Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
File:                     oE_JgO38R54EauArEOVyRbuSyLc.mft (raw, json)
Hash identifier:          o6vKQfD8w87s9x71Al+cK+jct9Orbe5GtoAVhmA0OpY=
Subject key identifier:   B8:E8:1B:E3:8B:CA:75:87:A5:45:F8:B0:92:86:79:0A:F7:CD:C9:4E
Authority key identifier: A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
Certificate issuer:       /CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Certificate serial:       0193572D9F31030F371A048F37C990B6B56A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
Manifest number:          0372
Signing time:             Sat 23 Nov 2024 04:00:27 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:27 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:27 +0000
Files and hashes:         1: oE_JgO38R54EauArEOVyRbuSyLc.crl (hash: PkRHa0lo39Vdm70/dzbukPndTiY54z/H3+iDzX2NJkQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:9f:31:03:0f:37:1a:04:8f:37:c9:90:b6:b5:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
        Validity
            Not Before: Nov 23 04:00:27 2024 GMT
            Not After : Nov 24 04:00:27 2024 GMT
        Subject: CN=b8e81be38bca7587a545f8b09286790af7cdc94e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f5:d7:32:dd:1e:e2:5f:34:32:61:e6:41:8c:
                    8d:b2:14:11:17:d0:54:24:9c:e8:f0:ba:8a:52:f1:
                    16:f1:d5:b1:17:1e:df:cc:c3:c2:e6:89:26:a4:1e:
                    0a:59:b0:5e:a6:8b:ec:c4:a0:5a:d3:f2:63:b4:f9:
                    95:74:9b:73:6a:ac:93:bf:4a:6c:15:88:a6:05:0c:
                    df:8b:30:da:88:00:fc:3b:bc:d6:b9:d7:c1:4b:6d:
                    65:8b:57:a3:8e:1a:a0:44:c0:ff:d6:52:e4:2b:e9:
                    1a:0e:e7:37:04:45:2d:51:b8:33:7d:45:f5:b7:c3:
                    6f:46:a2:01:68:9b:ff:d9:8f:52:21:5a:ec:09:ed:
                    c6:31:1b:1e:2d:de:e0:8b:61:c6:58:ee:11:90:90:
                    49:0f:67:22:0a:b6:83:71:c9:11:8b:c9:e1:3a:d7:
                    32:a7:d6:81:51:f7:0c:46:f5:50:ca:6e:26:02:b0:
                    9d:86:ee:8d:df:15:4c:b5:ff:f2:9b:d0:fb:ed:93:
                    f0:f0:1f:89:62:56:29:0f:c1:56:50:c7:0f:5d:6f:
                    4f:83:87:ae:c8:50:a5:c9:62:e0:fe:b9:4a:3b:7b:
                    93:67:38:fa:b2:05:2a:ea:19:8a:eb:ab:6a:fd:4b:
                    7e:50:ad:0a:0f:f0:a3:6a:c0:d9:ba:5d:20:64:97:
                    2b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E8:1B:E3:8B:CA:75:87:A5:45:F8:B0:92:86:79:0A:F7:CD:C9:4E
            X509v3 Authority Key Identifier:
                keyid:A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:fe:73:57:49:ca:52:6f:39:18:73:91:ba:8c:e5:aa:4e:ae:
         5d:29:35:c5:61:a8:0a:ba:5c:b9:74:94:42:06:8c:18:c0:be:
         7a:ed:41:28:93:92:97:92:84:d7:04:56:1f:1f:f5:d6:98:47:
         70:e7:2e:f9:8d:14:10:78:2b:cc:aa:93:00:59:21:05:08:ef:
         a3:c1:85:66:12:48:01:d5:e7:d3:db:fe:8a:3c:30:f7:3e:e0:
         50:99:57:66:56:a8:ee:29:25:90:29:a8:a0:13:e1:50:8f:25:
         d1:a0:02:67:ec:35:18:39:1c:93:fc:58:0c:72:e2:82:4b:47:
         af:c0:0f:bc:7a:ed:88:16:05:22:fd:0d:6b:a3:01:a5:39:8f:
         3f:c0:76:ba:c0:8d:61:63:79:93:e8:b4:c3:2a:9f:5f:e9:cd:
         96:58:9c:fd:c9:3e:67:a8:8a:72:4e:8b:23:cf:1b:79:78:9f:
         4d:28:44:b9:72:5b:d5:1f:2c:c5:c4:00:03:5b:8a:64:70:a2:
         dc:88:66:ad:29:ec:55:55:44:e4:19:c7:0b:b7:10:2a:2b:96:
         f8:fa:f6:76:8f:20:dc:ae:f9:ce:e4:fa:9c:d5:13:77:fc:7a:
         a8:65:88:64:3d:ef:65:39:86:0d:cf:dd:ee:52:cf:fe:4f:70:
         d1:3c:a1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----