Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6acdbf-8fbc-4041-8a61-f1c3fca98625/1/sPpDvT6TlK7AqvR4fCalZP_2BSo.mft
File:                     sPpDvT6TlK7AqvR4fCalZP_2BSo.mft (raw, json)
Hash identifier:          QACujk8/ByK1J8E0evYF7rptSX2h+5rZVZi0bxreq5c=
Subject key identifier:   60:0C:3D:10:1F:E3:5F:3A:76:0C:E1:5C:62:39:56:BE:97:FE:73:29
Authority key identifier: B0:FA:43:BD:3E:93:94:AE:C0:AA:F4:78:7C:26:A5:64:FF:F6:05:2A
Certificate issuer:       /CN=b0fa43bd3e9394aec0aaf4787c26a564fff6052a
Certificate serial:       019369DAE1B35388FCF57C8606211E93877F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sPpDvT6TlK7AqvR4fCalZP_2BSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/6acdbf-8fbc-4041-8a61-f1c3fca98625/1/sPpDvT6TlK7AqvR4fCalZP_2BSo.mft
Manifest number:          066E
Signing time:             Tue 26 Nov 2024 19:02:52 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:52 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:52 +0000
Files and hashes:         1: sPpDvT6TlK7AqvR4fCalZP_2BSo.crl (hash: s++7Nm6CFa5pa0+doQfhEbzcy/1C6XtBchiQWtqSEvI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/6acdbf-8fbc-4041-8a61-f1c3fca98625/1/sPpDvT6TlK7AqvR4fCalZP_2BSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/6acdbf-8fbc-4041-8a61-f1c3fca98625/1/sPpDvT6TlK7AqvR4fCalZP_2BSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sPpDvT6TlK7AqvR4fCalZP_2BSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:e1:b3:53:88:fc:f5:7c:86:06:21:1e:93:87:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0fa43bd3e9394aec0aaf4787c26a564fff6052a
        Validity
            Not Before: Nov 26 19:02:52 2024 GMT
            Not After : Nov 27 19:02:52 2024 GMT
        Subject: CN=600c3d101fe35f3a760ce15c623956be97fe7329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5b:09:58:35:0a:fb:26:78:fa:7a:90:a2:0d:
                    b9:d7:cb:df:91:da:b5:69:e1:d7:9e:5c:13:fd:2c:
                    5c:f9:a7:a2:6d:d8:cf:3c:49:04:87:b6:08:9e:dc:
                    fa:e2:6f:7d:2e:70:0b:6a:2d:49:2b:91:e9:aa:b7:
                    67:35:d9:fc:23:4d:ce:9d:35:58:dc:57:5f:a4:af:
                    f5:1c:e9:8a:2b:d9:56:b3:e1:e2:8e:02:36:d6:28:
                    7a:fc:b9:4e:33:80:9d:cc:78:24:1a:3f:ac:ff:bf:
                    e8:80:ec:2c:cb:da:e5:bf:68:1d:7e:75:fc:ff:87:
                    a2:e9:43:c9:22:d9:70:00:1e:f6:ba:2c:58:07:fa:
                    77:11:11:55:20:95:be:1a:e6:10:ec:81:da:5c:d2:
                    85:b8:fd:61:52:d2:1a:17:c4:8d:9f:24:5f:51:36:
                    72:7b:c9:21:c2:d6:21:3a:ad:5b:ea:15:33:5f:17:
                    88:d3:e4:a3:cc:ce:dc:b6:c2:6c:54:2a:2e:e9:ef:
                    6d:68:33:24:d5:6d:be:88:c9:f7:3a:89:eb:f8:f3:
                    76:19:98:b6:40:44:cb:3f:e0:58:ac:e8:5b:79:0d:
                    2f:fd:8f:89:ca:1f:8d:65:fb:4e:1b:78:7a:20:3a:
                    ca:e9:17:da:2b:0c:69:c9:d7:97:94:16:6c:07:c7:
                    f2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0C:3D:10:1F:E3:5F:3A:76:0C:E1:5C:62:39:56:BE:97:FE:73:29
            X509v3 Authority Key Identifier:
                keyid:B0:FA:43:BD:3E:93:94:AE:C0:AA:F4:78:7C:26:A5:64:FF:F6:05:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPpDvT6TlK7AqvR4fCalZP_2BSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6acdbf-8fbc-4041-8a61-f1c3fca98625/1/sPpDvT6TlK7AqvR4fCalZP_2BSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6acdbf-8fbc-4041-8a61-f1c3fca98625/1/sPpDvT6TlK7AqvR4fCalZP_2BSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ce:1a:b7:75:d0:f2:f5:fe:cb:f5:b4:70:05:7d:20:0d:db:
         e8:e5:c0:2e:56:c8:e1:d6:47:eb:fe:c4:8c:1e:8b:d2:e4:10:
         b9:67:7e:cb:a2:dc:04:fd:7c:58:e8:f0:63:ca:09:9f:30:9a:
         c7:f5:0b:80:61:5b:b4:09:89:69:cd:df:77:1f:11:90:f2:03:
         1d:f1:42:9e:eb:53:8f:19:12:e4:ad:9e:a7:10:86:2b:c7:54:
         aa:10:e2:f1:ca:b9:aa:44:77:1c:b9:c8:7e:c8:42:59:d6:fb:
         61:d3:40:bf:87:ae:2b:a1:5a:5a:79:b4:74:61:73:f3:b6:ae:
         c3:2f:fe:01:45:84:c7:ef:56:ad:6d:48:c3:61:0c:e3:cc:77:
         41:ce:b4:ab:6f:5e:89:45:d4:19:da:54:57:15:47:47:89:eb:
         cf:1e:a3:f1:6d:5f:c2:15:35:79:6d:f3:86:61:c7:19:e2:2d:
         a7:30:94:5b:70:e5:e6:7c:3d:c3:70:35:7d:06:14:ee:fa:87:
         fd:7e:89:c0:c3:5b:fd:ad:7e:c4:75:32:23:d8:e1:67:81:ba:
         fe:b8:3e:04:ed:a3:2c:82:a6:35:b0:4c:81:fa:37:95:d7:0c:
         61:aa:7b:6a:29:34:43:5e:03:37:16:69:c7:f5:dc:c0:43:2c:
         12:92:35:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----