Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
File:                     793Ia4IAX_jHwmSi4GcDemCLSB8.mft (raw, json)
Hash identifier:          H5yxVr9NOw2QEFwyGeEAsX4eGnC5/wYpSKebLfLuZgw=
Subject key identifier:   24:16:88:CF:4F:2B:AB:70:FA:69:30:F3:53:17:67:E1:1E:BB:32:08
Authority key identifier: EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
Certificate issuer:       /CN=efddc86b82005ff8c7c264a2e067037a608b481f
Certificate serial:       01964F6CD3D505EF1DC587910C922614167D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
Manifest number:          14F7
Signing time:             Sat 19 Apr 2025 19:00:54 +0000
Manifest this update:     Sat 19 Apr 2025 19:00:54 +0000
Manifest next update:     Sun 20 Apr 2025 19:00:54 +0000
Files and hashes:         1: 793Ia4IAX_jHwmSi4GcDemCLSB8.crl (hash: EE2s/h0RedHAti44X4aUpciljXyRJ64LPSRu6U/sxAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6c:d3:d5:05:ef:1d:c5:87:91:0c:92:26:14:16:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efddc86b82005ff8c7c264a2e067037a608b481f
        Validity
            Not Before: Apr 19 19:00:54 2025 GMT
            Not After : Apr 20 19:00:54 2025 GMT
        Subject: CN=241688cf4f2bab70fa6930f3531767e11ebb3208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a1:e6:c1:ac:3f:e4:46:9a:83:08:dc:63:c2:
                    8f:58:c8:18:3b:58:39:47:70:f9:c3:b2:db:81:49:
                    2a:e8:e9:ed:a2:af:3b:ff:1e:8f:6d:26:3c:f7:3a:
                    47:8b:4f:d8:24:4a:fe:bc:71:51:01:59:82:5a:47:
                    6c:10:39:a7:ae:0d:c4:ca:79:57:51:ac:ea:63:0b:
                    ba:dc:fc:a1:dc:6d:12:9f:10:ab:48:d8:89:09:4c:
                    75:9e:83:db:9b:00:8d:b1:ea:73:83:03:02:02:74:
                    0d:69:64:de:a9:36:c3:d1:d6:79:f6:93:22:7e:63:
                    92:fb:e6:5f:52:be:ff:47:07:c9:ae:e1:08:79:49:
                    f3:bf:bf:65:fc:59:bf:89:d9:03:89:55:16:27:35:
                    27:a6:8b:f1:6f:d5:64:33:9a:14:1d:3b:a6:7b:32:
                    7b:01:ae:b2:97:33:90:04:ae:13:3c:37:19:23:dc:
                    44:d7:9d:d1:85:73:fd:56:11:7a:ad:b9:00:33:1c:
                    48:7a:bd:61:38:59:19:bd:24:02:c1:da:58:a1:94:
                    d1:fa:e3:f5:98:53:db:1a:df:16:3b:33:95:28:6f:
                    50:bb:f4:91:b9:25:9a:23:10:39:87:b9:76:6b:8e:
                    38:40:f0:cc:12:76:b3:43:cd:df:53:0d:0d:b8:83:
                    7a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:16:88:CF:4F:2B:AB:70:FA:69:30:F3:53:17:67:E1:1E:BB:32:08
            X509v3 Authority Key Identifier:
                keyid:EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:44:ca:50:1e:11:65:e6:61:68:c0:75:19:c7:ba:86:f0:61:
         6c:73:42:4a:c2:b9:f3:9e:17:bc:90:ce:bb:0b:ae:e6:ad:ca:
         da:ca:97:13:24:f7:39:29:a6:a3:f6:72:5d:9b:ad:e7:ce:73:
         d3:37:13:bd:4b:a8:22:0d:db:59:c9:3f:dd:45:3e:c2:e8:37:
         93:7d:ce:c2:01:90:80:60:56:80:5d:ce:ac:30:97:29:37:18:
         4a:57:9b:81:7a:cc:71:f8:23:83:a1:50:63:03:ee:49:a1:73:
         9d:16:db:70:e9:65:a7:e8:fb:3c:48:f4:07:be:5f:b9:aa:66:
         12:77:7c:43:c9:70:0c:5e:f3:95:50:68:22:5e:c3:41:10:cd:
         68:27:d8:39:b8:ca:52:fc:9f:e4:b0:8a:11:78:3c:ba:a5:e8:
         09:36:2f:be:dc:9b:ac:35:76:af:1a:aa:82:4c:8d:fa:40:16:
         77:01:88:e9:3d:8c:30:2d:a4:5a:b7:0f:88:44:f0:5e:fa:d8:
         9d:8d:c0:a8:31:bc:ce:5d:b5:5c:37:60:21:53:2d:fc:f5:14:
         a8:36:74:c2:ae:0d:96:1f:fe:e1:17:6e:e8:87:0f:49:2d:45:
         8e:7f:f5:07:74:4e:51:d9:43:0c:14:b6:fc:35:ec:03:38:34:
         2e:0e:f3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----