Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
File:                     Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft (raw, json)
Hash identifier:          oCdJkFluVhT/EciHsRDoM+2aPAdIqDAOU6Ad9v+BiOk=
Subject key identifier:   A0:B7:21:ED:63:50:19:DE:09:71:71:BE:F3:3A:A3:5D:7B:EC:96:D8
Authority key identifier: 1E:DC:3A:97:F1:CC:AE:F7:F1:08:69:91:CF:7B:10:A4:10:CE:19:42
Certificate issuer:       /CN=1edc3a97f1ccaef7f1086991cf7b10a410ce1942
Certificate serial:       01936B22968CB708B1741C5098EC6B4D35B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
Manifest number:          128E
Signing time:             Wed 27 Nov 2024 01:00:48 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:48 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:48 +0000
Files and hashes:         1: Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl (hash: lLswYW84eF5NMG4Tgfdtun7buCZt3HItae3QCyhkoao=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:96:8c:b7:08:b1:74:1c:50:98:ec:6b:4d:35:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1edc3a97f1ccaef7f1086991cf7b10a410ce1942
        Validity
            Not Before: Nov 27 01:00:48 2024 GMT
            Not After : Nov 28 01:00:48 2024 GMT
        Subject: CN=a0b721ed635019de097171bef33aa35d7bec96d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1a:54:f4:b3:1b:34:7b:16:db:b2:61:ed:72:
                    2e:1d:e3:39:85:63:2c:5b:bb:66:48:4f:ef:4e:d2:
                    fa:9b:73:83:b2:e0:43:83:63:30:86:a8:12:ad:c8:
                    63:0d:ae:6a:15:7c:40:05:6e:f7:90:09:5d:bf:b9:
                    3f:18:6d:2e:4f:50:b8:33:ea:e9:69:c2:6a:dc:63:
                    7c:27:69:27:a7:15:ea:a4:e4:16:8c:42:a3:82:bd:
                    d5:dc:72:55:75:dd:99:b5:ea:00:cc:84:84:fd:27:
                    a7:36:63:8d:e2:c9:e8:b0:37:91:08:c5:d2:c4:c2:
                    e0:3a:bf:bf:a5:18:b4:2e:d7:a6:d7:dc:fb:8c:b9:
                    28:42:61:d4:70:19:6a:56:a1:cc:68:c8:6c:46:92:
                    83:1c:8d:9b:9f:5c:fa:b0:45:b7:cb:33:62:79:d0:
                    0d:f3:04:43:cf:a3:1b:db:f4:a7:a5:27:56:1c:40:
                    9f:bf:b6:ba:f4:c5:58:4c:a0:78:cc:2f:01:d7:0b:
                    48:9d:a9:90:3f:da:ab:d4:1d:5c:46:38:51:55:04:
                    3b:d4:5c:67:fe:cd:ba:fc:f9:b2:66:be:34:d7:99:
                    7b:a9:20:db:b6:4d:3e:1b:68:fc:7d:8b:83:29:88:
                    f8:27:61:36:ad:ee:6f:d0:1a:66:8a:08:e7:61:0d:
                    6b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B7:21:ED:63:50:19:DE:09:71:71:BE:F3:3A:A3:5D:7B:EC:96:D8
            X509v3 Authority Key Identifier:
                keyid:1E:DC:3A:97:F1:CC:AE:F7:F1:08:69:91:CF:7B:10:A4:10:CE:19:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:3b:c5:df:0d:5c:91:25:d2:2e:bf:27:10:bf:6e:df:da:95:
         33:6c:e4:90:5a:e0:8f:c2:32:41:f8:eb:3d:92:64:96:e0:b4:
         5c:0a:25:bc:e5:46:64:93:4b:46:24:2b:7f:c9:de:52:21:7b:
         0c:8c:81:72:4a:50:a4:31:9b:d8:be:0a:e8:2f:6c:d8:5e:fa:
         69:87:50:5a:00:ff:bc:c1:b8:09:8a:90:70:28:08:6b:70:f9:
         0c:55:01:0b:57:b3:a8:77:ed:23:c3:69:73:62:6d:bf:dc:a4:
         ea:10:21:07:8e:65:59:fb:7c:e2:f7:cf:79:23:06:48:12:29:
         c9:10:b7:d8:8f:31:4b:68:36:d3:3c:da:20:7b:39:8c:fd:e5:
         1f:b9:a8:e3:44:ac:62:b2:1a:d4:33:c3:40:9c:ab:cf:bc:40:
         c8:5f:eb:e2:1f:a0:13:9e:70:1a:cf:e6:3f:df:83:a1:9e:5d:
         43:c5:67:d3:7e:ea:74:84:44:85:ff:7c:fe:e1:fe:39:42:da:
         65:54:a8:2b:f5:f1:f5:f0:cf:92:b2:d7:99:2c:bc:ca:74:f9:
         8f:57:d2:99:7a:1c:d1:b7:f8:b4:62:40:d5:e7:0c:7a:91:b8:
         6e:b5:24:49:e0:86:9e:b9:6a:77:70:31:97:fe:6b:dc:45:22:
         d6:fd:ce:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----