Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
File:                     7wC6UdY7F3WDfocvvehOLdCHT2M.mft (raw, json)
Hash identifier:          2lK7XNn6ilSiDH1WFxtR+HInT847S5+ZIaN1Tq48dfI=
Subject key identifier:   34:BA:64:E8:86:29:BF:96:2C:93:1A:EB:27:83:93:98:81:C3:6E:70
Authority key identifier: EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
Certificate issuer:       /CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Certificate serial:       019357D2E21227B62FD6380029B9CEBFFA6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
Manifest number:          1019
Signing time:             Sat 23 Nov 2024 07:00:58 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:58 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:58 +0000
Files and hashes:         1: 7wC6UdY7F3WDfocvvehOLdCHT2M.crl (hash: 9iziwbXeK2zFfb/DO7wEgo0aNpun2TqxeB45raHZKPM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:e2:12:27:b6:2f:d6:38:00:29:b9:ce:bf:fa:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
        Validity
            Not Before: Nov 23 07:00:58 2024 GMT
            Not After : Nov 24 07:00:58 2024 GMT
        Subject: CN=34ba64e88629bf962c931aeb2783939881c36e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:f8:be:fa:f2:e2:92:14:d5:fc:08:05:e5:
                    46:a6:eb:15:ff:f9:b2:59:44:fb:01:b6:50:a3:15:
                    33:bf:c8:8b:ee:1d:8c:1f:b4:a8:a0:98:23:1b:a9:
                    b4:ff:7a:97:25:61:b7:25:48:04:3a:7d:ee:a0:1e:
                    74:ae:3a:37:ec:bb:b9:f1:9e:e6:44:ac:73:5d:ac:
                    d8:7f:5b:e7:06:7b:49:5e:ba:ad:47:21:71:25:ef:
                    64:ed:96:17:e4:00:47:3f:44:b8:c7:dc:fa:4c:ed:
                    c4:02:85:f7:af:24:27:63:fc:31:84:6c:67:67:d4:
                    80:fb:4b:0c:ea:52:49:12:27:33:98:2c:13:83:f5:
                    04:c5:41:53:3d:f5:36:c5:1c:26:9a:3d:9a:2c:d3:
                    f1:70:f9:66:95:58:6c:b2:9e:10:ca:8d:7f:7b:28:
                    5a:18:ac:91:07:93:b5:01:c9:47:e0:00:b9:3b:dd:
                    fc:91:64:16:78:c2:93:f7:f2:71:b2:0f:32:fb:8a:
                    3b:0b:02:64:7d:55:27:64:c7:84:97:26:98:d8:05:
                    26:56:1d:aa:04:84:5a:28:e2:3a:b4:32:80:95:0f:
                    ef:a3:12:93:31:86:1b:01:43:b8:bb:5e:e7:88:a7:
                    73:7b:27:c2:0a:14:51:71:dc:8e:f8:91:4b:ea:59:
                    db:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BA:64:E8:86:29:BF:96:2C:93:1A:EB:27:83:93:98:81:C3:6E:70
            X509v3 Authority Key Identifier:
                keyid:EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:45:98:99:a6:64:84:04:86:23:55:36:eb:04:5b:95:35:62:
         4c:9a:af:88:6f:be:ff:ad:17:d8:51:52:b8:e2:18:2e:8f:8e:
         18:de:2c:e5:1f:78:7c:fa:83:7e:48:0f:42:9c:af:93:c0:ae:
         5e:56:95:ba:10:fe:0b:0f:ff:32:f6:d7:b9:e2:e8:00:51:24:
         f7:ed:04:8d:9c:be:f5:f2:29:4c:bf:6f:88:22:1c:73:fe:96:
         7d:60:01:24:ed:8f:ee:16:11:88:00:02:dd:d1:8c:34:6f:f4:
         62:69:79:9f:24:fc:bb:a4:e1:c1:5b:ec:24:dc:70:e8:c4:ba:
         27:c0:97:75:9c:26:5f:59:c5:84:12:cf:3f:38:ca:7f:21:df:
         f5:c1:79:b7:43:e5:59:4f:2f:a7:4c:a4:e7:56:5e:b2:a1:7c:
         cd:9a:13:ac:4d:41:9a:3e:d1:b4:8e:14:c9:b1:82:eb:ef:4f:
         6a:fc:9a:fb:7e:cf:95:6e:90:a2:d5:64:fe:26:6d:14:b5:47:
         6a:3f:32:59:15:fc:e9:e8:46:45:b2:0d:42:3a:5a:a0:aa:c7:
         65:aa:7e:71:5d:86:c5:7c:61:97:a8:96:1d:64:e0:9f:c5:35:
         de:ce:8d:f9:e9:c8:06:35:bf:05:99:df:73:6b:0f:19:70:0b:
         61:24:bc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----