23:89:90:35:59:6e:b0:ef:56:
                    88:44:78:56:3f:1d:84:45:1b:ff:e2:c2:43:0a:d6:
                    a9:90:91:39:79:51:98:f9:0f:b0:16:db:e5:66:62:
                    61:11:87:c9:a3:33:ec:b9:1a:a4:c7:b7:f8:d1:ce:
                    d7:1a:fa:a4:48:5c:72:60:8d:2f:3c:6d:7f:16:85:
                    7f:d2:86:83:cc:d0:73:17:dd:fa:d0:28:c9:08:c8:
                    75:6d:23:06:30:59:c2:c9:3d:f7:4f:5c:ba:0d:5f:
                    f1:8e:f6:52:ec:76:3f:b3:f1:67:61:1b:6a:11:40:
                    03:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B1:D0:7A:02:81:39:A3:69:AE:BD:2D:41:C1:43:46:92:5A:61:75
            X509v3 Authority Key Identifier:
                keyid:12:29:FE:67:7F:47:DF:0F:D7:CC:34:95:F1:72:D9:3B:3C:BA:0E:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ein-Z39H3w_XzDSV8XLZOzy6DgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:41:44:17:fd:d1:82:f6:7a:24:b8:ce:2c:66:cf:82:fa:be:
         d5:3b:49:a3:23:35:c5:de:87:cc:22:f9:6b:97:f0:06:40:61:
         b8:70:fe:a1:5f:02:43:f7:88:5e:aa:1e:12:51:be:1b:3e:4f:
         69:5a:7c:f8:f0:99:b5:05:2b:16:e5:41:a9:58:8c:aa:e0:97:
         bf:40:73:cb:99:0e:9a:bc:d0:98:48:ef:cf:1c:ac:ff:2e:7f:
         92:8d:71:6e:5b:cb:18:70:c2:e0:fb:a9:33:8e:be:8c:17:0a:
         9d:9c:a0:5f:16:f2:87:81:09:a6:53:5a:65:52:22:3a:3c:bc:
         fd:0c:a8:9a:14:11:21:b3:fe:86:9e:58:e5:ef:37:b5:8e:92:
         04:c7:17:95:1f:57:d5:19:f7:44:67:66:6d:e6:0a:90:05:10:
         be:5c:cc:d5:8b:6e:70:2f:a8:c2:32:d7:80:3a:07:4d:73:e8:
         58:24:d7:1b:ab:69:e2:ea:61:de:4a:77:18:eb:a4:ad:33:b7:
         7e:87:cf:2f:e3:d8:be:97:4a:2b:c2:cc:46:a2:06:12:ba:84:
         72:f9:f1:76:93:b2:ca:25:bc:db:f0:8a:e0:2f:81:0a:5c:05:
         d5:f0:d4:be:e7:0c:55:40:a6:de:72:20:44:9b:6f:0d:5c:0b:
         af:17:0d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----