Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
File:                     7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft (raw, json)
Hash identifier:          WGMXgjO+cAWDwQpVxjNixQMTJMMhx9ncLsx0R1FmFAs=
Subject key identifier:   A7:44:10:0D:BF:5D:4E:44:04:3B:F3:92:6B:71:D0:B8:E4:A5:A8:79
Authority key identifier: EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA
Certificate issuer:       /CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
Certificate serial:       01936A46DF50BE8C5B41D1906370807069D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
Manifest number:          1377
Signing time:             Tue 26 Nov 2024 21:00:49 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:49 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:49 +0000
Files and hashes:         1: 7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl (hash: Y2J/8MVrpsB/iyUO3ZUrRwP5mcJtIJaVkUumccNv4X0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:df:50:be:8c:5b:41:d1:90:63:70:80:70:69:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
        Validity
            Not Before: Nov 26 21:00:49 2024 GMT
            Not After : Nov 27 21:00:49 2024 GMT
        Subject: CN=a744100dbf5d4e44043bf3926b71d0b8e4a5a879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e1:15:f3:c8:b6:98:c9:7c:3d:3f:05:57:84:
                    3a:56:d3:e1:1d:7c:3f:ab:c7:0b:cb:8f:88:7f:b4:
                    ba:af:88:4a:bd:35:90:dd:c3:0e:7f:fb:65:56:10:
                    9b:9c:14:5a:c3:e0:85:0d:b2:64:83:89:47:5f:36:
                    62:ef:31:37:08:41:bf:24:e5:ae:95:0f:18:c0:93:
                    14:78:17:47:5e:dc:4d:e1:f3:ce:6f:df:a6:1b:11:
                    19:dd:cd:24:4f:4e:2c:ab:3f:2a:ef:3d:80:80:fe:
                    92:7f:85:a3:d1:7c:3d:8a:8c:e4:cf:1c:18:22:ea:
                    79:05:de:bb:d5:35:22:e4:34:1e:0b:46:e7:94:da:
                    3b:ba:47:d4:3f:b4:3b:89:56:6c:a4:08:9f:00:da:
                    6b:f1:ec:92:8c:f7:5c:b2:28:b1:88:01:fb:8f:0b:
                    89:95:eb:8c:f7:fe:92:8e:39:ce:11:d3:5a:df:6b:
                    6f:16:a7:b8:7e:1a:29:15:59:72:d7:ac:1a:d2:2c:
                    d2:e8:1b:5e:e5:df:74:df:02:6f:36:dc:ef:6d:0d:
                    da:d1:34:72:e8:00:e7:4c:2c:e9:c5:ea:69:8d:1d:
                    4c:a7:31:af:31:30:57:43:9c:6e:9f:55:75:a7:40:
                    1c:80:f3:79:ca:54:10:07:9b:6e:23:55:6e:c3:55:
                    a2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:44:10:0D:BF:5D:4E:44:04:3B:F3:92:6B:71:D0:B8:E4:A5:A8:79
            X509v3 Authority Key Identifier:
                keyid:EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:8e:cb:dc:97:d9:07:e4:f6:91:ae:0a:25:e4:12:19:9b:c1:
         ee:e4:0e:74:61:ba:c7:ae:b9:19:79:b0:40:02:a4:4e:09:9a:
         1b:e7:bb:9e:48:d4:3a:89:ab:fb:f6:2d:fa:bf:5b:f3:88:8b:
         74:41:1a:76:d1:b2:9c:51:e4:5b:c5:48:25:5f:7c:39:68:50:
         2a:54:8a:c8:ab:5c:58:8f:37:8b:20:a7:73:32:01:73:09:3c:
         76:a3:19:49:fc:23:67:f4:ba:f4:88:5e:79:f1:cd:1c:ae:0e:
         99:cf:6e:97:41:2f:4b:f8:1e:18:dd:a4:e4:10:a4:9b:d4:8c:
         ef:b4:69:6f:a8:2c:0d:4e:8a:73:dd:46:e4:16:a3:e7:ac:e2:
         b6:06:cd:1b:ea:72:76:1e:90:82:0b:aa:81:3c:24:8a:84:44:
         45:f6:48:ed:cf:b6:67:65:6c:83:2a:68:45:7f:46:3d:74:b2:
         9a:ff:05:65:a5:35:3f:97:16:ca:99:dd:20:11:e0:05:bd:3b:
         86:ca:27:1b:14:3c:8d:8a:37:06:8e:ed:3c:37:1a:f8:81:f7:
         23:62:ad:9c:35:62:7b:d7:fe:e9:bd:e3:c0:98:c2:00:ac:c8:
         e7:31:34:6b:93:68:f2:b2:02:e5:29:4a:bf:48:c5:4e:89:c2:
         3b:ef:9c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----