Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
File:                     FReBYmtMfEio3NUUxqdUn_tPY6o.mft (raw, json)
Hash identifier:          pvvjzHdcf2yTVApbuC8XWe3UWVGU+CVPVKkkROtYJh8=
Subject key identifier:   5E:94:BE:03:41:2B:05:3F:0D:92:81:AE:1F:63:6C:8C:3D:52:93:A9
Authority key identifier: 15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA
Certificate issuer:       /CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
Certificate serial:       01936A470A6BBB7EFA18E41A6167AB1AE43E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
Manifest number:          1379
Signing time:             Tue 26 Nov 2024 21:01:00 +0000
Manifest this update:     Tue 26 Nov 2024 21:01:00 +0000
Manifest next update:     Wed 27 Nov 2024 21:01:00 +0000
Files and hashes:         1: FReBYmtMfEio3NUUxqdUn_tPY6o.crl (hash: xC2OlhUzvrMiwJwkSun2iSTXNpTFaD7XljBlYFLKGZA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:47:0a:6b:bb:7e:fa:18:e4:1a:61:67:ab:1a:e4:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
        Validity
            Not Before: Nov 26 21:01:00 2024 GMT
            Not After : Nov 27 21:01:00 2024 GMT
        Subject: CN=5e94be03412b053f0d9281ae1f636c8c3d5293a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d3:2d:70:ec:41:ab:3a:93:8d:98:c5:14:08:
                    ff:1c:5d:93:55:8d:6a:9d:18:98:e5:00:8c:1b:c3:
                    83:34:34:7f:0a:ef:8c:50:9f:65:37:a3:f8:57:da:
                    3e:9f:da:bb:e1:05:92:91:c3:99:96:81:f7:11:79:
                    d5:07:3e:23:64:df:51:b3:b7:b4:9e:b0:57:5b:2e:
                    85:25:38:14:05:f7:64:3a:13:27:a4:8c:9a:79:68:
                    fc:a5:a7:9a:f3:78:bd:e3:e9:e6:68:d3:3b:12:ad:
                    c5:dd:87:f1:e7:66:a2:e4:dc:92:9d:2f:3c:a4:db:
                    56:8f:1c:96:b9:68:b7:5d:ad:2a:7a:fd:25:7f:8a:
                    ec:99:2c:e8:b8:a4:d9:2a:a1:fb:12:f5:43:f1:b8:
                    69:99:dc:66:85:2d:8a:ee:b8:99:be:20:7f:9b:82:
                    93:a1:3c:49:9b:9f:25:c2:ad:e4:d2:47:14:43:44:
                    14:0e:cb:3a:6d:33:94:d0:9d:c2:57:d8:d6:04:7b:
                    77:bc:31:32:d7:e7:63:63:c2:c0:d2:6a:22:cd:b2:
                    c5:87:cb:3e:51:8f:ad:fc:a8:65:55:e2:e6:83:44:
                    4e:b0:74:a9:59:b8:95:5f:7a:40:03:bb:db:31:5a:
                    1f:24:af:bf:71:a3:9c:04:82:8b:06:6e:64:a8:14:
                    37:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:94:BE:03:41:2B:05:3F:0D:92:81:AE:1F:63:6C:8C:3D:52:93:A9
            X509v3 Authority Key Identifier:
                keyid:15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:90:8d:b9:81:df:a9:02:ee:7c:be:93:d4:7a:bc:2b:58:69:
         a8:39:f1:85:37:e2:44:1f:fa:a7:6a:55:a3:e8:4d:56:60:9c:
         5e:44:f9:c3:5a:25:4b:1d:c0:87:b7:b4:d2:a2:56:d5:9f:3d:
         a8:a1:6d:12:14:96:c0:0b:68:73:a0:b5:de:7e:c4:74:11:a6:
         86:1b:84:5e:f8:6e:49:64:5f:ef:88:7e:3c:16:db:1d:26:89:
         7a:45:7b:bd:4c:22:42:02:e0:ab:cd:82:6a:e6:e1:ab:45:40:
         7a:82:a2:86:52:d7:09:59:58:96:c4:11:e7:df:b4:20:73:f7:
         6f:e6:ae:84:67:45:c4:ea:b6:27:d5:25:08:ce:14:52:a0:23:
         e2:47:88:79:e2:1c:8d:fb:c4:99:e0:ce:bc:7b:64:14:e1:51:
         69:4a:d4:0a:4b:86:69:c9:3e:f1:c3:d9:84:11:86:26:d8:ac:
         c1:36:a3:06:50:d6:21:79:3d:0d:6e:05:6a:92:19:8a:38:65:
         ea:ae:25:24:96:f5:a5:a1:23:92:f7:42:73:de:7b:a1:ae:1a:
         ae:cd:29:2c:d3:a0:7a:3c:a6:1b:14:75:49:11:1b:0a:7f:a0:
         4b:21:00:b9:f0:ac:57:38:26:15:74:2c:4c:26:36:00:f0:44:
         3c:6a:ad:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----