Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
File:                     eO-oRu6OjAecoehyv-BfngT3_-8.mft (raw, json)
Hash identifier:          XaeYKR77qXhZ9Uvs2ADX5rGG/UVmg84q+SQZEv98C/c=
Subject key identifier:   F0:DD:8E:FB:03:22:E9:A1:1E:70:69:6C:1B:58:B8:1F:C2:5A:32:C7
Authority key identifier: 78:EF:A8:46:EE:8E:8C:07:9C:A1:E8:72:BF:E0:5F:9E:04:F7:FF:EF
Certificate issuer:       /CN=78efa846ee8e8c079ca1e872bfe05f9e04f7ffef
Certificate serial:       0193568A61DE569419C24A0EBA6DA39E8365
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
Manifest number:          0EFE
Signing time:             Sat 23 Nov 2024 01:02:09 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:09 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:09 +0000
Files and hashes:         1: eO-oRu6OjAecoehyv-BfngT3_-8.crl (hash: c/RfgA0BNtOfdWqTMql3k4VRr9zHd8lNfqgHO/bRrbo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:61:de:56:94:19:c2:4a:0e:ba:6d:a3:9e:83:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78efa846ee8e8c079ca1e872bfe05f9e04f7ffef
        Validity
            Not Before: Nov 23 01:02:09 2024 GMT
            Not After : Nov 24 01:02:09 2024 GMT
        Subject: CN=f0dd8efb0322e9a11e70696c1b58b81fc25a32c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:13:06:b5:bf:40:47:84:b0:fd:2a:37:7e:82:
                    6f:4e:c3:16:97:c7:25:6f:56:13:d0:6c:cc:ca:85:
                    0f:a3:d5:98:d8:45:ba:2f:b0:27:e2:20:3a:18:18:
                    84:95:68:d1:04:d5:09:3f:dc:da:34:5b:a2:d5:0c:
                    94:f7:d2:61:d4:a0:1f:c6:17:f3:c0:a4:08:55:1a:
                    39:7f:f3:4e:1e:5e:12:f9:a0:25:8f:33:e1:29:0b:
                    71:ca:84:f6:60:e7:86:90:f3:63:2e:a9:c3:6f:3f:
                    94:bc:e7:3e:62:9c:ae:2d:c3:94:62:d9:01:3f:b3:
                    97:c5:a8:b4:75:e4:c0:0e:93:5c:90:04:74:10:75:
                    bc:30:38:8c:1c:40:be:86:17:0b:33:bc:d7:82:69:
                    56:09:17:dc:31:b1:ca:4b:df:02:ae:23:ab:df:46:
                    5b:81:b0:3f:32:0c:db:18:36:9b:62:ec:12:ab:8e:
                    b0:ab:6e:af:d5:8c:c4:53:35:1c:74:85:3d:70:0a:
                    95:0c:09:03:3d:31:2e:ef:02:00:0d:52:11:08:e7:
                    b3:26:3f:38:ac:63:f6:db:b4:ae:29:a8:27:ee:d4:
                    bd:38:de:2a:14:f6:f2:24:e3:9b:f7:da:93:e3:ae:
                    e4:4c:d1:27:05:44:d5:b8:54:a2:7f:25:fd:fb:ce:
                    3c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DD:8E:FB:03:22:E9:A1:1E:70:69:6C:1B:58:B8:1F:C2:5A:32:C7
            X509v3 Authority Key Identifier:
                keyid:78:EF:A8:46:EE:8E:8C:07:9C:A1:E8:72:BF:E0:5F:9E:04:F7:FF:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a6:94:ab:10:69:5b:83:4b:36:e1:14:1d:b4:dd:20:93:5d:
         80:4a:5d:c6:8d:e0:8d:43:59:4e:82:cc:be:cf:98:24:87:aa:
         e1:ef:c5:f6:43:3b:92:ac:24:35:5e:a2:66:51:23:d5:2d:37:
         0f:2a:43:20:4b:d7:77:2d:5a:aa:0f:12:6c:86:8b:3a:7c:ee:
         4e:a4:fa:7e:ad:36:a4:81:6e:ad:54:a9:ec:bc:b1:56:76:45:
         6b:f0:5a:02:39:6d:be:a0:e9:90:ce:b4:0c:2b:e2:5a:88:7c:
         62:e8:8f:1c:02:e0:a1:39:09:1f:26:0a:2e:47:e1:4d:1e:f2:
         c6:4e:66:ea:77:b7:e0:c8:ea:41:3b:d5:4a:16:c2:f1:bf:72:
         51:10:8c:41:87:51:c5:9c:7d:9a:46:fe:eb:bf:73:1e:4c:d6:
         e4:13:fe:71:6a:02:38:8f:d0:fb:84:11:e4:21:17:82:2c:d7:
         b5:f5:87:89:b1:0d:2f:91:b2:ae:e1:0a:28:17:da:7a:43:bc:
         47:6d:88:20:27:2e:c7:59:08:75:28:8d:82:14:d5:7e:7e:5b:
         7e:90:8d:38:45:26:ad:a8:9a:07:af:7c:f6:41:1a:21:2d:d9:
         7b:50:a6:be:ef:4d:18:03:10:d5:ee:0c:7a:5e:b2:f9:cd:71:
         4b:af:92:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----