Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft
File:                     De-ewcAwfGBzzor4PwmWjKt6u-8.mft (raw, json)
Hash identifier:          p0Q3rd/E1RUaUC62xwrQDmibIRu3jy27X8tcd8VT2wI=
Subject key identifier:   D9:F4:D4:E6:79:47:36:DC:9D:98:13:54:FA:F8:C7:25:07:69:0E:D2
Authority key identifier: 0D:EF:9E:C1:C0:30:7C:60:73:CE:8A:F8:3F:09:96:8C:AB:7A:BB:EF
Certificate issuer:       /CN=0def9ec1c0307c6073ce8af83f09968cab7abbef
Certificate serial:       01936A7D981AEBA242E8F39620B0A5B9C934
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/De-ewcAwfGBzzor4PwmWjKt6u-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft
Manifest number:          0EBD
Signing time:             Tue 26 Nov 2024 22:00:35 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:35 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:35 +0000
Files and hashes:         1: De-ewcAwfGBzzor4PwmWjKt6u-8.crl (hash: dgcQ7A2JVJRZ03bMqhQXfc4P0ErtWtgh2G0Ls9pYAHM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/De-ewcAwfGBzzor4PwmWjKt6u-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:98:1a:eb:a2:42:e8:f3:96:20:b0:a5:b9:c9:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0def9ec1c0307c6073ce8af83f09968cab7abbef
        Validity
            Not Before: Nov 26 22:00:35 2024 GMT
            Not After : Nov 27 22:00:35 2024 GMT
        Subject: CN=d9f4d4e6794736dc9d981354faf8c72507690ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:12:5b:ca:1b:df:1b:2f:25:cd:ab:84:31:b7:
                    3c:f5:e6:5c:82:be:07:48:bc:17:6c:40:ee:e1:56:
                    66:a7:d5:49:41:5f:1a:b5:17:76:3e:9f:e8:8e:e9:
                    75:02:2a:4d:6a:71:7b:9f:fa:80:fb:59:f4:55:04:
                    85:f5:db:ac:87:4b:dc:03:22:e8:08:6b:fc:1a:ed:
                    94:88:74:a0:85:20:58:0a:49:4d:89:7d:43:0b:a2:
                    83:61:cf:93:3c:85:d9:e5:7d:ad:7a:9a:7b:64:8f:
                    96:9a:6f:82:e0:80:5d:e3:44:d5:ed:01:b2:be:13:
                    87:69:a5:9b:05:71:79:7c:dd:75:5a:c4:0d:88:f7:
                    ff:f5:a4:03:c7:9d:8b:66:d4:8a:af:1e:35:cd:c1:
                    8c:4d:1f:1e:7a:12:f6:31:7d:a3:f7:f9:0a:32:d0:
                    e2:54:5b:ae:eb:e6:86:11:88:b7:78:99:bb:3e:87:
                    f6:e5:e9:3a:27:eb:f4:d2:d2:a1:ca:be:89:40:d8:
                    0f:07:bd:6e:0d:0a:c0:14:fa:6f:ea:ea:f5:ed:eb:
                    16:43:b4:ff:19:f5:e0:1b:ab:04:c9:f0:eb:26:71:
                    f9:05:36:4d:ac:7e:03:e9:6e:7a:bd:fb:bb:49:d3:
                    57:91:e8:ae:82:9a:fd:5f:ac:ea:53:07:da:43:a4:
                    7a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F4:D4:E6:79:47:36:DC:9D:98:13:54:FA:F8:C7:25:07:69:0E:D2
            X509v3 Authority Key Identifier:
                keyid:0D:EF:9E:C1:C0:30:7C:60:73:CE:8A:F8:3F:09:96:8C:AB:7A:BB:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De-ewcAwfGBzzor4PwmWjKt6u-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ec:a9:0c:c9:46:94:a6:b6:ff:b8:3e:e3:2b:af:7c:90:75:
         6e:23:78:79:4d:91:cf:01:e1:fa:92:a6:14:c8:6e:ae:59:b1:
         18:50:23:f7:ad:2b:1d:3b:8e:d2:11:d6:41:02:d6:77:41:e9:
         28:0f:c8:e6:d0:68:87:a2:1b:b7:e9:70:14:00:f0:29:22:93:
         c6:b5:44:ce:10:c0:30:d6:26:d9:18:04:e6:72:fa:ec:4a:8e:
         77:48:92:ce:3a:3d:62:2a:ed:d6:b6:cd:54:3f:46:9c:75:dc:
         09:c3:84:84:53:c7:06:6d:2e:7c:c2:cf:a9:36:2e:3a:6b:c1:
         78:44:76:0f:48:8b:aa:ef:b3:d7:47:f4:93:b0:a0:4b:8d:a4:
         5d:23:58:7b:69:1e:ec:ea:08:93:21:f9:ec:89:ae:53:08:c3:
         b6:42:88:23:ac:bc:0d:61:d5:16:4e:51:bf:a8:35:f5:01:1f:
         e6:9e:ed:62:8b:12:58:e4:1e:81:e6:0f:c0:de:e1:b5:64:9e:
         d3:da:22:53:c5:81:05:9a:ab:97:d1:4a:12:47:21:d1:10:95:
         3a:62:70:6b:a0:2c:54:6c:3d:77:f5:a9:5a:d6:eb:8e:fd:43:
         dd:6d:a9:3e:a2:b9:d2:34:f7:51:15:d8:12:0c:1b:f3:32:71:
         fa:fa:0d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----