Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
File:                     guS0v-5FTQqkcKXAqUEDSdSh13Q.mft (raw, json)
Hash identifier:          WfWxITGxmT67TUBke6vRFkK53i3cT5NOzvbrjm0kjLM=
Subject key identifier:   D7:FE:4A:8D:8F:D7:D3:49:DB:B1:53:A0:7F:81:8C:1F:50:DA:A8:4A
Authority key identifier: 82:E4:B4:BF:EE:45:4D:0A:A4:70:A5:C0:A9:41:03:49:D4:A1:D7:74
Certificate issuer:       /CN=82e4b4bfee454d0aa470a5c0a9410349d4a1d774
Certificate serial:       019364B2B693D1F56C61B256FBF8F116920B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
Manifest number:          0CC1
Signing time:             Mon 25 Nov 2024 19:00:53 +0000
Manifest this update:     Mon 25 Nov 2024 19:00:53 +0000
Manifest next update:     Tue 26 Nov 2024 19:00:53 +0000
Files and hashes:         1: guS0v-5FTQqkcKXAqUEDSdSh13Q.crl (hash: KOiyd8GnDJGyzSbSGNTMFxtaTUCZt+9eIkUclslYSGQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:b2:b6:93:d1:f5:6c:61:b2:56:fb:f8:f1:16:92:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82e4b4bfee454d0aa470a5c0a9410349d4a1d774
        Validity
            Not Before: Nov 25 19:00:53 2024 GMT
            Not After : Nov 26 19:00:53 2024 GMT
        Subject: CN=d7fe4a8d8fd7d349dbb153a07f818c1f50daa84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:18:5a:72:b1:fa:02:9d:d3:85:37:77:f5:
                    d4:8a:8b:69:08:76:28:6a:89:4e:85:30:06:98:14:
                    98:1c:88:b4:3a:21:03:e7:00:63:b1:17:9d:9d:1c:
                    c9:78:11:60:41:55:e3:1f:8b:f7:14:ab:de:22:33:
                    2d:73:b4:c3:d8:94:a0:0a:04:e3:6f:b4:5c:71:e4:
                    b0:5e:89:fb:e7:ed:0e:54:b8:ff:77:de:03:61:af:
                    12:3c:00:02:d0:c3:7a:18:b1:79:ba:9b:56:0b:af:
                    4c:8b:46:ff:9e:ec:dc:e1:46:71:76:df:01:59:c3:
                    e3:36:a0:5f:a2:e6:d5:b9:be:8c:e1:57:f1:ac:ab:
                    64:69:e4:47:6f:05:b8:f5:b9:e4:bb:d3:64:8b:f3:
                    a0:26:fa:60:1a:bf:41:ed:90:ec:65:47:e2:85:4c:
                    cd:20:e7:2d:7c:d8:c3:eb:d4:04:2b:5d:96:00:08:
                    a6:26:b8:43:6a:71:3b:5e:78:6c:cd:70:c8:59:8a:
                    75:11:17:45:f8:67:0e:f1:d4:bf:83:4f:68:5e:b2:
                    dc:fd:46:ea:4c:48:cf:4c:8e:ec:71:31:4f:5d:d6:
                    ad:2a:aa:bc:be:5d:87:3b:0f:b9:9e:c6:a8:c6:98:
                    60:f3:0e:9c:d2:38:29:e7:12:71:ec:f5:1b:20:e5:
                    3e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FE:4A:8D:8F:D7:D3:49:DB:B1:53:A0:7F:81:8C:1F:50:DA:A8:4A
            X509v3 Authority Key Identifier:
                keyid:82:E4:B4:BF:EE:45:4D:0A:A4:70:A5:C0:A9:41:03:49:D4:A1:D7:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:96:f0:89:d1:3b:c0:74:88:3c:3f:1c:48:da:39:ea:b5:66:
         ef:69:dd:fe:d5:fc:30:39:0b:6a:68:94:d4:60:99:5c:50:97:
         54:2a:3b:66:1a:b7:48:ba:ce:a7:1c:0b:e1:5b:94:9e:ef:e6:
         29:27:7d:7c:14:8b:49:b6:8c:59:61:65:9f:64:c6:41:c1:6a:
         b5:a8:cd:37:83:58:30:1d:fa:9a:70:d3:3e:7d:d0:d7:34:38:
         fb:42:09:d5:c0:13:95:d7:cf:5c:b5:e5:db:0c:02:a5:6c:f1:
         7a:e7:c3:b6:ae:45:74:c2:5f:81:2a:bb:e8:9f:f7:c1:13:e0:
         b3:4e:a9:36:88:c1:79:8f:41:8c:8f:3d:2a:df:81:e9:8d:f6:
         4b:36:1c:36:63:df:7b:74:28:22:64:0a:66:75:ec:7a:ec:a6:
         2a:4e:57:ca:8a:46:d7:90:b1:5f:d5:fe:c1:a9:da:01:70:73:
         81:35:72:3d:73:b9:bd:3f:67:d4:22:e0:75:0f:21:16:09:35:
         e6:68:97:dd:c7:9b:bc:77:54:d5:04:50:04:6b:7d:35:00:e9:
         46:29:2a:01:40:2c:26:5f:1a:3d:cf:f1:6a:2f:85:a2:8d:42:
         a8:22:3c:d5:aa:01:15:18:28:98:03:b1:c4:7b:5b:60:72:4c:
         21:3f:d9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----