Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
File:                     a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft (raw, json)
Hash identifier:          bUBaGregAELvAiV3VFvE9J2WaQIpIehGydbTmxaQBao=
Subject key identifier:   C7:0C:04:09:86:8A:39:8A:E6:C0:2C:BD:EE:BD:A9:61:94:7F:C4:7E
Authority key identifier: 6B:B0:CB:2A:E4:6D:23:82:58:1F:E8:B7:47:E3:31:B4:68:24:F4:1E
Certificate issuer:       /CN=6bb0cb2ae46d2382581fe8b747e331b46824f41e
Certificate serial:       0193568AAF1B625A1AD6218C7C7EE48A3912
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
Manifest number:          136D
Signing time:             Sat 23 Nov 2024 01:02:29 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:29 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:29 +0000
Files and hashes:         1: a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl (hash: 9P5l4rHpy8iigucb5IM0UP2w/xoug51r+h1us8NXsjk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:af:1b:62:5a:1a:d6:21:8c:7c:7e:e4:8a:39:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bb0cb2ae46d2382581fe8b747e331b46824f41e
        Validity
            Not Before: Nov 23 01:02:29 2024 GMT
            Not After : Nov 24 01:02:29 2024 GMT
        Subject: CN=c70c0409868a398ae6c02cbdeebda961947fc47e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:25:e7:07:f7:c6:ec:a6:14:d3:c3:1e:e5:c9:
                    e7:71:3e:a1:1c:89:17:e6:59:11:d6:4f:1b:50:de:
                    fd:1e:09:7b:8d:82:e7:d6:a3:e2:3e:ca:21:28:c1:
                    eb:27:22:8c:8b:d4:b8:15:aa:e7:92:12:bc:6d:5c:
                    e4:2e:63:6a:1c:cd:f6:5a:30:c0:96:9b:0e:57:63:
                    e5:cc:71:17:f4:0b:9c:1e:02:94:fd:f2:5c:47:3c:
                    b3:72:e2:db:f0:f5:4f:99:20:17:0e:90:6e:e4:e0:
                    d4:90:06:18:13:20:32:0d:3a:b1:2a:52:e5:1b:ac:
                    9b:d5:1c:81:85:fd:39:c5:0e:f6:79:c7:1c:de:29:
                    f4:41:4b:09:ca:6c:83:1a:b5:fc:c5:75:36:fc:fa:
                    26:3b:51:cd:bd:02:62:aa:00:02:12:45:88:a5:d1:
                    c5:d5:12:33:4f:87:4b:e3:19:3d:78:af:5a:4d:c0:
                    37:30:3c:e4:48:33:d5:33:06:6b:eb:ba:d4:f4:af:
                    f3:02:e7:1f:68:13:9c:50:1a:b0:a8:17:f4:16:02:
                    01:40:28:6e:f5:9a:99:4f:ac:5b:29:e8:59:80:ad:
                    48:0a:77:4e:9f:d7:c3:2b:b5:d1:70:97:dd:33:08:
                    0d:84:8f:fd:cc:93:b3:45:bf:9f:91:44:d5:ab:74:
                    2f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0C:04:09:86:8A:39:8A:E6:C0:2C:BD:EE:BD:A9:61:94:7F:C4:7E
            X509v3 Authority Key Identifier:
                keyid:6B:B0:CB:2A:E4:6D:23:82:58:1F:E8:B7:47:E3:31:B4:68:24:F4:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:d8:ce:5a:4a:47:be:5f:cb:15:e7:eb:f5:0b:88:32:b9:07:
         70:6d:6d:8c:43:11:dd:fa:c9:de:24:2e:d4:1b:de:23:94:ca:
         0d:97:13:f6:3a:7d:34:37:e6:46:c0:44:a0:f4:31:9a:95:14:
         f6:5b:82:50:73:9f:f1:9f:fa:53:75:05:ac:27:e2:18:c0:e2:
         68:7d:0b:60:16:79:8f:b8:e2:c1:9c:4d:bb:a9:39:6f:66:0a:
         7a:50:ea:7c:d2:e2:3d:9b:ec:c5:73:50:1f:0e:26:da:ed:55:
         a7:02:95:17:39:68:7f:37:20:86:9d:8f:4e:22:0e:6c:ea:9f:
         14:f8:0c:09:97:6a:20:26:33:1a:22:fa:f1:e5:32:b6:86:e2:
         f3:47:04:28:7b:63:cd:07:62:0c:4e:45:1c:77:ca:52:a0:10:
         62:22:77:d7:c2:e9:24:17:23:72:d3:9d:8e:7a:81:fc:c4:a5:
         04:bf:b7:9d:22:e6:3c:a0:97:61:78:25:6b:b9:2f:99:c2:5f:
         70:16:cd:87:db:b8:95:b0:a7:79:3e:64:74:90:f5:fe:d8:b6:
         a1:18:ba:75:af:8a:5f:ee:ca:b1:ce:53:3a:ba:93:99:00:ef:
         53:fd:4c:29:99:e0:a9:ca:1b:14:3e:23:02:d8:b3:5c:3a:47:
         00:74:ec:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----