Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
File:                     7O2DGd7RXV8LarRBAJ3hmxnRUps.mft (raw, json)
Hash identifier:          GB9Y+CsyY8KCxFCKMXuhaZtaAGY47Ahwg8NkGA7S5sU=
Subject key identifier:   0E:15:1A:0A:F6:2F:AF:98:ED:BB:25:41:8F:65:58:15:05:AE:CA:F3
Authority key identifier: EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B
Certificate issuer:       /CN=eced8319ded15d5f0b6ab441009de19b19d1529b
Certificate serial:       0193572DF74F04AA768D9B075C9DCC743B19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
Manifest number:          0376
Signing time:             Sat 23 Nov 2024 04:00:50 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:50 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:50 +0000
Files and hashes:         1: 7O2DGd7RXV8LarRBAJ3hmxnRUps.crl (hash: j77KaZ/Fq6d/ytuyiaL2akdX8P2nWaegbjzeAQd0W6o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:f7:4f:04:aa:76:8d:9b:07:5c:9d:cc:74:3b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eced8319ded15d5f0b6ab441009de19b19d1529b
        Validity
            Not Before: Nov 23 04:00:50 2024 GMT
            Not After : Nov 24 04:00:50 2024 GMT
        Subject: CN=0e151a0af62faf98edbb25418f65581505aecaf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3b:3e:c5:f3:61:0c:39:b6:64:d1:c7:cb:86:
                    8d:20:84:91:1e:ed:2e:29:53:d5:3d:9b:43:54:df:
                    fb:31:e3:12:37:ae:c3:31:80:8d:6c:5a:98:da:2b:
                    1e:bf:f9:9c:ca:a5:11:c8:80:be:13:d7:4d:e8:83:
                    5d:9a:cd:14:fe:5e:21:df:5a:64:ec:9e:52:8b:c7:
                    24:83:7b:d9:c6:cd:8b:f9:92:fc:d1:d2:9c:19:6e:
                    ed:2f:94:f9:f3:0d:5e:e8:45:1c:9a:fb:45:59:27:
                    18:60:5a:e9:b2:c9:c0:3c:ff:18:2d:e1:5f:a1:9c:
                    a4:e0:da:85:68:e3:80:d6:6a:a9:b5:1b:2c:d9:1a:
                    6f:c9:df:45:7b:4d:b8:1f:66:18:c6:93:3e:ea:47:
                    56:2e:37:72:4e:e9:e0:e6:13:5e:63:08:b8:4d:4b:
                    af:94:be:92:44:0c:bf:90:52:1d:76:02:0e:8d:9b:
                    d7:fa:e7:f9:7e:84:24:b9:28:65:c9:96:6c:c2:58:
                    c1:91:9e:c3:80:1e:d4:e2:3e:98:ac:6c:f4:6c:56:
                    2f:51:25:26:87:df:c2:91:90:4a:e5:0c:37:c2:e9:
                    e6:a7:6f:b6:62:bd:3e:45:c2:b8:52:80:1e:ca:88:
                    fd:b9:c2:d7:05:6b:f1:6a:55:ae:7d:07:e9:ac:b3:
                    2c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:15:1A:0A:F6:2F:AF:98:ED:BB:25:41:8F:65:58:15:05:AE:CA:F3
            X509v3 Authority Key Identifier:
                keyid:EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:91:76:91:d0:6c:b9:f5:7b:7e:0b:0d:d9:7a:a8:05:04:40:
         64:e3:16:1d:95:f2:33:f0:83:bb:cc:31:d8:23:7f:ba:dc:c2:
         6c:ea:f3:b0:eb:6f:03:33:72:f4:92:02:fc:57:a7:b3:5f:db:
         f3:ed:dc:1c:65:12:a2:d9:f2:3f:d5:ef:71:0e:57:15:20:be:
         55:a4:4d:5b:2f:26:a3:47:b2:69:b0:ce:f9:69:75:ff:90:09:
         b1:6e:21:5f:9f:de:75:5a:c8:82:4f:a8:4c:cc:bc:fe:02:37:
         bd:53:76:15:ec:e1:35:81:97:c1:31:a6:36:2d:a1:e3:38:55:
         a3:88:36:eb:52:1e:58:e8:26:d2:10:ba:85:4b:ed:bf:98:dd:
         9e:fd:96:12:e5:83:3a:2f:ca:1c:d0:df:dd:07:9f:0e:9e:d0:
         2e:6d:ea:1a:8c:32:a5:e4:ce:8f:53:e7:02:87:9e:e6:a7:e7:
         bc:f3:03:ad:41:2b:e8:f3:42:86:d1:59:19:cb:ee:6b:05:d0:
         be:d4:9c:67:24:0f:7c:30:59:c6:8c:6b:cc:15:e6:bc:f1:4b:
         d1:07:d0:56:dc:96:67:bf:fd:04:45:b4:ad:1d:f5:67:68:b8:
         e0:fd:39:27:4e:c8:52:c7:27:d6:f7:86:cf:a2:00:d3:ec:9a:
         23:eb:29:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----