Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
File:                     griIeR5H8Xu-ofUbnJdpd2JPBBw.mft (raw, json)
Hash identifier:          eBk2ffzvq6asLB/5gR3bKVBBshzQKwGGrjy53bEAQoU=
Subject key identifier:   7A:3B:20:DA:73:7D:E3:A5:B2:5A:6F:A9:14:0A:9D:D2:C0:63:E5:82
Authority key identifier: 82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C
Certificate issuer:       /CN=82b888791e47f17bbea1f51b9c976977624f041c
Certificate serial:       0193647B35477BB325E1D9CEF8E1EAABE84E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
Manifest number:          02F5
Signing time:             Mon 25 Nov 2024 18:00:16 +0000
Manifest this update:     Mon 25 Nov 2024 18:00:16 +0000
Manifest next update:     Tue 26 Nov 2024 18:00:16 +0000
Files and hashes:         1: griIeR5H8Xu-ofUbnJdpd2JPBBw.crl (hash: CRhjgL3lZyBRC19gbk3/NgrPvLT90drSJrfUGSJQjTk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:7b:35:47:7b:b3:25:e1:d9:ce:f8:e1:ea:ab:e8:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82b888791e47f17bbea1f51b9c976977624f041c
        Validity
            Not Before: Nov 25 18:00:16 2024 GMT
            Not After : Nov 26 18:00:16 2024 GMT
        Subject: CN=7a3b20da737de3a5b25a6fa9140a9dd2c063e582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c4:cf:27:58:00:41:f0:07:f1:19:3a:f9:61:
                    f4:5f:23:fd:7f:5b:6a:61:77:70:25:96:30:44:3a:
                    8c:ce:dc:60:78:fb:b3:1e:02:fb:2b:95:0d:26:ba:
                    06:c5:bb:d9:b4:94:2d:6b:04:5e:be:0e:8e:fd:19:
                    f1:51:b4:c5:43:95:a4:92:3a:99:f5:c3:e1:98:23:
                    a6:b9:db:98:28:5b:68:7e:2b:6b:ac:6f:ac:10:ab:
                    be:e3:ab:1f:fa:ea:82:83:fa:df:90:68:df:ec:d9:
                    53:cd:ac:fa:41:03:52:7a:93:96:fc:f2:0c:72:bb:
                    9e:87:ae:ad:81:68:cf:87:38:77:1c:54:9a:12:98:
                    8b:81:cd:40:19:a9:cf:73:c8:fd:30:d8:fc:3e:d9:
                    4b:70:98:76:26:b2:1c:fd:eb:6f:c2:f5:25:d2:a3:
                    ef:88:6b:3e:18:9c:c4:31:68:cc:86:6c:99:f3:9f:
                    61:a2:f0:a0:b8:20:c7:32:f3:ca:ab:7d:3e:c0:93:
                    15:d0:6a:63:78:6d:e5:42:10:8a:18:e0:19:de:39:
                    e6:20:66:0c:45:77:12:2c:8d:48:74:03:1e:45:c6:
                    48:06:32:15:1d:16:f2:54:2d:9e:db:24:63:e5:38:
                    8a:69:fb:56:60:f2:74:2b:88:07:94:09:0b:96:37:
                    c4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3B:20:DA:73:7D:E3:A5:B2:5A:6F:A9:14:0A:9D:D2:C0:63:E5:82
            X509v3 Authority Key Identifier:
                keyid:82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:a1:bf:dc:4f:ca:f9:24:a8:cf:4f:ed:7c:a4:a5:5a:4d:84:
         ed:80:e2:1e:6b:8d:c7:1e:38:73:cd:5d:49:ac:31:1d:1e:2f:
         42:cb:7f:b3:27:86:24:37:16:24:6b:bc:55:20:c0:fe:c7:00:
         5f:23:2a:aa:31:f8:4b:32:93:30:bd:a6:84:c7:f6:ce:a6:65:
         3d:51:00:71:bc:41:67:99:88:ee:60:ad:35:02:62:71:ca:0b:
         f8:c3:1c:5f:ac:0b:96:29:b4:68:bf:82:f9:f5:de:c8:a2:52:
         cb:68:7d:62:db:d3:88:ac:13:83:8c:b6:45:e5:ff:2d:b5:c0:
         9f:a3:77:65:9d:cd:1f:90:b1:22:89:11:d5:21:47:02:44:54:
         e9:75:b1:d1:24:49:6e:04:97:61:03:83:dd:b7:db:b0:2c:22:
         e1:f3:bb:b5:a1:63:5d:99:91:cb:5c:d3:6e:bb:74:df:01:7e:
         2e:94:5f:33:f9:49:8b:c5:5c:44:8a:23:d8:52:84:2a:a5:3f:
         b3:23:94:d3:9f:d8:53:ab:af:10:9b:94:0c:66:22:11:a0:c2:
         c0:d5:29:64:12:9e:76:b0:6a:1a:fa:fb:2c:92:d8:db:9f:88:
         38:3b:a3:b3:4c:01:ae:61:18:dd:76:99:dc:8b:ca:3c:6f:2d:
         43:cc:12:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----