Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
File:                     DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft (raw, json)
Hash identifier:          P4kdV57m+7IZ69/dxt6mOiMIQv21CiTcnTYy20eITPk=
Subject key identifier:   1B:65:26:19:90:15:44:B3:03:A3:FB:75:8D:9F:55:62:3D:75:D0:1A
Authority key identifier: 0E:56:C9:E5:8D:96:AF:1E:41:30:D7:22:42:21:19:2B:2C:13:2A:5C
Certificate issuer:       /CN=0e56c9e58d96af1e4130d7224221192b2c132a5c
Certificate serial:       019369D9E5C609C67827C8B8947C01F19238
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
Manifest number:          130C
Signing time:             Tue 26 Nov 2024 19:01:47 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:47 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:47 +0000
Files and hashes:         1: DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl (hash: ld5YXGgDZaampZy428jN79MBlFPd46Y5aC+r29VAICs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:e5:c6:09:c6:78:27:c8:b8:94:7c:01:f1:92:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e56c9e58d96af1e4130d7224221192b2c132a5c
        Validity
            Not Before: Nov 26 19:01:47 2024 GMT
            Not After : Nov 27 19:01:47 2024 GMT
        Subject: CN=1b652619901544b303a3fb758d9f55623d75d01a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:73:32:97:6c:d0:cf:6c:6d:42:a3:fc:af:a5:
                    85:d9:c3:32:90:cf:07:dc:85:95:0b:29:68:9d:9f:
                    4b:61:ae:e5:c2:6f:57:05:90:f6:93:e1:e8:94:8a:
                    a8:db:0b:ad:b6:82:04:ef:6f:8c:f4:27:88:53:81:
                    f4:a7:a7:02:4f:5c:1a:20:f9:05:27:bd:b1:fc:0c:
                    c5:76:13:db:4a:81:d7:41:2d:c9:06:3f:2b:9c:cb:
                    1f:ff:a1:fd:f5:7e:c0:e9:8a:cd:17:2a:45:5c:33:
                    5e:08:ae:46:57:93:3a:14:7c:26:8d:9c:f2:0e:d1:
                    a8:2b:b7:06:88:0f:a8:57:9b:49:73:00:49:5a:9c:
                    69:51:70:37:80:b4:f1:ee:b5:c6:89:3a:cb:33:c2:
                    a1:41:8c:18:06:8d:f2:8a:b5:c0:e4:38:b6:b5:ce:
                    e2:88:db:ad:6d:a9:7e:97:0c:57:75:54:13:76:1f:
                    5e:a4:79:7e:0f:fc:98:2d:a1:7a:25:88:a5:42:16:
                    f8:82:ec:57:49:ec:9f:ca:f2:b3:cf:01:2c:c3:35:
                    a5:5b:61:4a:c1:a1:06:72:6e:99:27:7b:92:25:81:
                    0f:44:28:61:59:1a:ce:29:0b:c8:db:b2:c9:e2:53:
                    93:45:61:91:df:13:5b:4a:2d:83:91:b4:1a:3e:bf:
                    8d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:65:26:19:90:15:44:B3:03:A3:FB:75:8D:9F:55:62:3D:75:D0:1A
            X509v3 Authority Key Identifier:
                keyid:0E:56:C9:E5:8D:96:AF:1E:41:30:D7:22:42:21:19:2B:2C:13:2A:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:cb:61:b7:97:22:2c:7e:fe:1d:20:dc:ed:d7:2e:c1:58:24:
         cb:cb:91:9d:18:27:f4:af:60:7f:b7:d9:70:eb:3b:1b:0f:95:
         7e:9a:af:13:4c:40:13:bf:11:a0:a5:ed:7f:7d:f9:f4:31:b0:
         fb:7d:09:89:58:41:66:5f:fe:d8:2c:ff:5b:19:12:d8:8d:48:
         6f:7e:ba:39:ea:84:46:74:80:da:84:2f:21:ec:af:fa:f6:5e:
         b8:c7:34:8e:9a:d7:17:97:34:ff:b6:69:d1:03:cf:c0:35:a2:
         1b:63:51:27:bd:ed:ec:c0:c0:9d:04:b6:b6:3a:ef:01:7f:b7:
         1c:10:4d:4f:4e:5e:7c:8b:0a:f8:b9:b9:65:80:e9:31:99:15:
         d2:2d:2f:cf:00:18:00:32:8a:b2:11:1d:7a:54:a9:ba:ab:ea:
         2b:cd:d6:eb:09:18:3e:45:ac:c7:58:39:c7:40:e9:cc:55:bd:
         d1:e1:39:77:3d:6b:fa:bc:53:30:72:de:d2:0a:04:1a:bd:09:
         f8:2b:89:45:23:f8:45:f5:74:b0:57:7f:bb:48:2a:df:d8:b1:
         44:74:48:2e:48:65:4a:1d:f5:96:dd:87:d5:71:3e:3c:e2:4d:
         82:6e:b9:26:51:71:a5:2e:df:95:f1:b0:e4:03:29:ca:91:c2:
         0c:42:d7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----