Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
File:                     by4eTgnsEV2nA2tkpRnSSNUtuFg.mft (raw, json)
Hash identifier:          1VjLZE+pXn2SVg82c/YpW3xROzKlMRD9u0HR41Eq+Y8=
Subject key identifier:   FE:13:A7:AB:87:14:9C:D0:86:85:2D:F9:72:8F:32:64:1F:83:70:B6
Authority key identifier: 6F:2E:1E:4E:09:EC:11:5D:A7:03:6B:64:A5:19:D2:48:D5:2D:B8:58
Certificate issuer:       /CN=6f2e1e4e09ec115da7036b64a519d248d52db858
Certificate serial:       019369D96C15088E962D872136D8F11F4371
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
Manifest number:          1377
Signing time:             Tue 26 Nov 2024 19:01:16 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:16 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:16 +0000
Files and hashes:         1: by4eTgnsEV2nA2tkpRnSSNUtuFg.crl (hash: OUZGL3iPG7m3KLJcmPkAJAvLMuGXcbqrI2YYz5Y5lp0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:6c:15:08:8e:96:2d:87:21:36:d8:f1:1f:43:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f2e1e4e09ec115da7036b64a519d248d52db858
        Validity
            Not Before: Nov 26 19:01:16 2024 GMT
            Not After : Nov 27 19:01:16 2024 GMT
        Subject: CN=fe13a7ab87149cd086852df9728f32641f8370b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cb:12:c3:e5:62:f9:9a:25:d7:fa:7d:98:29:
                    66:b7:8f:8e:40:89:89:8a:a2:4a:94:e9:93:d0:75:
                    7b:6b:87:ee:b0:ba:fb:df:ce:b2:8f:63:25:f7:73:
                    a3:02:0c:e7:8d:fd:f8:f6:e5:89:5e:c7:8a:5b:52:
                    d6:29:18:0a:58:20:8b:ab:0f:0d:dd:e5:5b:c7:bc:
                    f2:b5:7e:67:4a:7b:1a:aa:da:e7:de:d9:62:f8:47:
                    e3:e3:15:38:e2:a9:8a:74:df:17:be:78:a0:ab:b5:
                    59:8e:29:1d:75:c8:b8:8c:aa:df:dd:63:de:e8:d9:
                    b6:49:34:65:b9:97:ce:86:da:31:6c:83:f3:bb:e8:
                    5d:73:90:d1:d2:b7:3b:74:a1:7d:1b:de:c1:2c:e7:
                    63:cb:75:99:21:1f:0c:d4:55:a5:3e:ed:77:1b:89:
                    f6:0c:96:81:e6:f9:7d:5f:89:0d:b6:ad:c1:2f:85:
                    59:aa:61:c2:cf:7a:ff:24:37:4f:e1:9a:3f:71:15:
                    48:5b:54:14:80:c3:c1:2c:b4:92:75:03:32:8a:f4:
                    d0:50:92:c3:b4:26:52:b0:70:f2:78:3c:b6:4a:ce:
                    3c:89:64:9d:6c:fd:74:a5:c9:65:ab:f3:0a:53:82:
                    61:57:6b:a4:6f:36:1d:14:c0:68:84:8a:bc:f9:a9:
                    f9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:13:A7:AB:87:14:9C:D0:86:85:2D:F9:72:8F:32:64:1F:83:70:B6
            X509v3 Authority Key Identifier:
                keyid:6F:2E:1E:4E:09:EC:11:5D:A7:03:6B:64:A5:19:D2:48:D5:2D:B8:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:af:ed:ba:0c:35:45:9d:74:e5:0d:2a:63:b0:2e:32:eb:3c:
         11:e7:15:d2:69:76:9c:61:0b:b0:9d:83:10:53:08:d1:8d:7b:
         d3:86:e2:46:af:5e:7d:86:5a:ab:e5:86:d9:3d:f8:8a:ad:cc:
         e0:46:0e:21:ea:43:e8:cd:6c:39:91:e3:e3:85:24:62:98:1e:
         14:fe:6b:f5:18:e5:76:a4:50:47:07:79:81:b1:81:6a:0f:99:
         79:6a:a4:1f:84:c8:de:91:19:64:c0:1e:b1:69:24:bc:4b:50:
         09:59:2a:0e:3a:32:12:05:18:35:21:c2:f7:c9:c7:19:7d:25:
         c3:2a:9d:d3:f0:df:aa:fb:47:ac:8e:dd:68:ea:d7:ec:ca:de:
         d6:2e:c3:ed:f1:62:b4:d7:e8:5f:d6:f8:a2:da:07:fb:a3:79:
         5a:87:50:46:e2:cc:70:5c:09:84:49:b8:fa:3b:82:05:3c:2d:
         7d:62:b9:02:d2:55:60:95:32:ee:7b:7c:78:5a:9e:12:83:00:
         2e:91:cb:60:dc:8d:02:ee:40:4b:2b:83:c6:5e:64:3c:89:70:
         85:af:cf:19:dd:aa:84:c8:c8:22:f9:75:a5:34:b3:00:1e:20:
         26:56:9d:6f:14:f3:41:bf:39:30:75:e8:a6:1a:ff:df:62:91:
         cc:08:e6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----