Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
File:                     uXhT3Vdz8qawcYefW567Dm9Ofao.mft (raw, json)
Hash identifier:          GBTorErdurST4tDR/Q5S8ct5NKYBOMQTzLYMnfHfdX0=
Subject key identifier:   ED:34:3B:7E:E7:B8:55:C1:D9:AF:C8:8E:E2:0D:A4:97:43:30:13:AC
Authority key identifier: B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
Certificate issuer:       /CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Certificate serial:       01936A46A45EFF6642ABEA15DDED1451B319
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
Manifest number:          130D
Signing time:             Tue 26 Nov 2024 21:00:34 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:34 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:34 +0000
Files and hashes:         1: uXhT3Vdz8qawcYefW567Dm9Ofao.crl (hash: G3lT+9pzToTMg6hg5xnECVDpPWhEgaDfSZCo6W3n0UU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:a4:5e:ff:66:42:ab:ea:15:dd:ed:14:51:b3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
        Validity
            Not Before: Nov 26 21:00:34 2024 GMT
            Not After : Nov 27 21:00:34 2024 GMT
        Subject: CN=ed343b7ee7b855c1d9afc88ee20da497433013ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:72:60:6f:ef:0c:c6:3c:16:6d:88:b6:3a:c9:
                    22:40:f9:80:9e:e7:39:ba:79:5d:a6:40:07:cd:95:
                    30:37:2d:9e:01:4c:33:61:97:95:92:f2:36:0a:74:
                    de:f7:92:c3:ea:31:70:ef:fd:c4:44:b1:3b:a3:9a:
                    2c:17:62:3e:fc:18:c4:66:ae:ed:c5:11:76:02:97:
                    69:00:74:4a:4f:11:c5:9a:3d:cf:0a:e5:6b:ac:83:
                    bf:28:6c:96:ad:9d:a0:6f:7a:1e:6a:98:b3:8d:98:
                    7d:24:a1:84:02:7c:6b:27:13:34:5b:c1:42:17:7e:
                    fc:28:fb:91:de:68:55:fd:db:3e:c0:f7:ee:79:55:
                    4a:a6:32:25:21:31:93:64:a1:ae:97:ce:d9:16:e1:
                    bb:13:dc:a0:59:6e:46:e1:79:5b:23:3c:16:e3:bc:
                    8c:c8:70:6d:6a:ff:4a:fa:d3:b1:72:c0:a9:9b:c5:
                    91:9f:c3:f5:35:d7:6e:30:0f:d1:86:c4:75:cd:07:
                    e5:cd:4a:53:14:a1:a3:a4:0f:56:11:e5:04:12:c9:
                    8e:d9:04:8d:5e:7f:50:f3:99:21:df:3c:5c:ea:8b:
                    b1:fa:63:dc:37:06:6d:73:6b:ec:2a:64:0c:9c:7b:
                    70:58:36:83:2f:bf:55:5d:af:2c:d2:da:1e:f2:e3:
                    09:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:34:3B:7E:E7:B8:55:C1:D9:AF:C8:8E:E2:0D:A4:97:43:30:13:AC
            X509v3 Authority Key Identifier:
                keyid:B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ee:65:e8:d2:ed:44:7c:47:22:7f:2e:72:3c:22:c6:47:64:
         18:9a:6b:a0:c1:0a:0d:f2:07:1e:fa:96:6e:35:0f:50:94:93:
         d0:96:1d:fa:80:21:77:bb:94:8c:25:6a:dd:57:da:6d:ea:f1:
         4c:47:e1:86:0c:9b:08:b4:5e:8e:1d:15:f9:7c:8c:22:97:e7:
         8b:1f:62:32:b1:63:b6:04:d9:76:e3:4d:e4:bd:70:3c:13:ec:
         05:4c:1a:3e:b4:fa:72:b0:f1:09:f0:d1:f9:14:d8:13:eb:fe:
         ee:d3:91:ce:4f:29:50:01:3e:71:07:06:69:0b:f9:4a:fc:a7:
         8d:10:c2:d7:a2:9d:f9:ae:26:4d:40:ce:e4:3f:25:da:9d:ec:
         f6:32:72:10:7b:55:45:e9:82:05:2c:6d:f3:9b:03:b5:ad:09:
         01:f4:1e:85:c6:63:a0:00:a1:51:c0:24:dd:fb:38:c8:65:42:
         f6:05:42:0c:5d:e5:33:74:a8:5b:b3:fb:b6:9f:82:cb:a4:84:
         4f:6f:6c:20:f5:0b:9d:b8:c2:72:4d:28:ff:1e:a5:39:96:d9:
         93:6d:4e:3d:f2:c5:f3:a9:6a:ea:26:86:9f:50:3e:81:fd:03:
         57:5a:53:49:91:ee:1d:d4:4e:5c:d5:fd:02:af:66:6d:90:0f:
         62:86:b9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----