Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft
File:                     EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft (raw, json)
Hash identifier:          vyUQgylunJEVzoA4HHr0kXFDXTjZeQLuCqrz2R/D7g4=
Subject key identifier:   D5:B5:EA:DA:ED:4F:5A:DB:3F:04:CB:5B:70:00:A1:2F:3E:10:CB:BF
Authority key identifier: 12:A6:28:50:1A:F6:5C:F5:FF:39:70:F3:12:34:14:C6:B8:0C:C0:A9
Certificate issuer:       /CN=12a628501af65cf5ff3970f3123414c6b80cc0a9
Certificate serial:       0194064704AEC14C10D235C3C206DC27AA62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EqYoUBr2XPX_OXDzEjQUxrgMwKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft
Manifest number:          13C8
Signing time:             Fri 27 Dec 2024 04:01:45 +0000
Manifest this update:     Fri 27 Dec 2024 04:01:45 +0000
Manifest next update:     Sat 28 Dec 2024 04:01:45 +0000
Files and hashes:         1: EqYoUBr2XPX_OXDzEjQUxrgMwKk.crl (hash: uEfH7xu8ErXSx5WoRkJPdDLyxHLK2PnZ8f6lN1KZM0U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EqYoUBr2XPX_OXDzEjQUxrgMwKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:04:ae:c1:4c:10:d2:35:c3:c2:06:dc:27:aa:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12a628501af65cf5ff3970f3123414c6b80cc0a9
        Validity
            Not Before: Dec 27 04:01:45 2024 GMT
            Not After : Dec 28 04:01:45 2024 GMT
        Subject: CN=d5b5eadaed4f5adb3f04cb5b7000a12f3e10cbbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:de:3f:d5:06:aa:2c:79:2c:8f:e2:22:ae:09:
                    c1:51:08:21:30:e9:15:46:92:43:51:07:8c:de:fd:
                    21:c3:84:58:2f:32:63:a1:80:c1:88:20:d5:f0:aa:
                    dc:67:c8:2d:01:41:73:7b:dc:d2:b4:1f:2b:5a:c2:
                    b2:41:da:ed:85:1c:fb:b1:69:ec:a0:c9:6f:c4:e4:
                    cb:cd:b9:56:b7:70:32:89:df:e3:e4:a8:67:e5:02:
                    14:d5:af:fa:a9:8a:00:7f:7d:6e:dc:07:0a:f0:30:
                    e2:c3:10:93:2c:02:09:55:70:1f:0f:00:f3:9d:66:
                    74:27:bf:29:35:82:a0:c0:d5:34:d1:fd:28:f6:05:
                    49:3a:0a:b9:f0:71:37:69:6e:e0:93:08:18:e9:7f:
                    4e:c9:6e:a1:4a:50:c0:e0:e4:e1:84:97:45:f5:04:
                    09:35:f8:0f:2b:d4:c9:3f:e6:25:6e:ac:71:de:f7:
                    9a:aa:fc:5c:c0:d8:00:28:12:72:17:f0:24:6d:fb:
                    d2:ec:b2:55:77:72:86:49:98:96:ff:ff:b4:87:e0:
                    c3:75:ad:7f:30:01:b2:b8:d3:87:a8:f5:2e:11:63:
                    01:7d:f1:80:ad:41:62:71:8e:86:e6:05:dc:32:2f:
                    ec:6f:b6:00:43:34:8d:b1:18:98:86:88:16:4c:6c:
                    ff:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B5:EA:DA:ED:4F:5A:DB:3F:04:CB:5B:70:00:A1:2F:3E:10:CB:BF
            X509v3 Authority Key Identifier:
                keyid:12:A6:28:50:1A:F6:5C:F5:FF:39:70:F3:12:34:14:C6:B8:0C:C0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqYoUBr2XPX_OXDzEjQUxrgMwKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:8e:41:fc:55:ed:cc:7c:9f:85:13:2e:2c:a0:91:e6:7a:2b:
         30:a7:e0:94:59:ae:2b:a3:f7:5f:c2:fe:7e:de:36:ea:f0:df:
         e4:e4:2d:a6:be:b0:cf:47:01:cb:6b:72:8d:dd:ef:3d:f7:c4:
         95:26:1f:ff:fb:40:dd:b2:61:9b:bb:93:b8:40:ee:ed:0f:44:
         30:84:10:ae:d1:9e:7f:8e:54:52:a8:c2:75:5e:b4:e0:f4:c7:
         f0:df:4c:df:dc:07:58:82:dd:62:e7:d0:d3:55:3d:dc:57:ee:
         75:b8:6d:78:93:b3:27:a3:45:f3:83:03:b7:b8:93:bc:11:b7:
         fd:6a:51:86:c8:88:d7:23:1f:66:6f:a6:f1:21:97:f9:0f:f2:
         0e:e7:82:f3:bf:1a:57:43:75:b1:82:88:5e:58:81:d1:10:c2:
         26:58:df:5e:8b:38:d1:af:9d:79:5c:56:02:62:41:a4:e0:8c:
         1f:72:62:6d:fd:5c:b8:22:68:1c:cb:4f:fb:68:bf:9a:6b:8e:
         89:73:2e:e5:b2:35:46:0e:41:e7:1c:3b:0d:05:c5:70:0f:f4:
         a7:4b:a0:b2:3e:46:48:4b:e7:65:23:99:69:f0:07:a4:4b:81:
         28:b2:82:6b:94:07:72:21:ab:9a:1e:50:90:18:f3:f2:20:ce:
         35:9a:bb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----