Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
File:                     eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft (raw, json)
Hash identifier:          guorG1tK0fFP4GWqXfbgQeSmhghiGDeBd8A+RzU9S0M=
Subject key identifier:   BF:AA:56:9C:AA:1A:C0:98:5F:67:19:9B:F1:EA:DC:1F:26:87:D7:0A
Authority key identifier: 79:2E:FE:DF:BB:96:DC:AA:D1:56:5D:21:BF:4A:A8:56:7B:0B:64:9F
Certificate issuer:       /CN=792efedfbb96dcaad1565d21bf4aa8567b0b649f
Certificate serial:       019356F68E0EDDC755B83E81B1E4BD21B903
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 03:00:19 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:19 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:19 +0000
Files and hashes:         1: eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl (hash: tTG/hZKaM/LZ63govGv9XJpZAhPld/2mAFwwInOvB3o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:8e:0e:dd:c7:55:b8:3e:81:b1:e4:bd:21:b9:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792efedfbb96dcaad1565d21bf4aa8567b0b649f
        Validity
            Not Before: Nov 23 03:00:19 2024 GMT
            Not After : Nov 24 03:00:19 2024 GMT
        Subject: CN=bfaa569caa1ac0985f67199bf1eadc1f2687d70a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b7:f8:be:7a:60:fc:98:70:f0:5d:5a:6b:01:
                    8a:8e:b7:82:6c:c4:61:9f:33:b1:64:b9:32:29:93:
                    c4:e8:a6:8e:63:c9:0a:d1:f6:a0:c8:b1:3a:c6:b6:
                    ce:f1:d8:44:24:20:a4:41:25:d3:77:1a:1b:83:b8:
                    8a:b7:fc:ac:3d:8d:18:bb:52:d0:75:37:96:bb:a4:
                    b4:84:0d:1c:1b:e4:12:98:d8:e0:96:24:6f:8e:7d:
                    19:49:fa:00:0c:20:45:80:6e:45:89:9f:da:96:10:
                    9b:22:fe:06:67:a9:59:12:a9:7f:c1:2b:ad:19:6c:
                    3b:f4:18:62:6f:36:e6:a7:3e:07:58:6d:ef:07:b3:
                    a4:fd:c4:5f:b0:6c:07:57:93:e8:c5:f0:d6:36:48:
                    40:ff:34:fe:64:fa:63:2e:31:6f:40:57:86:db:d6:
                    8f:7f:2b:73:6b:6c:16:42:6c:4b:78:73:0d:e6:9c:
                    24:42:5d:16:c4:f2:62:84:73:92:ee:4b:09:92:58:
                    d0:28:8f:d5:60:c8:e0:fa:96:30:6c:d3:5c:7a:46:
                    aa:ef:42:8a:41:e5:54:7d:04:5b:5c:80:76:8f:96:
                    c4:a8:b6:d4:39:38:1d:8c:f9:28:76:87:a6:8d:15:
                    92:f8:81:90:cb:4e:89:5a:7b:f3:8e:7d:d2:cd:d0:
                    52:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AA:56:9C:AA:1A:C0:98:5F:67:19:9B:F1:EA:DC:1F:26:87:D7:0A
            X509v3 Authority Key Identifier:
                keyid:79:2E:FE:DF:BB:96:DC:AA:D1:56:5D:21:BF:4A:A8:56:7B:0B:64:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b5:5c:e8:78:17:b9:ea:7a:52:40:ef:91:24:d6:48:5b:04:
         59:fd:9b:8b:9e:58:92:c6:93:1c:12:02:23:33:c3:38:61:d7:
         47:26:bf:9e:e8:09:ca:25:96:bf:68:22:29:33:d3:9b:3b:01:
         c7:f9:d5:7a:d2:66:fb:fd:78:40:62:eb:b3:89:23:71:c0:14:
         d7:1c:51:b5:eb:04:60:92:91:51:07:ee:b7:5c:35:e6:2f:73:
         aa:f8:b4:a1:da:14:c4:de:ec:37:47:f7:9a:5e:7c:48:3d:28:
         c8:b1:d8:28:03:4a:59:7d:82:56:09:54:57:55:b1:d8:fe:eb:
         7f:6c:35:84:0e:2f:ae:05:49:6c:b9:69:71:f6:18:da:70:1b:
         ac:e8:df:97:9b:66:ae:6f:29:56:ec:3c:11:57:fa:53:92:70:
         91:e3:93:12:3a:56:35:bc:07:82:7f:fb:81:95:c1:0b:ed:91:
         61:ab:e0:0f:0d:ee:0c:16:4d:d5:ec:81:3c:23:14:bf:6d:81:
         17:f2:c3:5c:3f:c8:64:0c:3c:60:70:d0:08:90:64:4f:72:48:
         c7:74:4a:c7:7c:5c:27:2a:4f:ce:9e:56:47:b2:5c:39:6d:76:
         83:3a:bc:2c:f7:62:20:c0:aa:eb:9f:be:65:bf:97:ef:db:8d:
         c2:53:62:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----