Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7e61b4-ff4d-4204-a9f7-21b966dfc498/1/6DE3LmvVKfTDFQDoXM_schGoyx8.mft
File:                     6DE3LmvVKfTDFQDoXM_schGoyx8.mft (raw, json)
Hash identifier:          xTp2Bx51QrRYL7JMGV0LyMoFw/4hueCUDBli2YupvEI=
Subject key identifier:   AB:DC:FE:42:11:E1:CA:EB:25:ED:F9:F0:48:3F:2B:CB:69:AE:B8:CF
Authority key identifier: E8:31:37:2E:6B:D5:29:F4:C3:15:00:E8:5C:CF:EC:72:11:A8:CB:1F
Certificate issuer:       /CN=e831372e6bd529f4c31500e85ccfec7211a8cb1f
Certificate serial:       019369D9841E15EAC2E36ABA8893BD38A5D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6DE3LmvVKfTDFQDoXM_schGoyx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/7e61b4-ff4d-4204-a9f7-21b966dfc498/1/6DE3LmvVKfTDFQDoXM_schGoyx8.mft
Manifest number:          05AD
Signing time:             Tue 26 Nov 2024 19:01:23 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:23 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:23 +0000
Files and hashes:         1: 6DE3LmvVKfTDFQDoXM_schGoyx8.crl (hash: RA6tiL44QkIhJMq5cZiwqo2zW185v2mgCvKfWm9E/Jk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/7e61b4-ff4d-4204-a9f7-21b966dfc498/1/6DE3LmvVKfTDFQDoXM_schGoyx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/7e61b4-ff4d-4204-a9f7-21b966dfc498/1/6DE3LmvVKfTDFQDoXM_schGoyx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6DE3LmvVKfTDFQDoXM_schGoyx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:84:1e:15:ea:c2:e3:6a:ba:88:93:bd:38:a5:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e831372e6bd529f4c31500e85ccfec7211a8cb1f
        Validity
            Not Before: Nov 26 19:01:23 2024 GMT
            Not After : Nov 27 19:01:23 2024 GMT
        Subject: CN=abdcfe4211e1caeb25edf9f0483f2bcb69aeb8cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:04:9f:47:6c:97:8a:e2:67:3c:e0:bf:52:8b:
                    72:55:53:b4:6c:09:18:4e:b1:e8:09:9b:f3:f7:d3:
                    4e:e6:db:0f:5b:8c:b9:fb:e8:44:63:ac:e1:0e:7e:
                    e9:49:33:77:cf:57:ff:36:84:fa:74:ca:dc:7e:03:
                    97:c7:ce:e5:ea:80:f5:7b:fd:35:de:1e:fc:34:ac:
                    0c:af:71:48:2d:41:65:f9:56:ca:0d:cd:ef:2a:78:
                    b9:1b:ff:05:a5:ae:06:2d:88:65:be:83:a4:7a:0f:
                    61:e7:56:80:62:89:fa:8a:19:8f:13:e2:c2:6b:1e:
                    2b:ea:83:38:8a:e7:f7:23:1e:61:ea:d2:18:1b:9f:
                    ca:85:b0:71:07:9b:35:39:07:3e:1a:20:71:49:3d:
                    ec:e7:ec:61:bb:80:4f:c2:a8:8f:e9:9e:3d:34:ef:
                    49:2d:89:57:6d:16:90:b8:42:2c:80:07:2b:db:16:
                    58:9c:6b:4d:1a:f9:23:61:1d:47:ad:49:7e:71:ce:
                    6c:c2:a2:ca:ca:60:fb:7e:7d:01:fe:7b:6c:d4:1c:
                    08:ec:54:31:17:dc:73:80:64:59:5f:38:52:35:6c:
                    bd:39:ab:8e:22:b6:ca:e9:74:b9:4d:6c:be:3b:3c:
                    d5:b2:15:38:b4:4e:e5:95:b1:de:d3:44:f6:66:29:
                    b9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DC:FE:42:11:E1:CA:EB:25:ED:F9:F0:48:3F:2B:CB:69:AE:B8:CF
            X509v3 Authority Key Identifier:
                keyid:E8:31:37:2E:6B:D5:29:F4:C3:15:00:E8:5C:CF:EC:72:11:A8:CB:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DE3LmvVKfTDFQDoXM_schGoyx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7e61b4-ff4d-4204-a9f7-21b966dfc498/1/6DE3LmvVKfTDFQDoXM_schGoyx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7e61b4-ff4d-4204-a9f7-21b966dfc498/1/6DE3LmvVKfTDFQDoXM_schGoyx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:98:2b:25:eb:23:d0:4b:04:a7:a9:2f:6a:b7:64:44:f5:42:
         9f:3d:30:7f:44:b9:2e:8e:d0:3e:6b:de:29:10:51:73:fe:ea:
         09:c9:91:c7:38:23:d3:ed:8e:ee:c3:4e:c2:29:4f:a6:78:2b:
         e0:3c:1f:2d:77:a0:5f:7d:7f:d2:7c:23:2d:8b:15:49:94:1f:
         b1:d6:38:f1:a2:2c:89:ec:ca:07:30:d0:d9:95:ba:68:1a:72:
         49:43:33:4f:82:6c:60:94:fb:1c:b0:57:7d:c1:9d:4a:e2:41:
         ee:03:b5:35:cc:d0:f9:b3:64:cd:d1:84:da:13:3a:ff:74:a0:
         10:79:f8:59:71:37:00:33:1f:ce:e9:e1:88:6f:ee:9f:e7:6f:
         7e:6a:b9:1e:bd:4e:c9:a6:2e:36:ce:78:8d:8d:46:66:1a:25:
         b9:ef:e7:05:5e:67:50:38:b8:35:08:de:25:ac:44:84:3c:bf:
         23:68:ca:12:0d:86:2a:84:df:7f:5b:07:33:a5:3a:80:99:b2:
         46:23:38:0d:dc:e9:b3:8d:ae:e4:63:73:18:e9:89:b3:1a:45:
         cf:3f:74:63:5b:d9:e1:51:6e:f3:93:3c:8e:cf:9f:47:6e:be:
         c6:53:be:c7:97:38:f7:3d:90:01:2e:ed:04:d0:6a:42:ad:ca:
         77:3b:2d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----