Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
File:                     Eht9Dci8pP9OdTa9OANAJCLo4mw.mft (raw, json)
Hash identifier:          yCMNdPTGUg38mlwOCclkQV5fJbb1A+IXi1Ka/gbfcxw=
Subject key identifier:   48:0D:C2:90:65:E2:F2:D0:E0:33:47:49:FB:A9:E1:2F:FA:28:DB:0A
Authority key identifier: 12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
Certificate issuer:       /CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Certificate serial:       01936AB49993233B9195447C22806EC46F3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
Manifest number:          06FA
Signing time:             Tue 26 Nov 2024 23:00:40 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:40 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:40 +0000
Files and hashes:         1: Eht9Dci8pP9OdTa9OANAJCLo4mw.crl (hash: 32hYtBxe65RHnFtMA9SovB8Yq0z3mhLP8V66rcaHUdg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:99:93:23:3b:91:95:44:7c:22:80:6e:c4:6f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
        Validity
            Not Before: Nov 26 23:00:40 2024 GMT
            Not After : Nov 27 23:00:40 2024 GMT
        Subject: CN=480dc29065e2f2d0e0334749fba9e12ffa28db0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f7:da:dd:34:ef:b5:f4:37:c5:7f:24:36:4e:
                    e7:6b:f7:25:4c:de:5b:19:2b:cd:20:9c:b1:61:00:
                    69:02:a2:0a:4b:38:57:f9:c1:6f:2a:41:04:0a:4e:
                    24:ad:7b:26:c6:86:d0:fc:6d:04:72:a5:6a:bc:80:
                    d2:0e:af:5d:a6:47:fa:b8:5f:c4:bc:48:3c:15:99:
                    29:d0:e4:86:34:95:ba:99:cf:fc:62:cf:3a:d4:0c:
                    94:bb:15:e3:a5:e4:39:46:44:d2:bb:a9:08:d3:5b:
                    aa:22:5b:06:86:68:b8:01:42:58:cf:6c:3d:5a:a5:
                    85:2f:3d:47:a9:44:66:76:d4:d8:71:99:22:95:7e:
                    87:21:78:ce:08:b9:1e:92:cf:5d:59:89:ed:b5:36:
                    50:99:c1:0d:b2:cd:0f:e3:32:e8:66:b2:eb:76:8e:
                    95:10:0d:8e:a6:4b:8f:e2:1b:96:bd:3b:bb:a6:e0:
                    03:b2:a8:54:b3:19:af:4f:c8:5e:63:4c:69:73:60:
                    12:8c:88:94:18:ea:5f:de:fa:fd:e9:93:a3:c4:2b:
                    07:37:08:4f:58:5c:54:99:d8:a6:c1:75:7f:fa:f0:
                    16:86:39:07:fe:4d:a6:b0:6f:6b:db:9a:91:e4:97:
                    19:56:ad:0a:64:cd:95:49:1a:8c:e4:97:25:9b:51:
                    03:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:0D:C2:90:65:E2:F2:D0:E0:33:47:49:FB:A9:E1:2F:FA:28:DB:0A
            X509v3 Authority Key Identifier:
                keyid:12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:0f:80:5b:bc:54:f6:7e:7d:4a:04:c0:a0:4c:ac:54:fe:5d:
         c3:46:fa:01:67:b1:aa:3b:bc:80:3c:0c:ef:f4:18:93:4b:f9:
         c8:96:1e:d4:e1:44:bb:5b:6c:c7:5c:d3:c0:73:de:75:00:3d:
         b3:dc:dc:2c:b0:1b:dd:e4:c3:25:e0:e4:1a:6e:fd:fc:ae:59:
         0f:2b:3d:1c:6d:64:47:ec:a9:55:af:f8:92:63:2d:ba:c5:b2:
         d7:d0:1e:da:5a:c9:79:ad:4d:d7:6e:b6:32:ac:e3:07:05:6c:
         1a:80:ac:3b:b7:d5:ca:03:67:46:c0:f5:5e:5d:fb:8b:ea:91:
         80:2f:57:aa:d3:4c:ff:0e:9e:c2:20:89:47:8a:d4:bb:03:e7:
         78:f0:c8:eb:db:79:32:67:24:bf:d5:bd:b9:f1:3d:f4:be:cb:
         21:4f:68:d9:ae:98:93:71:81:76:56:23:41:88:3e:b4:71:32:
         9b:c6:0d:a4:6c:68:2d:69:c9:3a:47:dd:4a:b7:b8:e7:04:e2:
         4f:2b:b3:a5:e9:a2:84:1c:e9:da:b0:41:b0:24:5f:ac:68:04:
         92:ec:93:1b:3c:c7:07:b5:00:5b:f5:6c:7e:99:3a:35:b3:8b:
         d7:81:f2:90:99:d7:a5:0b:81:fa:7c:cd:8e:2b:1a:87:6b:89:
         c2:33:9f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----