Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
File:                     x87XolsQkPDT8-uXyBSrL_fb_DY.mft (raw, json)
Hash identifier:          JjKTuP4g3gNBnoVmbX9wz0JaopVuwGHrGEXUKMn1C9E=
Subject key identifier:   51:91:9C:52:BE:13:FC:AD:DA:75:1C:52:86:29:FC:19:25:37:D6:BB
Authority key identifier: C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
Certificate issuer:       /CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Certificate serial:       01936A7D75EDC18ED67C5BC3AF1A79078D93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
Manifest number:          06EC
Signing time:             Tue 26 Nov 2024 22:00:27 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:27 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:27 +0000
Files and hashes:         1: x87XolsQkPDT8-uXyBSrL_fb_DY.crl (hash: 3UhGydBsyU0VZT1gFVN3IKjL3gMRn38VUtIOL+Gk7vI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:75:ed:c1:8e:d6:7c:5b:c3:af:1a:79:07:8d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
        Validity
            Not Before: Nov 26 22:00:27 2024 GMT
            Not After : Nov 27 22:00:27 2024 GMT
        Subject: CN=51919c52be13fcadda751c528629fc192537d6bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:db:68:f7:06:ff:32:6f:0a:bb:20:0e:00:b5:
                    93:01:05:29:63:98:3f:be:db:05:12:ba:4c:cb:7e:
                    66:da:47:ca:df:a3:e8:de:a9:a3:35:96:67:b6:8f:
                    0b:79:ac:5f:2e:8a:91:c3:f1:54:f9:c9:39:49:2a:
                    dd:a3:9f:7f:c8:67:1d:f6:f8:19:ac:a5:0e:30:79:
                    de:84:ee:a4:20:68:53:2a:37:00:1e:ac:c9:9d:8c:
                    96:06:b6:a4:c1:0f:0a:02:89:d3:2f:51:34:0e:b9:
                    12:82:37:70:be:f6:26:8f:61:79:a5:74:fe:b2:28:
                    73:50:96:58:ec:a6:40:ac:82:44:23:0d:02:4f:14:
                    53:f2:96:9d:3c:89:9d:1d:b0:fd:8d:21:c9:40:a2:
                    e6:03:24:e9:98:05:e7:75:5c:44:28:5a:86:1b:e2:
                    f6:32:4e:a8:31:28:ea:cf:de:b4:44:5b:4e:ba:42:
                    0d:d5:6c:18:34:b4:97:29:d6:fb:14:b8:d8:3b:1f:
                    bb:0e:01:03:39:83:15:2a:21:47:3e:9c:bc:76:18:
                    05:40:a3:21:89:33:6f:6b:de:7b:e2:c5:ba:e6:a7:
                    85:cf:2a:ba:86:46:2c:4e:0b:84:b9:e9:c7:ad:fd:
                    e0:38:b1:cc:9a:88:f6:48:a3:61:73:86:c0:96:49:
                    eb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:91:9C:52:BE:13:FC:AD:DA:75:1C:52:86:29:FC:19:25:37:D6:BB
            X509v3 Authority Key Identifier:
                keyid:C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:92:7a:6d:c1:2c:d5:e4:ca:1e:88:a6:07:8b:7c:7e:51:17:
         e4:73:ff:c8:31:46:f5:d5:52:c2:5e:85:c0:40:f7:30:2a:03:
         84:e7:56:2a:26:d1:fe:6a:b0:35:e6:d7:ea:38:2d:f1:b1:b1:
         5d:03:6e:40:51:b8:81:16:31:6d:70:bc:91:18:c2:f6:5e:9b:
         a1:ab:db:04:0d:14:f3:ba:ef:4a:3b:a3:76:26:a1:81:82:3c:
         01:83:1c:81:9d:cc:79:d0:bc:61:36:4f:d4:af:06:eb:6d:4f:
         f3:7a:f6:4f:90:79:7a:33:6b:6b:f4:84:c7:e8:11:24:50:f6:
         69:a2:e1:dd:b5:8b:ba:18:11:16:bb:82:f6:ca:d3:22:29:53:
         66:b7:51:11:51:7c:ea:35:13:d3:fe:39:b6:1f:07:1f:03:b2:
         1a:d0:a7:f7:f0:77:34:15:b1:d5:2a:68:0a:42:e9:36:ae:38:
         a8:02:1a:9d:4d:b2:4f:73:be:17:c3:c1:3d:6f:d6:ed:b7:b5:
         92:75:b9:21:a9:28:45:85:c4:f9:d6:8c:29:5d:2c:25:2c:b1:
         a5:97:f4:94:cb:8e:2c:fe:7c:d1:e7:26:39:03:a7:b8:08:c9:
         81:ed:a0:67:43:cb:52:63:0b:ab:fc:0e:7b:f0:85:42:46:bb:
         ce:22:90:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----