Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
File:                     vMBbyedz38ikm7QwgluXRt1BxPE.mft (raw, json)
Hash identifier:          xZ4OCAXZuNSOEpBlkpYHB2gG+tLK1mGXzqH3ydGEBJ0=
Subject key identifier:   86:86:E6:6C:7E:0E:E4:17:DB:74:CF:A7:C1:AF:AE:D4:8C:FB:86:A6
Authority key identifier: BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1
Certificate issuer:       /CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1
Certificate serial:       019369D8D620BA7B8FE1E452476FE7F97AC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
Manifest number:          1377
Signing time:             Tue 26 Nov 2024 19:00:38 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:38 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:38 +0000
Files and hashes:         1: vMBbyedz38ikm7QwgluXRt1BxPE.crl (hash: NMVdpexuI/lBV4Zor7RzacUkJpdEuvk8Al9MClPNKuE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:d6:20:ba:7b:8f:e1:e4:52:47:6f:e7:f9:7a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1
        Validity
            Not Before: Nov 26 19:00:38 2024 GMT
            Not After : Nov 27 19:00:38 2024 GMT
        Subject: CN=8686e66c7e0ee417db74cfa7c1afaed48cfb86a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cc:7c:8f:2e:b6:93:17:20:fa:eb:37:6b:34:
                    54:83:3f:4a:d0:b9:b9:b2:69:6b:06:14:87:26:23:
                    0b:3c:ab:34:79:e6:1b:eb:e5:24:3c:fd:0b:58:28:
                    39:5c:84:fd:e9:53:3f:ee:39:dc:e2:7c:c6:39:bc:
                    6b:f3:69:10:93:bc:45:64:c6:73:4c:4e:d0:34:e4:
                    de:e9:05:a0:a7:79:36:84:d9:9b:b5:99:18:09:ee:
                    7a:e0:4d:44:b8:d0:e2:a7:41:b5:96:0c:fa:77:0d:
                    bb:6c:20:42:69:54:d6:5f:0f:a4:13:48:19:17:5a:
                    b8:51:4f:07:31:fd:24:59:d2:11:2b:e2:8c:99:05:
                    7a:35:2d:d6:64:00:91:8c:0d:4f:16:4a:4c:e9:d5:
                    66:cd:cf:b1:ad:af:2b:7d:d4:ec:fe:fd:a2:ab:f6:
                    9e:1d:03:29:f5:da:ba:49:68:27:a8:08:a8:91:54:
                    d1:3b:29:cb:39:c1:5f:19:17:77:e3:6c:54:a4:ab:
                    1c:8c:58:c4:53:49:4e:f4:92:35:70:5a:5f:2d:a1:
                    eb:0d:bd:88:22:34:5f:81:78:a8:50:3c:42:20:60:
                    d3:78:2d:5d:89:9b:2b:46:1f:26:89:c8:00:61:ee:
                    04:67:b3:b1:8d:eb:75:c8:d0:0e:5c:4d:73:d7:25:
                    49:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:86:E6:6C:7E:0E:E4:17:DB:74:CF:A7:C1:AF:AE:D4:8C:FB:86:A6
            X509v3 Authority Key Identifier:
                keyid:BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:6a:af:5f:7d:fa:a0:bc:5b:84:f0:b7:48:28:73:81:e4:1f:
         88:d9:3a:4a:23:d6:cb:03:e3:f8:63:fc:c0:f0:50:6b:de:19:
         e2:36:d5:5d:c1:94:36:be:86:98:2b:c6:86:9b:26:3b:74:9d:
         cc:e5:73:d6:b7:fb:25:94:aa:24:bd:64:f2:3a:84:9b:79:37:
         20:24:ad:f6:ca:10:65:da:dd:09:72:8f:75:1b:cb:eb:f5:f0:
         39:b6:7f:c2:62:6f:56:c7:d3:ee:bb:dc:ec:27:66:b2:12:61:
         56:d0:2d:e5:82:74:3d:ed:c3:49:15:00:37:d4:94:26:dc:0c:
         c8:ac:8e:6d:47:85:5f:fd:9e:1a:9a:ac:d4:68:cd:62:3c:84:
         6c:f8:63:ec:4c:21:ed:eb:d1:f4:34:81:46:e9:8c:70:6c:69:
         00:96:99:1f:e6:d5:cf:57:fc:98:f4:01:72:0a:6a:c9:fe:11:
         af:54:6b:12:14:80:46:fc:ef:9f:fc:5f:9c:fc:7e:e4:d0:4b:
         46:da:66:fd:c3:ca:20:04:52:a1:7c:f9:a6:2c:29:92:61:6a:
         aa:cc:28:bc:72:6f:d2:ce:e9:16:5f:ea:6b:37:60:73:b1:3c:
         1a:59:db:d3:7d:4f:20:c9:a1:06:34:85:f0:46:86:8e:f1:70:
         b3:29:26:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----