Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
File:                     Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft (raw, json)
Hash identifier:          M2GTWTclQq8P+FsUMPhmGX7l5Q9RSumDRj/u4/26qoM=
Subject key identifier:   46:6F:D3:99:3D:9B:2F:55:F8:AE:F8:99:40:6A:19:F9:8D:0F:CB:AC
Authority key identifier: 12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2
Certificate issuer:       /CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
Certificate serial:       01936A4655B815E5690EE585D64992C48A73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 21:00:14 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:14 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:14 +0000
Files and hashes:         1: Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl (hash: Zd/iq2CXVk2LUIkNjNnUYLZrfpSOn6T+cxl8lXqiv/o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:55:b8:15:e5:69:0e:e5:85:d6:49:92:c4:8a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
        Validity
            Not Before: Nov 26 21:00:14 2024 GMT
            Not After : Nov 27 21:00:14 2024 GMT
        Subject: CN=466fd3993d9b2f55f8aef899406a19f98d0fcbac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:80:7a:3b:04:75:cc:dc:f4:31:a9:74:f7:9e:
                    ef:fe:84:12:88:fa:15:08:c3:84:30:a7:c3:9b:b9:
                    a9:46:91:db:7e:05:64:0d:eb:8a:7e:57:08:cc:ea:
                    01:48:8a:2f:50:db:6c:9b:0d:cd:57:48:0f:db:82:
                    be:ce:dc:11:fe:23:09:d7:2f:80:06:83:2b:2e:24:
                    41:83:e5:5b:f5:31:c8:9f:d3:e5:b3:93:82:fd:fb:
                    cb:8d:4f:0b:5c:8b:73:fc:e8:00:26:55:29:26:1a:
                    ba:d8:c2:2b:f3:f2:66:e6:2b:a3:dd:0c:ea:62:7d:
                    ae:3c:d8:ec:77:28:94:32:00:b7:72:8c:00:cd:4e:
                    00:59:42:aa:52:8c:bd:93:1b:98:c1:b6:d5:cb:a0:
                    37:5b:87:a5:6a:5f:73:7d:90:e1:55:10:78:77:e9:
                    51:4f:bf:05:11:81:d5:69:db:ab:12:1f:65:19:37:
                    b8:0b:45:70:8b:bb:26:99:7b:93:2d:d6:2c:6d:ca:
                    d2:6d:4b:95:24:34:bf:63:48:53:39:0d:6a:3a:01:
                    01:f7:09:84:0b:81:25:f0:b3:d4:4d:43:81:9b:c9:
                    a2:31:bd:44:3f:54:b6:aa:46:6c:b3:ca:77:20:c1:
                    24:b3:ec:46:9b:ce:16:6d:11:84:94:46:3d:e9:2a:
                    19:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6F:D3:99:3D:9B:2F:55:F8:AE:F8:99:40:6A:19:F9:8D:0F:CB:AC
            X509v3 Authority Key Identifier:
                keyid:12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:48:65:0e:32:e1:73:c1:aa:ab:74:e1:cd:42:44:d1:3c:1d:
         e1:07:ae:ef:3d:55:3e:5c:bd:a2:6d:6e:74:3f:ad:a6:97:b4:
         44:13:d9:30:10:bd:63:a3:19:dd:04:b5:01:8b:2e:4d:0e:8e:
         64:28:e5:23:53:e8:2c:2f:11:a4:bb:4a:c5:2e:d5:28:ef:88:
         64:6f:0b:2e:4b:a7:55:b0:66:e7:3c:48:2b:5f:fe:2b:a7:81:
         6a:80:f8:52:85:dd:81:6f:fb:94:61:d2:50:6a:84:92:20:87:
         bb:b8:b1:75:ea:bc:c7:af:35:d2:67:f3:52:71:6d:17:a9:87:
         9e:16:9e:f4:fe:29:7a:ba:9e:3d:73:c9:0a:1a:7c:50:54:bc:
         80:60:e4:aa:f3:df:57:4b:7c:5e:63:f3:2f:32:bb:86:dc:ce:
         38:a8:0f:6c:96:10:f2:ee:ed:39:87:fd:91:22:f7:a7:62:3e:
         2b:09:0b:55:3b:ee:36:4c:35:b9:e6:9a:05:d2:05:e6:8f:e7:
         e0:0b:06:ad:2c:b4:39:c6:33:e3:b3:65:72:12:e1:db:95:d0:
         e5:c6:a4:cb:c7:71:8b:aa:6b:14:ce:48:3e:c9:15:b2:38:68:
         a3:3e:b1:40:d3:92:51:2d:2b:d2:0e:83:7b:9e:c7:0c:f5:e0:
         4c:75:c4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----