Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
File:                     6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft (raw, json)
Hash identifier:          b7dG/wSF9laOQcAvdj4RDstnM5V/hEHX0NR/SpPjFgI=
Subject key identifier:   E6:21:C5:6C:B1:4C:CA:CC:35:65:BE:47:D1:09:C7:66:8B:32:E7:EA
Authority key identifier: E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD
Certificate issuer:       /CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
Certificate serial:       019369D8FE46334D7F2EE0322496BCEFEBBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
Manifest number:          09D2
Signing time:             Tue 26 Nov 2024 19:00:48 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:48 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:48 +0000
Files and hashes:         1: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl (hash: rMOdz1rP9J5bLNVuKnIi+CQl2X1IqlevLXY2fVhODxs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:fe:46:33:4d:7f:2e:e0:32:24:96:bc:ef:eb:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
        Validity
            Not Before: Nov 26 19:00:48 2024 GMT
            Not After : Nov 27 19:00:48 2024 GMT
        Subject: CN=e621c56cb14ccacc3565be47d109c7668b32e7ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:45:85:61:17:1f:a9:07:5d:2b:32:e9:28:ef:
                    1b:3c:a3:19:13:0d:9a:b2:64:e7:f7:0a:82:02:be:
                    4f:92:04:31:48:95:7a:42:f5:5b:e1:00:a0:40:6c:
                    6e:27:0d:0c:09:60:76:ae:bf:ef:fd:b4:ca:a4:18:
                    43:0a:60:97:37:34:0e:5c:e6:c9:5a:bc:b3:dc:d1:
                    eb:e0:4d:91:e0:5f:e1:4b:c0:93:98:7e:9f:96:0e:
                    c2:ff:70:ee:1e:7f:9e:55:74:8b:65:a7:64:8d:73:
                    a3:6a:f4:d0:8c:b1:46:2f:c8:22:28:48:41:a8:e6:
                    a7:66:08:8b:fd:7f:5e:ac:b7:4a:e0:00:bd:48:ce:
                    81:96:99:9b:ca:f9:96:fb:77:22:e9:69:34:0b:39:
                    80:e1:ed:36:1d:18:2d:1e:7b:01:e3:da:36:68:04:
                    12:36:e4:9d:dd:d9:ca:c1:8d:3e:09:21:36:cf:9b:
                    a6:f6:58:cb:b3:8c:6e:6a:39:b4:e3:60:d9:a5:8f:
                    1e:56:ef:f6:0e:21:4f:0f:7b:ab:0d:c2:8f:b4:f5:
                    56:93:4d:0a:dd:b1:f4:d5:28:34:db:4d:94:64:b3:
                    dc:48:8b:a4:46:e8:89:e4:dd:e3:5e:0b:1d:bd:df:
                    ac:46:58:af:cf:a0:81:83:86:0e:c9:50:20:3a:56:
                    04:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:21:C5:6C:B1:4C:CA:CC:35:65:BE:47:D1:09:C7:66:8B:32:E7:EA
            X509v3 Authority Key Identifier:
                keyid:E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:d3:77:2c:d9:71:93:56:9b:fd:7e:30:33:37:0e:25:35:28:
         e2:cc:00:2c:63:11:1f:05:90:e4:0a:f9:7a:38:65:8b:55:95:
         84:bc:87:c1:ae:2f:98:0c:07:26:eb:61:5c:2e:26:50:24:33:
         4b:4a:8b:77:83:9d:51:f8:e1:5f:c1:62:8e:cd:b4:40:bf:52:
         94:15:1e:e8:69:fa:4d:5a:e4:58:8a:17:51:d8:6f:fe:6d:25:
         4a:9d:83:9e:46:af:e1:60:0a:eb:25:af:81:72:f4:f2:81:13:
         d6:a3:8e:ac:87:78:91:a0:f5:ce:c3:21:37:a2:5e:85:35:a8:
         b3:df:eb:31:98:17:94:0d:f5:a2:4f:63:0f:05:8b:7a:fe:8a:
         c3:af:d5:2b:4e:a0:f0:17:e4:4d:c9:39:e3:fa:df:d2:9e:69:
         be:9f:a5:6e:cd:94:60:82:c7:66:c0:a5:6d:7b:7d:78:32:d7:
         b3:6b:f3:cd:6c:fb:27:47:f6:dd:cf:ed:9a:72:6f:7f:76:a5:
         d4:53:d4:d9:f0:60:7e:f6:02:0c:83:a7:7c:b4:15:7a:2a:fa:
         17:b8:67:26:63:8f:2d:05:b5:3d:f2:a5:68:9d:28:6b:9a:3d:
         85:7a:2c:51:23:3b:3b:ee:68:63:ee:7d:7b:88:fb:02:88:61:
         97:97:03:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----