Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
File:                     JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft (raw, json)
Hash identifier:          shHpy5nUGLgnK0ytJJXCFCraDP75/WJ6uXorB3i0MAE=
Subject key identifier:   2B:A6:8E:B6:A9:14:9E:03:0D:9A:D9:71:83:A0:9F:56:4B:28:02:39
Authority key identifier: 24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E
Certificate issuer:       /CN=2444306680f8ddb8b9890d30f507e619e4415d3e
Certificate serial:       019369DA5118FBB68FCEEB68F30B5FBEA543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
Manifest number:          08D1
Signing time:             Tue 26 Nov 2024 19:02:15 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:15 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:15 +0000
Files and hashes:         1: JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl (hash: mypZ/lF5z7nNpj2HG5ekgd4L0k9F7uz+hKFBQFKvbvk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:51:18:fb:b6:8f:ce:eb:68:f3:0b:5f:be:a5:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2444306680f8ddb8b9890d30f507e619e4415d3e
        Validity
            Not Before: Nov 26 19:02:15 2024 GMT
            Not After : Nov 27 19:02:15 2024 GMT
        Subject: CN=2ba68eb6a9149e030d9ad97183a09f564b280239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d4:e7:d9:c9:f2:8b:0b:76:ff:9a:13:7b:89:
                    6f:43:26:23:a6:cc:8a:b3:e5:a9:73:c5:56:3b:11:
                    99:3e:ff:8e:e7:56:9e:f1:00:77:95:fb:2c:7c:16:
                    e8:b6:e6:55:c3:7d:a0:78:70:ea:9e:cc:e6:33:b8:
                    94:e0:a8:e8:fa:bb:cc:08:83:0c:78:26:7f:a3:b3:
                    76:c6:c8:1c:ab:e7:a4:dc:8e:98:04:b6:9d:9c:d8:
                    55:72:97:76:05:2f:f2:32:02:63:14:a3:35:5e:b5:
                    1e:61:d8:67:8a:5d:8f:9c:1d:4c:2f:0d:53:f0:84:
                    5a:e8:81:e2:1b:5c:d1:a6:00:ad:48:c1:de:d4:a4:
                    6d:e3:34:3d:66:50:87:59:c0:f5:a3:b6:91:24:ec:
                    31:7d:96:94:40:6b:b6:79:90:83:9a:96:84:0a:05:
                    cd:be:40:42:86:ab:a8:88:e2:4c:0b:8a:ce:87:05:
                    33:0c:85:27:7d:49:3c:16:19:1f:d1:8e:8c:a4:d8:
                    27:20:fa:f9:40:05:e0:ed:ba:c0:d8:2b:9d:9f:55:
                    5f:54:d2:2e:22:37:89:f0:ee:0f:51:fa:d9:22:84:
                    ff:54:4a:a5:0f:be:f6:1d:65:f2:3d:e7:ef:b4:a6:
                    c3:03:ce:9d:e4:0b:8f:f1:ec:85:c0:a3:fd:7d:97:
                    0d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A6:8E:B6:A9:14:9E:03:0D:9A:D9:71:83:A0:9F:56:4B:28:02:39
            X509v3 Authority Key Identifier:
                keyid:24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:1c:7e:76:69:6c:3b:84:b8:d4:67:6c:ab:05:be:8f:80:06:
         31:b7:4a:20:d4:de:d9:13:56:81:97:5b:b2:59:72:ec:10:49:
         c1:81:2d:e4:85:96:f3:68:68:8e:4a:e2:3e:94:be:da:85:5e:
         0d:00:d9:c1:f1:63:eb:c4:5c:a7:88:39:77:b0:98:b5:c8:f5:
         d3:a9:e1:6d:73:73:4a:22:27:48:de:05:9e:d0:3f:2e:26:71:
         44:c0:29:d6:d2:87:f3:7a:63:3b:ae:76:35:dc:ad:49:49:4a:
         1f:cb:89:8f:aa:cb:d9:da:de:76:7c:eb:7d:d4:b3:de:dc:85:
         e8:a6:52:34:37:81:24:14:57:52:13:e4:e9:9b:ff:bb:ce:6e:
         dd:4e:a8:77:03:73:e3:8c:15:5b:ce:26:46:ed:81:22:3d:ae:
         b0:81:77:f8:7d:60:bb:cf:91:7b:37:dc:a2:e5:e7:2e:02:f0:
         b4:62:9e:3d:b0:5c:4f:27:42:9b:84:1f:16:b4:91:c2:66:a2:
         7e:6e:d8:58:8b:f7:2b:f1:f4:b0:09:52:ae:c9:5d:b5:d1:3f:
         77:f9:c9:cf:0d:81:bd:21:4e:3b:ba:49:15:5f:8e:84:33:cc:
         b9:70:98:26:71:26:17:0d:3d:40:07:e4:d0:5d:6e:21:83:d6:
         32:0a:59:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----