Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
File:                     7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft (raw, json)
Hash identifier:          z+DzZBJojKgxo6DmFJo8ZNyc4kwUsJ1DeGFcAtFFMjU=
Subject key identifier:   92:E6:DF:76:5D:C6:63:90:E2:7B:8F:5B:D1:6A:1C:80:AD:34:9D:08
Authority key identifier: ED:6F:9C:79:06:94:0E:3D:44:37:C6:BD:CD:E1:64:D0:65:A8:0E:A5
Certificate issuer:       /CN=ed6f9c7906940e3d4437c6bdcde164d065a80ea5
Certificate serial:       01940721A5AE36B1E7CB66FCC530164C61A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
Manifest number:          0376
Signing time:             Fri 27 Dec 2024 08:00:33 +0000
Manifest this update:     Fri 27 Dec 2024 08:00:33 +0000
Manifest next update:     Sat 28 Dec 2024 08:00:33 +0000
Files and hashes:         1: 7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl (hash: EP1ivejh4qDOK3+x49hnWrZuPCq9PbFpXEy+NspIYmE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:21:a5:ae:36:b1:e7:cb:66:fc:c5:30:16:4c:61:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6f9c7906940e3d4437c6bdcde164d065a80ea5
        Validity
            Not Before: Dec 27 08:00:33 2024 GMT
            Not After : Dec 28 08:00:33 2024 GMT
        Subject: CN=92e6df765dc66390e27b8f5bd16a1c80ad349d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:92:57:7b:c8:f1:b4:c6:5c:cb:7f:7c:f6:ff:
                    18:50:80:0b:95:03:39:77:38:52:c8:2b:4c:0e:94:
                    dd:75:6c:ec:3a:1d:50:4e:ac:71:fc:23:97:13:1a:
                    e7:c2:ea:30:f9:82:6e:9d:7a:70:86:b1:09:44:53:
                    30:74:92:35:7c:52:f8:53:26:d9:fe:30:8e:b5:96:
                    1a:5d:be:1c:70:a4:40:bd:74:0c:8a:b6:00:40:ab:
                    f2:c8:66:79:82:e1:12:83:ea:fe:a4:9a:41:94:09:
                    0b:c9:d3:3f:09:fb:76:2f:eb:dd:9a:c1:f4:1f:d2:
                    49:1a:b7:98:71:b0:04:4a:9e:32:04:ea:b3:d1:b9:
                    fc:a5:08:b5:8f:5e:9f:62:d3:fb:2c:3c:2f:57:78:
                    6f:54:bb:ea:bb:5d:cc:fa:a9:0f:2e:fa:31:06:0e:
                    2c:54:f9:16:d1:de:47:94:a1:e0:fc:eb:f1:08:d6:
                    d8:67:f7:0c:f6:70:e2:77:f2:28:51:eb:52:f2:83:
                    f1:58:74:3e:63:46:96:22:30:e8:e5:6e:37:07:bf:
                    9a:4f:45:04:ca:c6:16:d2:18:48:37:1c:17:fc:d0:
                    18:67:58:d3:4a:cd:b8:9f:a7:45:24:fc:c6:55:fd:
                    e1:77:c5:bf:a8:83:53:c6:ba:45:37:da:e6:ed:92:
                    5a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E6:DF:76:5D:C6:63:90:E2:7B:8F:5B:D1:6A:1C:80:AD:34:9D:08
            X509v3 Authority Key Identifier:
                keyid:ED:6F:9C:79:06:94:0E:3D:44:37:C6:BD:CD:E1:64:D0:65:A8:0E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:d1:a6:3d:34:8f:7b:d6:9e:61:29:d3:f1:74:7d:d3:ea:02:
         13:92:0f:2b:df:8a:ba:a2:ff:2e:f6:38:80:d4:8b:2b:ae:28:
         91:eb:6d:2c:71:51:eb:72:ba:79:7f:c4:00:38:27:1d:df:b5:
         6b:94:6f:48:11:fe:71:04:ce:f3:e2:31:d2:c0:b7:1a:0f:80:
         1d:03:61:34:c5:67:9e:6e:33:98:05:74:27:ed:bc:b0:53:a5:
         19:1d:f4:0f:77:ae:69:1e:89:ce:bb:ea:e3:2c:d1:c7:85:38:
         d7:05:3c:ad:0d:2c:0b:a0:f0:ad:bc:01:6c:5e:b6:58:6e:bf:
         bd:5d:73:e4:ff:4c:4b:93:5d:29:05:b4:6c:54:3c:e1:f7:31:
         c0:5a:fd:b3:a9:e7:f3:5f:4a:74:ac:6c:68:f2:be:e3:f4:90:
         59:6f:37:1e:4e:50:f5:29:47:d4:c1:e6:45:55:b7:f3:91:52:
         27:2d:fb:0f:f8:14:63:7b:57:83:b4:42:6b:b0:e7:65:6b:83:
         3b:8a:66:ad:e0:cc:43:8e:18:76:f9:6e:99:2c:30:48:38:4b:
         0a:20:c6:25:d2:45:c7:fd:e0:df:b9:eb:78:44:41:07:42:62:
         da:77:2c:58:62:84:6e:9d:96:e8:f1:b1:05:4d:8f:1f:0f:4a:
         b6:3b:88:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----