Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a1b2ec-c4c4-4030-95f3-d308328c0514/1/5HwodAhcg6Lj2gsMewXOskkCG1M.mft
File:                     5HwodAhcg6Lj2gsMewXOskkCG1M.mft (raw, json)
Hash identifier:          xnE0RWyfrHeN/HNCXDUBjVOLWRX5pGw1vgYkuUM0zJ8=
Subject key identifier:   4C:EE:3B:EA:7D:6B:D8:BC:A7:FD:15:5C:C6:9F:7A:4E:C1:AB:FF:BF
Authority key identifier: E4:7C:28:74:08:5C:83:A2:E3:DA:0B:0C:7B:05:CE:B2:49:02:1B:53
Certificate issuer:       /CN=e47c2874085c83a2e3da0b0c7b05ceb249021b53
Certificate serial:       01936AB4B88BAF78AE498C4737CD31322909
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5HwodAhcg6Lj2gsMewXOskkCG1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/a1b2ec-c4c4-4030-95f3-d308328c0514/1/5HwodAhcg6Lj2gsMewXOskkCG1M.mft
Manifest number:          05DC
Signing time:             Tue 26 Nov 2024 23:00:48 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:48 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:48 +0000
Files and hashes:         1: 5HwodAhcg6Lj2gsMewXOskkCG1M.crl (hash: fRHwtnseJs4bVmWzgPbVhvSjbSmcqDY2cm+6z8EZv44=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/a1b2ec-c4c4-4030-95f3-d308328c0514/1/5HwodAhcg6Lj2gsMewXOskkCG1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/a1b2ec-c4c4-4030-95f3-d308328c0514/1/5HwodAhcg6Lj2gsMewXOskkCG1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5HwodAhcg6Lj2gsMewXOskkCG1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:b8:8b:af:78:ae:49:8c:47:37:cd:31:32:29:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47c2874085c83a2e3da0b0c7b05ceb249021b53
        Validity
            Not Before: Nov 26 23:00:48 2024 GMT
            Not After : Nov 27 23:00:48 2024 GMT
        Subject: CN=4cee3bea7d6bd8bca7fd155cc69f7a4ec1abffbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:14:34:36:74:67:57:c2:95:0c:2b:6a:a6:4f:
                    95:8d:fe:33:21:f6:be:40:86:10:8d:f9:10:d4:49:
                    b8:fa:01:ec:ab:4a:52:e2:52:2b:16:fe:31:24:23:
                    a9:f6:33:d1:91:7e:01:1a:54:a3:62:b0:f3:b2:f4:
                    7f:4d:26:92:36:79:69:64:19:b2:19:16:d9:9c:c1:
                    98:32:74:42:de:06:b0:7b:f2:97:1e:d6:dc:94:af:
                    b2:b9:13:6d:0a:8d:5e:3a:86:eb:47:bb:41:73:14:
                    1c:e8:fe:6a:11:4f:ca:9e:fc:ff:40:a1:64:a0:69:
                    8d:b0:50:59:d4:fb:5f:49:39:51:0a:5b:72:1d:29:
                    c7:6c:13:b6:a8:2f:19:73:85:cd:aa:2b:05:94:31:
                    1b:0b:45:fd:9e:ba:6a:f3:08:9c:88:2b:79:71:26:
                    2e:10:0a:62:51:94:a3:c1:58:ff:61:d7:c4:62:fc:
                    d2:66:fb:9d:7d:26:da:d8:b0:b4:f5:1e:1e:ef:19:
                    8d:98:41:57:0d:fc:47:71:6c:e0:a4:12:90:31:9a:
                    61:27:d2:24:ed:75:e6:cc:1d:70:18:55:61:7e:1b:
                    6d:70:f4:8b:ae:52:79:f3:da:eb:b2:22:15:72:cb:
                    ed:38:f1:cd:84:71:c3:8a:29:41:ba:19:db:8c:cd:
                    4e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EE:3B:EA:7D:6B:D8:BC:A7:FD:15:5C:C6:9F:7A:4E:C1:AB:FF:BF
            X509v3 Authority Key Identifier:
                keyid:E4:7C:28:74:08:5C:83:A2:E3:DA:0B:0C:7B:05:CE:B2:49:02:1B:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HwodAhcg6Lj2gsMewXOskkCG1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a1b2ec-c4c4-4030-95f3-d308328c0514/1/5HwodAhcg6Lj2gsMewXOskkCG1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a1b2ec-c4c4-4030-95f3-d308328c0514/1/5HwodAhcg6Lj2gsMewXOskkCG1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:46:9c:d7:21:09:35:7d:85:45:75:c1:bc:00:19:24:8f:33:
         8f:d3:07:89:3e:62:26:ff:25:59:92:ed:3a:66:90:4a:2e:47:
         c3:d2:3c:a4:87:4a:9b:92:d4:b0:5e:17:58:c3:9a:6e:da:9c:
         13:2a:d4:5e:2f:59:14:5f:d2:1c:47:0f:f0:b3:4b:65:5a:0d:
         3a:4c:82:ed:77:04:d7:8b:bd:29:77:d9:52:a0:c2:1b:8e:43:
         c1:55:d8:c1:97:f1:54:b5:e9:9f:ad:1b:95:cf:cc:22:3d:36:
         45:66:72:61:ab:84:9d:bf:d2:2a:86:c9:c4:76:e8:16:85:05:
         dc:81:71:8c:a6:06:92:92:41:1c:f4:a9:44:92:55:3b:dd:ba:
         cf:9a:83:78:c7:56:da:20:18:9b:06:44:44:cf:5c:28:8b:d6:
         44:44:f6:cf:13:71:2e:c6:c0:7e:6b:ae:6e:d8:e7:0f:22:2d:
         f4:67:59:6c:44:53:64:5b:0f:c5:98:1a:2f:ba:c7:f1:8a:8c:
         02:dc:9f:4e:21:dc:08:d2:5d:f9:42:ae:c4:58:aa:56:ef:f8:
         86:43:3c:95:28:b4:9b:a0:ff:c1:b6:bd:25:f8:60:51:96:11:
         f6:f5:4a:73:af:47:75:68:72:31:a9:25:b5:7b:4d:e6:be:f3:
         34:a7:f3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----