Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
File:                     8E3LHKHUaLwERw8dtKRuz1uCeEg.mft (raw, json)
Hash identifier:          SVQWRntfUARLhGcODHYzNevUZH9ox++9Ccs0YgmHnE0=
Subject key identifier:   AA:8F:D5:C3:4E:C0:F7:A4:34:FB:44:8D:D9:85:87:10:C0:4A:02:B0
Authority key identifier: F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48
Certificate issuer:       /CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848
Certificate serial:       019406EAC76CB1E25E77B101BDC4A75E7CA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
Manifest number:          4B
Signing time:             Fri 27 Dec 2024 07:00:37 +0000
Manifest this update:     Fri 27 Dec 2024 07:00:37 +0000
Manifest next update:     Sat 28 Dec 2024 07:00:37 +0000
Files and hashes:         1: 8E3LHKHUaLwERw8dtKRuz1uCeEg.crl (hash: o/hF5GeF53vpJO2FTes4e2pw39nz9WYeU432pn4wCTI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 07:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:ea:c7:6c:b1:e2:5e:77:b1:01:bd:c4:a7:5e:7c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848
        Validity
            Not Before: Dec 27 07:00:37 2024 GMT
            Not After : Dec 28 07:00:37 2024 GMT
        Subject: CN=aa8fd5c34ec0f7a434fb448dd9858710c04a02b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:64:81:d7:84:4e:0c:5e:a5:34:9a:2d:f0:f2:
                    b2:6b:6e:91:24:5b:37:f6:d7:9b:18:03:ae:ae:c6:
                    68:e4:73:24:d6:34:22:4d:c0:29:97:4f:cf:d3:29:
                    3b:03:8d:ad:f1:d8:1e:8c:9f:f8:3c:d3:7b:25:cb:
                    02:d5:7e:57:a5:ca:cf:b6:d0:c1:94:31:4e:44:73:
                    9a:83:87:f7:b3:87:7c:cd:67:f8:32:1f:6d:ef:17:
                    14:6a:34:18:c2:8a:ba:b1:b0:fd:39:0f:8a:af:60:
                    69:9e:f3:52:0f:d2:b3:3f:f5:d2:a1:a6:8d:5c:dd:
                    3b:bc:69:35:13:10:4b:f5:7e:c7:36:a8:82:fb:b5:
                    51:87:4f:c9:14:16:79:ef:8f:ba:2b:b1:a2:22:66:
                    9b:ed:6c:10:c3:4d:8f:f1:07:34:6a:35:d0:22:59:
                    85:a8:fe:5c:05:1b:18:8a:d7:cd:8f:b2:44:9b:46:
                    f8:32:1b:8d:b2:07:83:3d:be:65:5b:ba:bd:24:88:
                    97:ef:94:4b:cc:f4:9c:79:71:50:4a:44:49:18:ac:
                    72:b3:85:fd:92:f6:2b:ad:d2:66:c7:9d:31:ea:a6:
                    3d:27:c6:7f:a9:32:c8:5e:13:1e:92:26:92:be:9a:
                    71:f1:81:cf:e3:7c:51:5d:43:09:d7:2e:50:13:9b:
                    ff:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8F:D5:C3:4E:C0:F7:A4:34:FB:44:8D:D9:85:87:10:C0:4A:02:B0
            X509v3 Authority Key Identifier:
                keyid:F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:f3:b6:3c:03:94:dc:9a:2b:3d:8e:b6:01:a6:73:f0:4b:81:
         f9:f4:63:57:68:42:47:e3:7c:ed:05:46:eb:ff:49:0d:35:34:
         bd:74:09:9e:34:80:d0:b8:6e:ea:02:c0:f6:a3:c8:68:38:6d:
         54:b2:4a:bf:44:5b:79:1e:74:c9:52:90:11:90:1b:13:2a:3d:
         d5:8e:d7:8b:9d:b3:ad:2e:4e:da:74:82:fa:3e:6d:e1:32:c7:
         82:5d:8b:39:be:ab:88:b0:de:64:06:49:85:a8:da:a8:36:45:
         3d:c4:97:2b:3d:8a:98:81:a3:d6:4c:c2:95:a3:51:dc:9e:a0:
         5c:96:5f:00:23:0e:7c:8e:c7:51:fe:85:c6:36:9b:3d:9d:c2:
         79:b9:42:84:27:22:0b:94:48:ef:e5:3f:92:6d:2f:f8:b6:12:
         ea:52:03:4c:26:32:97:a5:d9:c5:02:a0:fc:aa:f6:09:c4:f0:
         01:b8:a1:bb:a1:d6:03:8e:5a:5b:4f:60:cd:82:c0:ea:ef:e1:
         a0:4d:c2:ff:08:2b:d8:31:33:e9:53:06:e9:bc:19:8e:a8:29:
         49:bc:8f:c6:ae:ac:03:66:2e:0f:bb:18:1a:d5:eb:2b:b2:d7:
         2e:f5:c4:c0:11:67:dc:d2:9a:26:93:5a:ff:a0:9f:b0:7b:f5:
         1a:c0:f0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----