Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft
File:                     Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft (raw, json)
Hash identifier:          VB0rM1x5Dskt/UF1tUmSbryB7JGfrKxL+MunvI8th6E=
Subject key identifier:   CC:FF:72:5C:11:D7:67:3B:F4:3D:85:13:CD:70:A3:56:76:05:82:DA
Authority key identifier: 67:77:98:7B:4F:1C:17:D2:14:65:A3:4A:90:BD:02:B5:2E:A6:E0:27
Certificate issuer:       /CN=6777987b4f1c17d21465a34a90bd02b52ea6e027
Certificate serial:       019369D95BD76752C2FD01337985B95680BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft
Manifest number:          0A84
Signing time:             Tue 26 Nov 2024 19:01:12 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:12 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:12 +0000
Files and hashes:         1: Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl (hash: RVjgoQnrVjybJmnsBdKgJkAQ+FLJELph8a3AJDPmpV8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:5b:d7:67:52:c2:fd:01:33:79:85:b9:56:80:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6777987b4f1c17d21465a34a90bd02b52ea6e027
        Validity
            Not Before: Nov 26 19:01:12 2024 GMT
            Not After : Nov 27 19:01:12 2024 GMT
        Subject: CN=ccff725c11d7673bf43d8513cd70a356760582da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1b:dd:f3:ae:bf:87:98:ef:6d:cc:13:ec:fe:
                    c9:9a:e4:8d:82:bc:8b:7c:cb:e6:46:0e:8d:d7:f8:
                    8b:8c:03:03:df:16:e4:03:68:e7:69:9e:c9:34:95:
                    47:64:42:e5:49:ca:a2:e3:88:36:e3:64:52:55:72:
                    3c:44:a4:bb:63:02:d8:87:43:a5:d0:03:9f:92:b3:
                    ad:b0:55:4c:e0:d8:ee:d9:7c:85:90:68:fc:37:5d:
                    e3:3f:1e:48:ad:2e:e5:b0:74:eb:d0:95:b9:49:af:
                    50:49:10:86:a0:76:61:cd:6c:4d:c3:f6:de:fa:bd:
                    a5:d4:ef:1b:45:a2:67:2a:6c:78:27:d9:60:14:36:
                    5b:14:75:08:eb:fa:4c:86:01:1f:ee:d0:f2:47:ab:
                    99:d6:23:82:52:c6:48:11:ec:e7:e1:10:2f:44:dc:
                    6e:5c:14:b7:be:25:06:d3:c8:f7:ba:17:99:a7:d1:
                    ee:78:e4:5f:c6:89:1a:23:2b:10:5c:9b:aa:6e:5d:
                    a0:a4:d0:5a:ae:49:58:13:5b:34:5d:ca:3e:48:cc:
                    24:c9:37:60:8c:a2:21:ef:e8:59:a4:67:38:16:b2:
                    f7:94:7d:4b:f0:8f:9f:1a:e1:34:9d:cd:f9:08:92:
                    d9:0f:07:dd:ba:2e:ff:16:c8:4e:a2:64:c1:22:bb:
                    9c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FF:72:5C:11:D7:67:3B:F4:3D:85:13:CD:70:A3:56:76:05:82:DA
            X509v3 Authority Key Identifier:
                keyid:67:77:98:7B:4F:1C:17:D2:14:65:A3:4A:90:BD:02:B5:2E:A6:E0:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:c7:39:d2:1c:f5:fb:ef:ab:85:54:b9:54:bc:bd:8a:9d:75:
         32:48:e0:65:a7:73:b4:1c:0a:1b:70:10:e2:38:7e:ee:a7:53:
         18:2d:ba:c0:ec:e7:65:eb:a9:cf:23:30:8d:6e:2a:dc:e7:e8:
         b0:63:35:4c:c8:02:1a:b5:71:2f:7e:be:c2:13:04:bd:56:07:
         2d:b2:cc:c4:5a:bc:89:63:c0:ab:d2:2a:20:8a:87:6b:19:da:
         15:f0:0d:75:43:a4:de:ea:50:93:50:d8:4a:5d:bd:d8:24:31:
         5a:24:02:45:2a:69:b5:9e:f9:4c:0c:a5:ae:94:7f:99:5f:3b:
         03:46:e2:f5:ec:03:83:9a:ba:c0:45:39:bb:84:67:13:2d:6c:
         b7:63:50:56:7a:24:5d:9b:f6:2b:5f:19:ef:29:1d:52:2c:d8:
         13:c9:9d:b3:f4:6c:bf:ec:62:92:85:84:6b:be:6c:72:05:2d:
         e7:8a:d8:67:4f:8e:0a:3b:69:48:28:ff:39:66:6a:82:8f:69:
         71:3d:79:56:01:1f:48:9a:00:6b:44:ae:4e:e1:d3:4a:a0:b2:
         48:3a:ed:cf:17:ab:35:be:25:ac:70:7a:2d:22:57:60:75:51:
         9f:2b:2b:d1:69:b2:49:21:26:15:47:4e:be:35:bb:52:91:74:
         fb:49:b7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----