Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
File:                     eSttblvaBSZfwM6XGaYzvgSm6Xk.mft (raw, json)
Hash identifier:          7H0zIPZnBOjwSNGXd0Z5BCL+pUvYY7024AqnKvKPTdE=
Subject key identifier:   71:69:BD:48:8E:BF:D2:9D:94:F3:84:81:12:60:F7:E2:32:64:10:58
Authority key identifier: 79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
Certificate issuer:       /CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Certificate serial:       019369D8E0D78E2EF15F393459C67BB04931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
Manifest number:          1377
Signing time:             Tue 26 Nov 2024 19:00:41 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:41 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:41 +0000
Files and hashes:         1: eSttblvaBSZfwM6XGaYzvgSm6Xk.crl (hash: PzCyv1QK/4rAEEr9W4eea/rlEXNc2kxyKSLCXHSFUWE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:e0:d7:8e:2e:f1:5f:39:34:59:c6:7b:b0:49:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
        Validity
            Not Before: Nov 26 19:00:41 2024 GMT
            Not After : Nov 27 19:00:41 2024 GMT
        Subject: CN=7169bd488ebfd29d94f384811260f7e232641058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:01:ec:8b:08:6e:96:f7:48:6f:83:6c:a2:85:
                    a1:e1:0e:e3:a7:c8:85:9e:8a:7e:36:95:2c:3e:b5:
                    5b:fc:fd:8e:5a:bd:4d:a9:9d:09:3a:98:c9:c4:4f:
                    6d:66:d3:59:bc:6f:a1:d0:2b:77:74:b1:41:a5:e2:
                    ee:6a:45:d1:0c:9a:a5:be:5f:01:90:fd:2b:88:68:
                    71:74:08:e8:ac:25:64:29:40:e9:04:58:09:c5:aa:
                    7f:1a:a4:90:aa:48:71:dc:00:5a:e2:49:1d:f6:6d:
                    d6:0d:d5:58:a7:3c:d9:de:9d:c5:e9:94:40:e2:36:
                    9c:2f:e1:ba:be:65:3c:6c:84:74:e4:72:77:ba:f8:
                    5b:e5:49:9f:a9:2e:f1:8d:97:25:76:06:3b:8a:71:
                    4d:f6:94:2a:f4:47:5f:51:9d:c9:a7:0b:46:5e:bd:
                    83:7d:99:a0:cc:8c:08:12:2a:9e:d2:cb:21:b2:9d:
                    8c:e1:4f:5e:42:be:ac:01:c9:b6:85:19:78:3f:98:
                    74:1f:c8:4b:fb:d2:2a:f7:ce:57:01:21:5f:73:53:
                    d5:3f:04:0b:1d:cd:df:00:1b:3b:b9:da:a4:6f:f1:
                    7b:53:17:50:4e:7c:72:a0:80:77:2f:ee:50:0f:55:
                    b3:d3:41:2e:91:45:d7:06:99:17:a4:98:f0:a6:e0:
                    4f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:69:BD:48:8E:BF:D2:9D:94:F3:84:81:12:60:F7:E2:32:64:10:58
            X509v3 Authority Key Identifier:
                keyid:79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:99:8c:0e:16:06:62:25:0c:76:93:fb:89:42:ba:04:15:5c:
         a2:96:bf:d9:69:99:7d:c6:1d:96:f2:11:f0:2c:90:a6:71:f6:
         07:1a:9b:53:8e:27:3a:db:6b:ec:a0:45:37:72:c9:16:cb:c4:
         77:3b:77:87:ae:1e:d0:56:2f:2f:d5:4a:a8:ee:41:90:29:09:
         60:1c:d4:ee:a5:99:f2:be:57:69:0f:08:74:ef:16:1c:22:b4:
         c9:fc:91:0d:6a:c7:9f:98:a6:fd:aa:da:99:80:eb:30:6b:a0:
         9e:b0:c8:2e:9f:c4:43:3f:ac:0f:ed:57:21:3d:9f:54:19:dd:
         5a:0c:cb:5c:ec:7e:47:a5:22:d8:0c:b6:4d:a2:5b:e0:ae:a3:
         0f:cf:39:4d:f0:23:09:4a:67:72:c8:eb:6b:a2:d4:30:5e:9d:
         8e:97:3a:17:98:60:60:70:76:54:d2:15:77:f8:1d:d2:8d:f7:
         8a:e5:a8:71:97:1f:b7:3e:7d:1b:74:76:84:4a:01:72:8a:72:
         93:50:74:9e:8f:f9:e0:c7:b2:b7:0f:e3:0b:e9:b5:dd:c0:13:
         b4:3e:75:05:fc:35:17:7e:8e:75:a5:46:ae:d5:70:1f:2f:df:
         06:8d:3f:d0:ee:0e:ff:f6:cb:d4:de:e2:12:61:b5:c6:48:69:
         88:59:21:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----