Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
File:                     7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft (raw, json)
Hash identifier:          z8dHhszgG39t8qQETZwvcOo49UQW27aRmQv/UQoK83g=
Subject key identifier:   C3:05:84:32:BC:1E:D6:9C:42:80:1F:41:F4:B9:5D:93:F3:BB:3B:6B
Authority key identifier: ED:FF:33:E8:A3:BA:AE:2D:8D:85:60:01:0C:97:C7:6F:3B:19:FA:C9
Certificate issuer:       /CN=edff33e8a3baae2d8d8560010c97c76f3b19fac9
Certificate serial:       019369D95A534A386BEBA6FC3B570FEFABBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
Manifest number:          11B6
Signing time:             Tue 26 Nov 2024 19:01:12 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:12 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:12 +0000
Files and hashes:         1: 7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl (hash: RQgfBuIp80ojiOd8z/RTWFut+hC0xcm2krU9LB8ro3I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:5a:53:4a:38:6b:eb:a6:fc:3b:57:0f:ef:ab:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff33e8a3baae2d8d8560010c97c76f3b19fac9
        Validity
            Not Before: Nov 26 19:01:12 2024 GMT
            Not After : Nov 27 19:01:12 2024 GMT
        Subject: CN=c3058432bc1ed69c42801f41f4b95d93f3bb3b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4f:74:3a:c1:9b:2f:e3:ba:0a:28:0b:4b:e7:
                    3f:61:3c:27:8b:52:e5:e7:d2:50:1e:ff:1b:ac:e7:
                    5b:84:07:8d:98:fc:83:8b:d3:5a:80:e1:e8:3e:c6:
                    d2:55:97:46:15:9f:b4:6e:9b:9a:08:64:56:0a:2e:
                    98:31:e6:3e:2d:a7:de:16:79:09:0a:f5:aa:6b:0a:
                    8d:05:7f:37:8f:55:46:44:8b:47:5e:98:2a:36:d6:
                    27:0e:86:e3:d2:da:b1:8f:95:c1:57:ec:c4:c1:b3:
                    9c:7b:20:34:c1:5a:5f:a7:4d:84:89:35:d2:5c:f9:
                    fd:6c:8c:01:43:ae:1e:ee:b4:3f:15:3e:fd:74:20:
                    d3:88:0f:77:d2:0c:b2:5c:2f:8c:5a:82:f5:8a:24:
                    db:8f:95:96:8b:b8:36:2a:51:1c:2a:c8:02:60:03:
                    ad:68:c4:87:8e:49:29:10:72:aa:1b:62:0b:88:31:
                    c1:c1:2a:cc:cf:0b:71:b7:6a:95:91:1c:23:7e:53:
                    6f:f5:0c:20:f5:00:2e:a7:a0:80:84:2b:95:fd:f3:
                    51:bc:76:ad:36:35:36:d2:08:7c:d8:a3:59:1d:26:
                    f5:8f:80:2a:e6:37:c2:5f:48:3c:63:58:65:9b:47:
                    e0:44:ee:2f:3c:f4:17:b7:ea:ec:ed:90:3f:35:e1:
                    d6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:05:84:32:BC:1E:D6:9C:42:80:1F:41:F4:B9:5D:93:F3:BB:3B:6B
            X509v3 Authority Key Identifier:
                keyid:ED:FF:33:E8:A3:BA:AE:2D:8D:85:60:01:0C:97:C7:6F:3B:19:FA:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b5:15:b7:45:c9:8d:c1:50:84:a0:f3:8a:e8:2f:51:70:35:
         b8:17:ae:67:8e:da:01:2c:3f:c5:2d:7a:97:42:22:b1:c7:40:
         65:07:84:b4:a1:f5:30:2d:13:b0:17:f8:52:d2:32:ce:37:8e:
         1a:2d:49:c5:04:12:48:ca:ee:6c:c1:04:1f:89:f4:ff:25:6b:
         dc:cb:6f:15:23:cf:82:77:a4:f1:73:80:40:ca:a0:99:27:16:
         13:74:4b:b0:48:c4:f2:38:f4:52:b6:b9:35:89:81:b1:19:93:
         e8:34:31:03:d5:b6:d9:c3:a9:26:ff:dd:75:6a:1e:09:f9:40:
         00:b1:85:cf:ac:43:dc:80:27:9c:a9:50:13:aa:ac:7a:05:8b:
         5a:ed:4b:03:c8:60:6a:cd:1d:3a:c1:64:ca:b1:9c:f2:52:58:
         e3:66:91:c6:ad:2a:58:5b:f9:e4:89:df:b7:85:84:d1:41:c3:
         a4:f4:35:24:cf:04:a8:a6:a9:52:43:ef:e1:24:7b:74:4c:e2:
         40:b0:fa:1a:a6:45:32:7e:d9:01:b7:1b:f2:85:3d:70:60:85:
         51:68:72:47:bb:93:a9:16:84:d0:55:ca:e0:fc:94:fc:24:6b:
         ab:0b:2d:70:71:a4:41:08:3c:0a:5a:92:df:8b:82:fa:2a:c1:
         f8:5f:4e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----