Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
File:                     5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft (raw, json)
Hash identifier:          2EclgLjTc0D3RUQ+3u9jtkzEiirM58BqJEALlj2Wmgc=
Subject key identifier:   4B:A1:4D:2D:72:6D:A2:F9:A5:25:FB:4D:0B:F6:11:1D:CF:0F:E4:F7
Authority key identifier: E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94
Certificate issuer:       /CN=e6157528a9cce92518f36bf0a81b7901a650ae94
Certificate serial:       01936A7D93639662E72A42D39A3DFB8583CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
Manifest number:          130A
Signing time:             Tue 26 Nov 2024 22:00:34 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:34 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:34 +0000
Files and hashes:         1: 5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl (hash: rJGy2m72phecl4RJKybBbipvPN8tkbHZtQeaK1nJAfQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:93:63:96:62:e7:2a:42:d3:9a:3d:fb:85:83:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6157528a9cce92518f36bf0a81b7901a650ae94
        Validity
            Not Before: Nov 26 22:00:34 2024 GMT
            Not After : Nov 27 22:00:34 2024 GMT
        Subject: CN=4ba14d2d726da2f9a525fb4d0bf6111dcf0fe4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1c:0c:b9:60:38:70:a3:f7:4d:cb:15:00:e7:
                    80:65:7a:2b:ec:a9:71:07:78:76:69:c9:73:28:fd:
                    a3:35:ed:af:ae:83:23:9f:90:78:e2:80:1d:30:9d:
                    3b:8b:53:bd:49:f4:dd:f5:e6:d7:f9:50:61:27:41:
                    1c:99:8b:16:be:4f:e3:95:c9:6b:84:31:de:b7:bd:
                    b1:49:2a:84:33:7c:f6:39:72:3d:b9:9d:ab:02:ab:
                    78:c5:cd:5c:64:28:7c:e0:a4:7d:14:74:be:bb:88:
                    1e:e4:87:76:1d:98:64:ee:69:bf:c4:fd:3f:5b:5c:
                    a0:0e:72:1c:28:08:67:f1:d0:ef:1d:46:6f:96:9a:
                    6c:bb:d0:29:58:4f:c5:03:56:4d:21:19:e4:69:3e:
                    b3:c4:88:04:e2:7d:4b:2b:ad:73:34:51:16:1a:3e:
                    42:9e:0e:e8:3a:c7:4a:ad:79:21:0f:3f:77:3b:e7:
                    7e:6c:75:15:b2:0d:6b:65:bf:f1:d1:f9:4b:65:d6:
                    2b:2a:bf:23:dc:47:d7:c9:52:35:52:dc:27:a5:bc:
                    6e:06:77:ab:1e:c5:4d:93:3b:c6:b4:ff:2b:9e:f8:
                    ca:1a:00:4f:47:2e:df:12:fe:ce:49:b0:12:47:2f:
                    d6:7c:13:9d:ed:14:1d:31:fc:78:c5:2d:d0:11:53:
                    76:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A1:4D:2D:72:6D:A2:F9:A5:25:FB:4D:0B:F6:11:1D:CF:0F:E4:F7
            X509v3 Authority Key Identifier:
                keyid:E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:b0:c0:c2:72:3a:52:2e:45:96:34:7d:a9:e5:c5:5d:ae:06:
         dc:73:fe:dc:db:31:59:ad:62:d8:98:a5:3d:b9:86:81:01:7f:
         d2:ed:58:03:92:29:ef:b3:06:1e:92:f1:f3:29:ed:b5:dd:05:
         d1:03:d1:1c:f7:56:e2:d9:ea:0b:b3:9f:0b:56:1b:b7:6a:02:
         25:46:c1:26:53:e0:ae:55:55:f2:2d:41:4d:c8:fd:0c:b9:c6:
         25:a8:48:c2:00:d3:97:66:e7:35:54:14:7d:e5:2e:8c:63:80:
         07:53:28:50:06:7d:c3:88:b2:a4:c7:b4:d6:73:ae:02:4c:99:
         d9:ba:dc:e2:23:7b:34:f7:5f:48:db:91:4c:85:bd:87:66:85:
         35:ba:37:84:9d:b0:48:00:da:19:e6:be:aa:22:37:fa:45:9d:
         11:85:ae:98:10:f9:41:6c:d4:3e:f9:9b:d9:8e:ad:ce:d4:8a:
         34:8e:a6:b7:22:7c:aa:4e:36:8a:68:00:a8:78:13:f4:08:55:
         5f:30:77:a8:d3:a4:d8:12:5f:50:3d:24:1e:55:4c:f1:13:7f:
         40:d4:56:b2:c5:43:a9:89:29:6c:05:6a:21:1c:b4:1e:d1:13:
         8c:97:dc:9b:75:7f:ae:0e:e0:35:36:61:e3:5c:f2:2e:80:67:
         df:d1:5c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----