Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9864ce-6d8b-4cfc-8741-7896c66a1fd1/1/EoUdFaLRhfrzaM7F4GOLAR8dqQI.mft
File:                     EoUdFaLRhfrzaM7F4GOLAR8dqQI.mft (raw, json)
Hash identifier:          7MHtfQeWPADhwXkxqb421j83WXbOvaVGc9mRfdrttFw=
Subject key identifier:   45:9E:C0:6D:CD:28:99:14:CE:58:3D:75:0D:43:04:19:23:15:21:7B
Authority key identifier: 12:85:1D:15:A2:D1:85:FA:F3:68:CE:C5:E0:63:8B:01:1F:1D:A9:02
Certificate issuer:       /CN=12851d15a2d185faf368cec5e0638b011f1da902
Certificate serial:       018F1934A8717FCDDC4ECC24ECDB98A227D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EoUdFaLRhfrzaM7F4GOLAR8dqQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/9864ce-6d8b-4cfc-8741-7896c66a1fd1/1/EoUdFaLRhfrzaM7F4GOLAR8dqQI.mft
Manifest number:          0824
Signing time:             Fri 26 Apr 2024 07:00:32 +0000
Manifest this update:     Fri 26 Apr 2024 07:00:32 +0000
Manifest next update:     Sat 27 Apr 2024 07:00:32 +0000
Files and hashes:         1: EoUdFaLRhfrzaM7F4GOLAR8dqQI.crl (hash: ae05eRq2ZRNI3sHtcKv6dypcQXMY5bejsjtQjnJTRrk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/9864ce-6d8b-4cfc-8741-7896c66a1fd1/1/EoUdFaLRhfrzaM7F4GOLAR8dqQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/9864ce-6d8b-4cfc-8741-7896c66a1fd1/1/EoUdFaLRhfrzaM7F4GOLAR8dqQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EoUdFaLRhfrzaM7F4GOLAR8dqQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Apr 2024 07:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:19:34:a8:71:7f:cd:dc:4e:cc:24:ec:db:98:a2:27:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12851d15a2d185faf368cec5e0638b011f1da902
        Validity
            Not Before: Apr 26 07:00:32 2024 GMT
            Not After : Apr 27 07:00:32 2024 GMT
        Subject: CN=459ec06dcd289914ce583d750d4304192315217b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d9:95:74:b9:c3:4b:8b:b2:d2:54:40:48:86:
                    01:76:8c:fd:34:54:e0:63:dd:7e:aa:d6:47:6e:1d:
                    5d:70:bf:56:f2:66:22:8b:ed:1a:b7:ed:66:e1:eb:
                    5b:66:99:7b:ad:d7:b9:c8:74:fb:a8:ad:2b:6c:2d:
                    29:80:a2:99:82:90:95:ff:77:be:67:34:e1:08:01:
                    df:84:67:33:10:85:b3:2b:ea:c6:bd:de:72:1a:a8:
                    b7:ab:9d:ea:6f:73:70:e3:74:ab:68:ee:ba:4d:ee:
                    48:98:b7:eb:88:4e:58:00:ab:2b:0d:53:8f:f1:85:
                    e7:ca:9e:d8:83:64:29:8f:5d:99:1d:ba:b8:0c:09:
                    14:09:24:d8:9d:91:81:0e:76:e8:a8:1d:6f:a0:ee:
                    60:a9:82:d8:e5:77:c3:cc:f8:16:a0:bb:c5:b3:37:
                    12:ad:ed:52:a7:cc:c7:e2:2c:b2:69:cf:6b:57:47:
                    9e:e9:3e:b2:2e:f8:9f:1b:62:5d:74:ad:36:31:86:
                    41:b4:c1:5e:45:ef:9c:0a:b5:44:92:2a:33:96:8e:
                    ad:f2:04:55:9a:37:8c:4f:7b:fa:08:a6:f5:66:e8:
                    d0:0a:b9:38:9b:0b:f8:80:6e:84:80:88:f7:cf:90:
                    0f:4d:de:41:11:d9:6a:6c:88:19:d0:99:b0:2b:56:
                    7c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9E:C0:6D:CD:28:99:14:CE:58:3D:75:0D:43:04:19:23:15:21:7B
            X509v3 Authority Key Identifier:
                keyid:12:85:1D:15:A2:D1:85:FA:F3:68:CE:C5:E0:63:8B:01:1F:1D:A9:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoUdFaLRhfrzaM7F4GOLAR8dqQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9864ce-6d8b-4cfc-8741-7896c66a1fd1/1/EoUdFaLRhfrzaM7F4GOLAR8dqQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9864ce-6d8b-4cfc-8741-7896c66a1fd1/1/EoUdFaLRhfrzaM7F4GOLAR8dqQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:51:c9:49:23:f4:82:1a:62:44:11:bd:d5:5a:59:6e:77:9b:
         69:47:61:fb:0b:54:15:70:05:e0:1f:b6:73:7f:58:d9:da:99:
         93:f8:f3:b3:6a:9c:11:d0:1d:d9:a8:6c:a7:4c:4f:38:ca:42:
         66:05:ae:ac:06:5c:93:c5:12:48:18:da:ad:e9:63:35:b9:83:
         64:57:ed:1d:97:13:b0:31:d0:21:65:03:5a:48:e3:41:ac:45:
         32:00:24:9e:ed:8a:23:8a:ce:4d:6b:ce:a3:7f:cd:8c:13:3e:
         9a:dc:38:08:2f:ce:a6:bc:bc:d4:97:75:83:d3:32:4b:b3:9c:
         f8:79:e5:02:b9:5f:ef:ff:b9:7d:bf:2e:50:aa:7e:d9:df:cf:
         36:6a:7d:17:de:28:fa:48:1a:fd:7d:69:7b:4b:59:c9:05:bf:
         ef:cc:f4:4d:45:ca:83:9e:c3:ef:91:6b:8d:c7:36:68:c3:db:
         64:e8:6f:35:15:59:64:74:54:ca:39:0e:20:cc:20:29:c5:89:
         9b:78:b4:d4:d1:54:de:ea:75:3c:fb:14:21:09:06:97:13:73:
         57:b8:74:2d:7f:ec:2b:35:fd:e4:c2:ea:52:85:7f:96:41:84:
         26:91:69:31:c5:7d:e3:67:98:61:28:04:d5:ca:c4:57:84:19:
         09:2a:15:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----