Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
File:                     bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft (raw, json)
Hash identifier:          vyH2Egyv7aTwLyLTgfc4KIv1+TR0p1cfziy/BI+IU5w=
Subject key identifier:   D6:B1:CB:EF:76:74:4C:2F:E0:EE:22:32:5F:BD:9E:D0:C4:7B:17:82
Authority key identifier: 6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7
Certificate issuer:       /CN=6c51614b6bfb6c618783676911bdf3bc829f97d7
Certificate serial:       01936A46ADC89A8701366E6589ED6C8A0749
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
Manifest number:          100D
Signing time:             Tue 26 Nov 2024 21:00:37 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:37 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:37 +0000
Files and hashes:         1: bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl (hash: aBt7vvV+Op7DS021IEQ9PdlRYJuPha8YfkG4HO1rrD4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:ad:c8:9a:87:01:36:6e:65:89:ed:6c:8a:07:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c51614b6bfb6c618783676911bdf3bc829f97d7
        Validity
            Not Before: Nov 26 21:00:37 2024 GMT
            Not After : Nov 27 21:00:37 2024 GMT
        Subject: CN=d6b1cbef76744c2fe0ee22325fbd9ed0c47b1782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b7:ff:33:ff:aa:c1:6b:54:e6:22:0e:4c:32:
                    6b:bf:e3:74:3d:77:6d:a2:dd:d8:c5:cf:99:43:a0:
                    b3:5a:0a:54:a8:90:6c:67:18:1f:1c:d8:30:84:98:
                    85:b3:6b:0f:06:41:1f:9e:48:9c:d4:76:32:59:5a:
                    ac:7d:f0:6f:37:c9:f2:4b:0f:b4:ad:33:65:e3:c7:
                    42:44:3c:0a:af:e7:d3:43:f3:d3:84:2a:26:ea:3e:
                    98:79:df:fd:ea:f7:10:a3:6c:c6:32:b0:e5:a7:ce:
                    f9:5c:2e:a1:a2:50:7b:20:d0:b1:8f:5e:31:f8:69:
                    83:1a:b2:07:30:33:5b:bc:7c:f9:40:78:6a:be:dd:
                    9d:06:cb:41:9f:8b:75:0e:f5:9c:fa:e5:23:44:e5:
                    b1:84:fe:e4:68:a6:90:7f:36:60:69:e9:fa:1b:e5:
                    c1:fd:71:ee:0d:17:38:64:f3:84:d0:c0:93:62:54:
                    8c:68:8d:b5:ab:1a:d6:bc:40:0b:fb:3f:2b:3d:54:
                    ad:f6:20:26:17:62:d0:f1:54:c9:d5:ab:4b:dc:41:
                    0b:ed:fe:29:b1:71:d5:5b:a9:c2:eb:72:68:16:b6:
                    c0:fc:c7:ad:8b:48:a8:68:04:e3:1a:a5:d7:39:44:
                    99:a5:52:26:5e:87:ca:fb:c7:12:08:43:59:35:62:
                    d2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B1:CB:EF:76:74:4C:2F:E0:EE:22:32:5F:BD:9E:D0:C4:7B:17:82
            X509v3 Authority Key Identifier:
                keyid:6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e5:fc:e8:c4:74:ae:17:67:c9:4d:83:cd:f2:68:0c:14:9a:
         42:8c:3c:cb:9a:11:4e:31:81:64:2b:1d:cc:e4:8b:1c:b2:d2:
         15:56:2a:49:2d:52:08:02:a4:40:17:cf:51:15:4b:76:ef:62:
         5e:7b:df:38:f8:05:0f:85:b9:40:a6:74:e9:4b:6e:44:52:a8:
         98:24:77:5a:7b:0d:8c:47:95:c9:4c:69:b8:09:41:b4:0a:04:
         d5:fa:44:bd:3e:00:46:7f:51:3f:ca:f2:f7:37:5a:95:be:f5:
         80:c8:f2:b2:2e:22:f1:09:60:f6:6a:02:f1:cd:93:74:91:3c:
         20:40:bd:ba:f3:6c:93:6d:7b:92:88:bf:8d:76:33:bd:9a:c0:
         3e:fe:b1:14:cb:44:ae:cf:85:91:d0:b8:be:7b:6a:70:24:b3:
         5f:4c:55:d2:74:56:08:e1:4e:3a:36:f5:93:99:da:b0:a1:e7:
         47:41:a9:8c:fb:29:cf:e0:8e:d9:93:25:41:f1:89:2d:a7:7a:
         57:39:0b:cb:d1:74:48:6f:53:c2:ec:40:04:53:e4:1b:10:7b:
         0b:98:33:1c:0b:f6:5f:72:39:05:65:a6:5f:8f:47:ac:80:fa:
         9b:98:e2:c3:08:f5:d2:bd:74:76:8c:cf:45:93:c5:7b:ea:d5:
         64:84:c9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----