Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/c_guDtDzbgmSN8xCz4d4tAeCgAE.mft
File:                     c_guDtDzbgmSN8xCz4d4tAeCgAE.mft (raw, json)
Hash identifier:          veg6nRSpTnNJaIlGPZACFNmZJs0s1QwLT1LE7Hjvyb0=
Subject key identifier:   CE:DF:65:C4:9A:4C:41:75:DA:F8:CF:EB:D5:6D:48:E0:A6:C5:D2:D5
Authority key identifier: 73:F8:2E:0E:D0:F3:6E:09:92:37:CC:42:CF:87:78:B4:07:82:80:01
Certificate issuer:       /CN=73f82e0ed0f36e099237cc42cf8778b407828001
Certificate serial:       019357D23B42EC1273C40A275CD9EDCBD081
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_guDtDzbgmSN8xCz4d4tAeCgAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/c_guDtDzbgmSN8xCz4d4tAeCgAE.mft
Manifest number:          136D
Signing time:             Sat 23 Nov 2024 07:00:15 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:15 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:15 +0000
Files and hashes:         1: c_guDtDzbgmSN8xCz4d4tAeCgAE.crl (hash: RzKywFNeC15PuJnCQh82oLGFfXVWb61ySfy5xQ1rj10=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/c_guDtDzbgmSN8xCz4d4tAeCgAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/c_guDtDzbgmSN8xCz4d4tAeCgAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_guDtDzbgmSN8xCz4d4tAeCgAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:3b:42:ec:12:73:c4:0a:27:5c:d9:ed:cb:d0:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f82e0ed0f36e099237cc42cf8778b407828001
        Validity
            Not Before: Nov 23 07:00:15 2024 GMT
            Not After : Nov 24 07:00:15 2024 GMT
        Subject: CN=cedf65c49a4c4175daf8cfebd56d48e0a6c5d2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7f:5a:af:27:51:0e:25:fa:c3:47:f7:9b:e7:
                    e1:64:10:0b:9d:9f:38:cb:54:12:b3:ae:b1:8f:68:
                    56:e7:9d:9d:40:74:46:77:db:09:ab:31:30:62:e3:
                    10:d8:30:01:da:08:d0:2d:d6:68:61:0f:ed:1d:b0:
                    cf:ff:6f:d9:cb:f7:75:81:aa:b2:93:7b:e4:35:ff:
                    e3:0f:41:48:e0:93:b9:53:47:47:6f:04:4f:fa:2b:
                    91:d2:3d:15:5b:8c:6d:14:83:ca:5c:a5:82:01:63:
                    18:d2:45:6b:c5:c6:fe:9a:41:6c:23:69:0f:01:6c:
                    8d:af:71:71:e9:11:0d:34:c1:71:61:64:c0:54:82:
                    8d:65:08:38:7b:4b:6d:9a:0f:fe:5a:20:12:3b:a9:
                    15:5e:4a:60:21:06:bb:63:83:f1:d2:bd:2f:a9:d2:
                    f8:c3:97:c0:3d:34:f1:8a:32:5c:53:b7:15:ae:ed:
                    a0:f2:b3:40:fc:5f:e9:9b:09:e5:87:93:49:a7:33:
                    00:3f:02:a0:a8:f9:c6:cd:07:cc:bb:6f:c0:3d:e0:
                    4f:f2:3e:ff:bd:31:ab:e7:a1:a5:45:10:51:17:1c:
                    3d:91:85:cf:76:9c:4a:ca:60:69:e5:f6:f6:b0:9a:
                    f7:e0:3e:e6:6b:17:66:2b:02:63:dc:30:62:4e:c2:
                    c1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DF:65:C4:9A:4C:41:75:DA:F8:CF:EB:D5:6D:48:E0:A6:C5:D2:D5
            X509v3 Authority Key Identifier:
                keyid:73:F8:2E:0E:D0:F3:6E:09:92:37:CC:42:CF:87:78:B4:07:82:80:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_guDtDzbgmSN8xCz4d4tAeCgAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/c_guDtDzbgmSN8xCz4d4tAeCgAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e8ad44-7197-42a7-8f45-e0fdccfb9fa3/1/c_guDtDzbgmSN8xCz4d4tAeCgAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:4e:d5:2b:37:a0:ee:d5:cb:8e:28:76:b8:2c:75:41:50:17:
         6a:48:0f:d7:f8:3c:59:e1:2f:f6:2f:0e:fe:79:5f:ce:ad:1c:
         57:a2:09:4c:ad:f7:1f:bd:07:bb:2b:66:85:d7:d6:96:26:45:
         cd:78:b4:8f:7f:5c:4f:b3:21:f1:eb:67:6b:fb:54:b9:8f:e9:
         ac:f9:ff:2c:d2:d8:b5:27:6b:48:14:4d:f1:f4:b9:ff:2d:8e:
         be:0e:39:a7:c4:85:48:c8:c0:a3:4a:a7:5d:99:5a:41:a0:a3:
         d3:13:cf:d0:50:59:4e:e6:f1:99:4d:aa:56:5d:d6:de:0f:32:
         61:15:52:82:15:2e:55:9b:54:00:5d:21:5a:24:f6:9d:9d:e7:
         ad:83:61:8c:e8:ce:b6:c5:28:c0:e2:ca:f0:bd:ca:4e:0d:96:
         cd:24:f5:f8:69:e2:c9:42:c0:d5:e2:d5:7b:36:41:a6:10:6c:
         49:0d:e5:ad:d9:17:4a:7c:6e:e1:5b:ac:34:e2:ae:3a:c3:11:
         30:ff:ac:12:61:2b:31:7c:fb:90:6b:a0:03:9c:4f:79:48:22:
         58:a2:1c:a3:e1:27:4b:ba:b5:bb:50:0f:0b:18:37:07:ce:7c:
         be:16:9d:85:f4:85:cb:47:f6:36:5b:60:b3:f7:97:95:53:60:
         15:7e:61:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----