Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
File:                     Ef7lYBzyOOHdeSGsnYgpbizM3og.mft (raw, json)
Hash identifier:          4b6ITDz+CtGSJtHnrEqM7gR19m+/oIPBKYhpWl53gj8=
Subject key identifier:   7B:72:D8:22:9F:D6:93:60:17:03:47:CF:51:07:85:EC:60:57:29:1F
Authority key identifier: 11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88
Certificate issuer:       /CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
Certificate serial:       019406EAA875924B1FC8C50305F302500995
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
Manifest number:          0D9B
Signing time:             Fri 27 Dec 2024 07:00:29 +0000
Manifest this update:     Fri 27 Dec 2024 07:00:29 +0000
Manifest next update:     Sat 28 Dec 2024 07:00:29 +0000
Files and hashes:         1: Ef7lYBzyOOHdeSGsnYgpbizM3og.crl (hash: vlok+xkuyK0SCol8la+DwIuw3QlFHbrtdkuWPdI46NM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:ea:a8:75:92:4b:1f:c8:c5:03:05:f3:02:50:09:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
        Validity
            Not Before: Dec 27 07:00:29 2024 GMT
            Not After : Dec 28 07:00:29 2024 GMT
        Subject: CN=7b72d8229fd69360170347cf510785ec6057291f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:56:7b:59:7e:23:34:53:73:1b:e2:dc:df:69:
                    9e:b2:37:b7:38:9d:7f:15:d5:7a:b8:52:31:34:66:
                    64:9f:09:3d:f1:d9:8c:69:45:17:29:1d:98:86:30:
                    a2:f1:ea:c5:93:81:18:ed:ad:0e:a7:2c:fb:e8:da:
                    25:7f:02:6a:ba:f5:fc:20:8d:5b:ca:a6:52:0e:d0:
                    99:38:74:29:80:c4:11:60:a2:72:fb:bc:eb:d7:c9:
                    44:65:26:2d:e8:45:41:36:6a:6d:07:18:35:6e:ab:
                    bc:dd:4b:90:34:0c:1f:cc:c2:a2:10:58:42:b2:87:
                    5c:c1:29:49:c0:30:4c:cb:3d:3a:61:c4:be:83:14:
                    b4:de:87:34:09:c0:ba:b8:86:99:1c:77:19:9c:e8:
                    3c:a7:e8:33:dd:6a:8c:e1:d7:17:be:07:8d:d5:78:
                    0c:c5:42:49:fb:1f:7a:59:f5:6a:9b:df:ae:4f:09:
                    18:c3:70:a7:90:cb:86:ac:29:26:7f:ca:8b:55:75:
                    46:8e:42:3a:37:1a:e7:b7:1c:51:c6:39:fa:b0:e0:
                    9b:db:5c:d8:c0:57:30:b2:52:d2:f6:bd:64:19:d6:
                    b4:45:e4:c3:f2:4d:34:04:2b:9e:1b:64:ba:99:33:
                    47:16:e8:db:a9:45:33:c2:bb:79:db:c1:72:6e:84:
                    7a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:72:D8:22:9F:D6:93:60:17:03:47:CF:51:07:85:EC:60:57:29:1F
            X509v3 Authority Key Identifier:
                keyid:11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:72:66:dd:3a:40:c5:f0:14:c7:6b:18:ae:5d:21:a7:db:34:
         34:5a:c0:c4:c1:db:4c:9e:b2:2b:61:1d:2e:12:38:9c:c9:25:
         d3:95:3a:42:ab:0a:b5:cd:95:4a:ea:5e:ff:f1:7f:aa:f9:71:
         4b:20:5b:45:c6:66:e3:29:12:6a:b9:46:49:c0:61:5a:12:53:
         af:22:9f:4a:d6:b9:ad:f6:13:35:2e:92:71:43:3f:e6:13:37:
         e4:29:34:ed:0f:55:c9:88:91:d6:32:bf:26:f0:58:27:1e:8c:
         3a:5a:df:5f:af:e0:3f:bf:80:ad:71:ac:6f:41:42:a9:83:a2:
         09:2d:5c:cd:ff:35:32:e9:3f:57:8d:79:78:72:54:dd:de:de:
         b7:f9:42:75:b9:04:64:37:56:44:1c:a4:cd:da:4d:fd:80:9e:
         0b:79:73:be:bd:d9:cb:29:bb:78:e8:e4:99:eb:41:60:d1:95:
         33:ba:cc:7c:61:82:39:ab:19:15:69:92:10:8c:13:26:7e:3d:
         04:e6:c3:1e:c2:77:0a:77:33:a4:05:5b:0f:8a:fb:f3:c0:1b:
         cb:a0:e8:8a:d8:ae:77:d5:1f:29:36:b3:6e:5f:6d:1a:cd:2f:
         e4:8b:c2:06:4d:bc:0c:77:49:c5:56:47:f0:50:97:21:44:ff:
         7a:16:3e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----