Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
File:                     7W3VjHMPSQxsZTC3ULUY55Okh6U.mft (raw, json)
Hash identifier:          LZ0CajrqD1a1GdxCHWzboErSf43FQP7uQsY78pXu4ak=
Subject key identifier:   94:FE:76:C5:F3:E8:91:90:92:F7:86:F0:63:66:FB:EA:67:AE:14:92
Authority key identifier: ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5
Certificate issuer:       /CN=ed6dd58c730f490c6c6530b750b518e793a487a5
Certificate serial:       019369D9D8E8232DABB433127CA199DC2B37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
Manifest number:          0A60
Signing time:             Tue 26 Nov 2024 19:01:44 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:44 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:44 +0000
Files and hashes:         1: 7W3VjHMPSQxsZTC3ULUY55Okh6U.crl (hash: /LXoFlSOFSXmQ4LR5RyBp0fwfxeEAGC/FHk0nIFUVa0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:d8:e8:23:2d:ab:b4:33:12:7c:a1:99:dc:2b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6dd58c730f490c6c6530b750b518e793a487a5
        Validity
            Not Before: Nov 26 19:01:44 2024 GMT
            Not After : Nov 27 19:01:44 2024 GMT
        Subject: CN=94fe76c5f3e8919092f786f06366fbea67ae1492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:86:9c:f8:12:c2:eb:b1:7c:72:7a:69:74:a1:
                    34:cd:09:8b:a0:21:1a:4f:9b:b6:f4:38:f0:2e:e5:
                    61:5c:db:fd:f7:27:64:07:31:40:c9:11:7c:c7:9b:
                    e0:00:dc:fd:52:1a:9a:9e:05:67:0a:28:b2:2f:10:
                    bb:a7:d0:34:d2:f9:9f:ca:3a:11:0a:e3:cf:7a:d4:
                    24:11:62:e8:2a:df:5d:87:e8:cd:f0:5c:cc:89:d3:
                    29:12:54:13:bf:82:db:e4:8d:61:d1:a4:cf:67:f4:
                    7d:7b:39:34:03:e3:d8:72:45:db:28:a2:1c:f7:96:
                    f9:cc:8b:ac:cc:6a:42:40:6b:ec:64:c3:2a:3a:06:
                    8b:91:eb:7e:db:c0:6a:de:e2:9d:a3:92:fd:f5:74:
                    f0:ce:4d:1c:49:2a:5e:a8:a5:a0:ed:11:e5:e0:cc:
                    36:e5:c2:4d:78:22:d0:6d:07:86:1b:25:ad:2c:44:
                    49:9e:a0:74:6d:c4:88:8a:31:9d:de:b5:e0:b1:86:
                    56:e4:93:1b:e1:b8:3f:32:8a:09:f4:9c:10:9f:ea:
                    32:6f:c3:ce:3d:07:95:bd:9e:93:08:4c:ab:6a:4c:
                    5b:7f:59:d7:47:ac:f6:03:8d:f8:1b:40:fd:26:b3:
                    a9:97:55:12:47:eb:3b:76:f2:c0:59:69:27:5a:50:
                    db:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FE:76:C5:F3:E8:91:90:92:F7:86:F0:63:66:FB:EA:67:AE:14:92
            X509v3 Authority Key Identifier:
                keyid:ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:39:1f:d7:32:93:b2:8f:62:95:de:1d:4e:50:3a:f7:41:1e:
         70:24:d2:4f:6e:43:3e:d5:a7:d5:e6:47:6a:d2:b7:b8:e8:8c:
         bf:ae:de:f2:39:d2:a3:d9:01:3f:68:fb:05:f9:c3:c9:4a:14:
         90:6c:4a:fd:84:ed:19:41:3b:a0:63:b7:c2:46:4b:1d:6c:e5:
         a2:38:94:fe:f7:d0:77:3b:ad:b7:69:6d:b8:be:85:b4:0c:a2:
         0d:5d:ee:4b:c5:d5:c8:58:13:db:8d:78:5a:0a:a9:a3:d2:a7:
         a8:de:85:6a:b7:d6:3a:79:55:bd:a2:2a:05:ec:9b:c8:3b:cf:
         47:79:47:07:57:23:82:a7:a7:31:06:ca:8a:be:f9:e6:d6:a3:
         ea:2c:b3:99:4f:8c:b7:43:c7:5d:1a:fb:21:24:9b:45:df:1a:
         83:f0:4d:09:a6:e9:68:22:fa:5b:6b:2a:f7:37:f8:a9:e2:ea:
         76:a9:71:50:71:b1:2c:ac:2b:de:8a:7a:04:e0:2b:6d:10:45:
         47:87:cb:db:1f:d1:f0:3a:39:6e:73:ab:6a:a9:c5:c4:9e:dd:
         4c:48:0e:63:8f:3c:9b:02:84:15:57:18:46:9e:f2:81:e0:ad:
         47:54:58:a2:b0:88:ba:95:5e:eb:c4:0c:e6:00:57:07:9d:b3:
         7e:44:2f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----