Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
File:                     7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft (raw, json)
Hash identifier:          4Nm+M6zZmcwWdEJ3ns1vaj/sGFaqJ7W5L4+LK3O9PhE=
Subject key identifier:   1F:84:8E:5C:FE:FA:F2:6C:2F:7C:2B:40:71:38:11:04:C0:C4:1C:B8
Authority key identifier: EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
Certificate issuer:       /CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Certificate serial:       01901C6A969E15C6F98D65C6AE05ECBF53A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
Manifest number:          0647
Signing time:             Sat 15 Jun 2024 15:01:05 +0000
Manifest this update:     Sat 15 Jun 2024 15:01:05 +0000
Manifest next update:     Sun 16 Jun 2024 15:01:05 +0000
Files and hashes:         1: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl (hash: lfT0GlJ1yLlE9wPKIuDV0QAY0vRGb+HMdJUc8FDXN3c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:96:9e:15:c6:f9:8d:65:c6:ae:05:ec:bf:53:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
        Validity
            Not Before: Jun 15 15:01:05 2024 GMT
            Not After : Jun 16 15:01:05 2024 GMT
        Subject: CN=1f848e5cfefaf26c2f7c2b4071381104c0c41cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:05:4a:d7:fc:a0:50:3d:ba:50:20:3f:91:df:
                    cf:b7:75:6e:15:d3:6c:88:bd:28:88:ae:03:06:ee:
                    b9:70:82:1d:cd:18:65:ba:c5:24:fe:85:84:9b:60:
                    08:60:51:07:18:27:d5:d5:61:ed:1c:93:88:fe:25:
                    74:01:5e:8c:7a:30:4a:9e:db:c0:0a:d2:f3:87:2b:
                    45:c9:bc:d0:2f:26:ca:09:e8:a6:2a:d3:18:5d:3d:
                    32:0a:77:07:d2:3f:9d:08:c1:9b:d3:52:51:74:4e:
                    7e:97:d1:ad:16:79:93:25:f3:6c:8a:d5:f7:4d:ad:
                    1f:3d:da:ad:f1:f1:51:5e:4f:1d:84:74:d4:6a:f3:
                    89:ac:16:1c:8e:81:20:b1:2c:21:58:03:f8:26:1e:
                    b3:60:c7:29:36:1e:22:e5:1a:d3:c2:5c:39:41:31:
                    2a:ab:52:44:2b:07:a5:b7:4d:a4:62:01:61:53:ba:
                    5e:b0:06:2d:a3:fe:1d:61:67:59:6e:e2:5b:c3:ef:
                    df:a2:a1:0c:d8:fa:a0:65:36:bf:8b:1f:42:18:13:
                    5a:14:dc:81:59:8d:b0:73:56:ae:4e:99:7c:ba:f9:
                    7b:30:cd:20:29:17:1f:82:9e:57:2d:b5:1c:ec:54:
                    d6:df:bd:07:da:18:55:b5:86:e3:19:c8:ae:4f:f1:
                    3e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:84:8E:5C:FE:FA:F2:6C:2F:7C:2B:40:71:38:11:04:C0:C4:1C:B8
            X509v3 Authority Key Identifier:
                keyid:EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:55:57:26:1c:74:46:33:4e:31:83:02:75:45:b9:ca:48:b2:
         00:23:ca:02:f5:0f:7b:2d:7b:de:7f:55:4d:05:69:b8:80:8f:
         fc:cd:71:87:2a:c0:b3:e4:ef:6b:7d:b0:53:3b:14:27:4d:1a:
         b6:75:99:fc:84:10:f1:16:5d:b3:45:d5:84:40:0f:67:3f:c7:
         69:19:07:d9:d0:f8:83:f1:54:24:ce:18:9f:42:bb:a7:cc:cc:
         0f:88:ee:4a:65:b0:73:93:14:26:bd:f4:23:06:0c:4f:5d:ad:
         fc:59:0d:b9:6e:b5:11:59:a7:19:15:e4:1f:15:4f:bf:a6:69:
         f6:12:9f:96:d2:2b:f7:60:20:f9:f1:58:41:9b:89:ed:41:45:
         2a:9a:d4:b1:a7:0a:6a:50:b2:0c:5e:8d:e9:f7:79:33:57:2a:
         c9:18:34:c2:0a:f7:b3:41:60:89:e1:a4:fb:6a:79:9a:85:5f:
         e8:90:65:d0:87:b1:58:0c:81:55:63:be:59:e5:34:e4:ab:d8:
         79:72:d9:d2:2c:bc:d4:a0:26:b0:d9:fc:55:22:ea:4f:46:a0:
         80:b6:38:04:14:2c:98:00:ed:6b:b5:06:79:b6:30:8c:8e:e1:
         7a:c4:45:73:85:41:c3:be:7e:0c:c3:43:a8:e4:5c:e1:d7:0b:
         51:02:67:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----