Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
File:                     L5FDTuFsYTNOwnDfVox3oLXeBSo.mft (raw, json)
Hash identifier:          gsd/PJaphNt9cUNPOTqZozkzY/LnOxqf0W+ooQRjzp0=
Subject key identifier:   4F:ED:B0:82:4A:0A:6A:8F:2B:4B:80:F2:69:FF:78:87:F0:7E:9F:25
Authority key identifier: 2F:91:43:4E:E1:6C:61:33:4E:C2:70:DF:56:8C:77:A0:B5:DE:05:2A
Certificate issuer:       /CN=2f91434ee16c61334ec270df568c77a0b5de052a
Certificate serial:       019356F68C63017D607B4401ED5641B4647B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
Manifest number:          0A56
Signing time:             Sat 23 Nov 2024 03:00:18 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:18 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:18 +0000
Files and hashes:         1: L5FDTuFsYTNOwnDfVox3oLXeBSo.crl (hash: g6hzNCzd7cuX8JtFR880ppE3i3L6FgSP0gPydj1gHyY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:8c:63:01:7d:60:7b:44:01:ed:56:41:b4:64:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f91434ee16c61334ec270df568c77a0b5de052a
        Validity
            Not Before: Nov 23 03:00:18 2024 GMT
            Not After : Nov 24 03:00:18 2024 GMT
        Subject: CN=4fedb0824a0a6a8f2b4b80f269ff7887f07e9f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6d:ec:37:91:2e:23:33:90:bf:77:43:9f:7d:
                    42:d5:16:04:99:ef:74:2b:22:2f:ca:b2:20:f2:2e:
                    ed:6e:28:4a:c8:e7:dd:37:79:a6:9d:4a:0d:c1:d3:
                    7c:81:0c:6c:e3:f1:d4:de:92:b6:92:4d:9c:c9:36:
                    b4:1f:78:92:09:5d:b8:83:45:1d:51:15:f6:5e:fd:
                    a5:2e:0b:6b:97:61:db:f7:6d:bc:94:9d:b1:be:46:
                    4c:84:f7:e1:5b:ed:56:87:af:07:bf:65:57:2a:ae:
                    c4:94:a9:8a:c3:db:d5:72:ce:9b:a6:fc:aa:d6:c5:
                    ec:61:fe:4f:45:be:2b:b9:58:96:fb:84:eb:b3:b6:
                    dd:ca:20:bd:6c:c9:9b:bc:48:8e:63:12:72:7b:c8:
                    ee:79:93:2f:ac:28:3a:20:d3:47:2f:a0:2a:38:b7:
                    00:f7:83:1b:e8:00:34:da:ed:9e:cc:54:52:42:2a:
                    bd:3a:2f:3d:32:cb:7a:97:81:ea:7c:2f:6b:e0:49:
                    a3:0d:d3:98:f8:06:96:b5:bb:9f:33:44:f1:85:89:
                    44:1d:a1:50:a7:ca:23:94:06:8d:3f:75:d8:16:68:
                    56:6b:80:4d:ae:cf:ea:30:54:3b:40:e5:15:75:13:
                    2e:4f:ed:1a:59:f6:8e:c9:44:8f:24:e9:46:da:79:
                    e9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:ED:B0:82:4A:0A:6A:8F:2B:4B:80:F2:69:FF:78:87:F0:7E:9F:25
            X509v3 Authority Key Identifier:
                keyid:2F:91:43:4E:E1:6C:61:33:4E:C2:70:DF:56:8C:77:A0:B5:DE:05:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:e7:d0:2b:8f:8e:47:7f:0d:80:3e:5c:00:0b:e5:ea:c2:c4:
         db:65:cb:4b:d2:27:fb:ae:29:37:d3:4d:07:54:c1:b9:ec:73:
         7e:88:d9:9d:dc:d3:d9:dd:e8:b8:81:83:09:60:1c:f7:6d:67:
         0e:c5:59:1e:c4:03:af:ac:8c:aa:eb:bd:55:46:12:63:c9:12:
         f5:d7:26:ad:c8:41:06:aa:78:18:09:31:ec:ba:61:ce:f5:2f:
         d7:9a:84:f8:69:94:79:70:7e:bf:d9:6e:3a:41:5b:a0:76:28:
         60:ca:70:f6:8e:b9:69:b5:49:93:ba:25:9f:73:a4:23:16:68:
         4b:85:06:7d:24:3b:b3:9f:02:7b:e7:8d:fb:c9:ec:5e:39:a0:
         f4:7c:01:9f:de:bd:e4:ac:26:99:24:96:dc:51:0c:71:99:cb:
         d7:58:16:7c:e6:5a:64:8e:56:69:21:67:df:5e:e2:77:94:9c:
         d8:64:1e:29:28:04:a7:c3:53:cc:09:10:4a:d8:8b:8c:90:a0:
         6c:e9:99:30:39:f3:da:c6:1f:1b:9e:fa:54:bf:98:58:de:29:
         1f:b2:8a:98:1d:8b:ad:55:c9:1f:b8:dd:d1:a4:dc:41:39:a9:
         35:f6:68:87:49:16:16:8d:27:0a:91:cb:18:e2:25:9d:d1:83:
         f8:63:39:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----