Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
File:                     Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft (raw, json)
Hash identifier:          2vVqtAQ4cLn3Cf+jLzUDBSpb7nwC4rLH16rHMScmVVQ=
Subject key identifier:   CD:04:6B:26:F9:E5:A5:CB:FE:48:9A:F3:FC:08:89:43:D2:C6:21:F3
Authority key identifier: 51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F
Certificate issuer:       /CN=51fe4d48aa013d40e06c312ff710489b20dfe07f
Certificate serial:       019369DA869ED7BD6E5863FFDE2CB7ABEEFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
Manifest number:          0A60
Signing time:             Tue 26 Nov 2024 19:02:29 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:29 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:29 +0000
Files and hashes:         1: Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl (hash: wzdG/4sgEriv68/sbm+LeQI4PbgJPhuTOhBQccWHvUk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:86:9e:d7:bd:6e:58:63:ff:de:2c:b7:ab:ee:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51fe4d48aa013d40e06c312ff710489b20dfe07f
        Validity
            Not Before: Nov 26 19:02:29 2024 GMT
            Not After : Nov 27 19:02:29 2024 GMT
        Subject: CN=cd046b26f9e5a5cbfe489af3fc088943d2c621f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ef:31:d8:6e:98:45:9c:a2:10:e0:8c:59:88:
                    4b:3e:7b:79:a2:9d:53:21:14:ec:92:3e:13:b2:18:
                    12:04:22:9a:75:41:9b:40:1e:42:7d:ea:ab:6a:83:
                    00:41:92:0a:d7:d4:19:84:a6:34:96:02:bc:78:75:
                    7b:3b:e5:ba:2e:95:d7:bd:9a:c3:fe:65:7b:08:1c:
                    83:a3:18:61:ac:14:80:09:18:eb:18:9b:32:bc:80:
                    c6:9c:11:37:35:5e:37:5b:82:6f:21:19:9f:61:2a:
                    34:da:d0:ab:bc:9c:bb:b0:b7:c2:8b:4e:7e:8e:e4:
                    2b:86:64:a1:3d:93:f2:cd:2c:44:c3:49:17:19:bc:
                    33:83:6a:89:11:a2:6a:16:70:60:4b:3e:c5:93:50:
                    94:00:7e:52:a1:fb:14:0f:a4:d7:b7:56:a4:ab:98:
                    d4:0e:69:4d:40:a4:65:b4:6a:7e:5c:96:bb:fe:93:
                    15:35:3e:bb:b7:b8:ab:ee:77:1a:9b:f6:2e:22:d0:
                    1b:ec:6c:e9:9c:88:79:e8:07:d2:9c:39:4d:39:66:
                    3c:3a:e5:a0:05:e6:9b:cb:67:cd:ce:d7:b3:d4:a0:
                    7e:b7:b9:ed:ec:60:a1:8e:83:6a:6a:a6:56:9c:64:
                    1c:93:60:95:65:2c:c4:b1:cc:fb:3c:13:38:34:99:
                    b7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:04:6B:26:F9:E5:A5:CB:FE:48:9A:F3:FC:08:89:43:D2:C6:21:F3
            X509v3 Authority Key Identifier:
                keyid:51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:53:0f:38:66:ab:e1:86:85:c5:26:2c:1a:b6:16:68:63:9d:
         92:0a:00:6c:be:9a:7f:fb:a4:fa:bb:5e:01:bf:3b:01:10:71:
         8b:39:43:ca:6d:6b:4c:f6:66:ec:67:99:33:c8:80:4c:39:55:
         59:6c:8a:fa:96:30:a5:69:87:33:81:79:3c:40:c5:91:80:97:
         de:43:7f:bb:e4:e8:a6:2e:c9:ed:7b:0e:89:bc:47:d4:f7:92:
         47:ad:52:9d:4a:5c:82:b5:b2:44:39:e1:99:57:e4:69:54:5c:
         e6:38:b4:04:5e:f2:34:8d:04:3d:a6:8d:24:24:31:b9:91:25:
         27:64:3a:32:90:b3:7b:a6:c8:33:44:5a:3f:23:3f:21:1e:1f:
         56:b6:93:52:aa:ef:ea:ba:d9:10:ad:35:df:ab:39:7b:19:49:
         70:37:22:00:f0:98:7e:97:96:75:96:46:46:03:39:0f:3d:76:
         c2:72:3c:f7:36:8a:ed:ad:4a:0d:3b:92:20:fa:37:5d:b7:b0:
         12:e6:43:7c:d8:e7:b3:75:f9:0d:17:86:31:3d:44:72:29:0d:
         82:f2:b2:3e:e5:61:f2:e9:32:1d:e8:7d:d1:4b:c0:f9:9c:93:
         e0:35:ba:24:c4:4a:6d:75:54:ae:98:a3:5d:59:d4:31:ad:fb:
         57:c6:73:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----