Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
File:                     EFkFws-IrzKqrL3Wcc08w6z_ktE.mft (raw, json)
Hash identifier:          T+6toWk4SHWQrUSlD5iyKOatCa1f+B+qCXUhlpwm+e0=
Subject key identifier:   A4:CB:52:ED:5E:E0:52:49:A4:C5:05:58:4B:3A:CD:88:59:13:A6:17
Authority key identifier: 10:59:05:C2:CF:88:AF:32:AA:AC:BD:D6:71:CD:3C:C3:AC:FF:92:D1
Certificate issuer:       /CN=105905c2cf88af32aaacbdd671cd3cc3acff92d1
Certificate serial:       01936AB497559393F13445F1A1A6095E6042
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
Manifest number:          02E8
Signing time:             Tue 26 Nov 2024 23:00:40 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:40 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:40 +0000
Files and hashes:         1: EFkFws-IrzKqrL3Wcc08w6z_ktE.crl (hash: HyccdLBZuzXeLcxIIu3WIELTDbTBaogzMt6GwSYh3bE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:97:55:93:93:f1:34:45:f1:a1:a6:09:5e:60:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=105905c2cf88af32aaacbdd671cd3cc3acff92d1
        Validity
            Not Before: Nov 26 23:00:40 2024 GMT
            Not After : Nov 27 23:00:40 2024 GMT
        Subject: CN=a4cb52ed5ee05249a4c505584b3acd885913a617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:53:b9:55:7a:8b:ea:e2:1a:ea:db:a7:25:4b:
                    18:23:01:8a:6b:e2:94:e9:5f:f8:1e:63:07:b9:55:
                    fc:11:4a:47:fd:16:b0:8a:cb:a2:de:87:bd:76:59:
                    98:81:a4:d3:a9:3c:ae:2d:12:d6:09:ee:3f:eb:a7:
                    6e:f8:99:dc:31:c4:62:84:e1:00:ce:41:ba:70:f3:
                    b7:ba:c8:0b:e7:e1:cb:23:a8:94:25:15:70:9b:fe:
                    3f:f1:ff:c6:43:b8:5f:8c:a2:be:a9:04:59:f1:16:
                    91:d1:dc:e9:83:dc:83:e1:62:a3:cb:31:14:0d:b5:
                    62:04:60:14:81:3b:fb:06:13:48:c0:eb:1d:7c:44:
                    3c:89:07:53:07:5a:0a:6d:42:0b:59:c0:04:e7:eb:
                    7a:cf:31:bb:8e:de:8d:8e:9e:7c:1f:e8:40:ec:6b:
                    05:d2:f7:b6:54:82:44:74:eb:b3:1f:e5:a3:f2:27:
                    c0:5a:20:a0:41:f7:c2:9a:e3:e1:3b:e5:97:5e:12:
                    a2:5d:10:39:9d:af:6c:9b:33:74:08:86:c9:51:c7:
                    23:b0:19:9e:22:0c:80:fa:85:39:a3:72:cf:f2:16:
                    89:0a:00:9b:b9:ca:33:b9:b2:82:af:2c:89:3b:2d:
                    b8:53:29:95:25:4c:a0:06:ea:fd:18:97:c4:c9:c4:
                    bd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CB:52:ED:5E:E0:52:49:A4:C5:05:58:4B:3A:CD:88:59:13:A6:17
            X509v3 Authority Key Identifier:
                keyid:10:59:05:C2:CF:88:AF:32:AA:AC:BD:D6:71:CD:3C:C3:AC:FF:92:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:fb:be:25:96:2b:5f:cb:c4:2c:d9:cd:7c:86:cc:42:a5:e9:
         9e:45:b6:0e:bc:e4:fd:3b:f1:89:23:28:57:30:39:3f:57:85:
         10:71:a4:86:d9:6a:31:92:82:ed:18:55:32:e3:a1:86:3c:97:
         6c:e7:aa:ae:31:d3:2a:0a:e7:f8:82:8a:5c:f8:76:52:7a:4b:
         cd:d8:1c:f7:1d:bf:88:ba:c6:fb:21:f3:eb:0b:ab:28:b3:d2:
         86:12:15:84:45:6d:f5:73:7e:d7:c9:49:60:b9:75:20:ce:83:
         71:61:17:1e:49:32:5b:65:ab:35:31:7c:57:6c:24:0e:81:b9:
         4c:a1:bb:50:d7:d4:82:8e:d9:67:5e:a7:a9:c3:f3:3c:79:1a:
         71:e6:76:57:e8:54:53:14:fd:47:fc:a2:5c:6a:b3:fa:78:07:
         ff:86:76:53:9e:4a:3e:42:c0:c6:dc:42:a6:8e:c3:d9:03:65:
         b2:d7:b9:e6:be:12:df:f7:57:8f:7d:ba:88:ea:2f:a9:8c:94:
         31:47:6a:60:8b:52:db:d8:86:5c:7d:8d:2f:25:d4:8f:f8:75:
         22:0e:40:52:5e:b1:96:00:4b:2c:3d:23:4f:b5:23:27:a7:5b:
         6e:47:69:3f:01:5f:4a:35:1d:d3:00:3b:e4:db:74:ba:07:20:
         d0:ac:8d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----