Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.mft
File:                     sUIEOsH4lSfPigbXJijjaYM8grE.mft (raw, json)
Hash identifier:          WPtWP62WrzM5Kjbsi/1Zg4JBLa1zCPfc6iOak5Yq61A=
Subject key identifier:   14:D8:23:BC:68:21:7A:D6:37:4C:7B:2B:9A:C4:F4:E0:4E:78:82:67
Authority key identifier: B1:42:04:3A:C1:F8:95:27:CF:8A:06:D7:26:28:E3:69:83:3C:82:B1
Certificate issuer:       /CN=b142043ac1f89527cf8a06d72628e369833c82b1
Certificate serial:       01936A469EC5622CC5DA059C9A6AD87E5075
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUIEOsH4lSfPigbXJijjaYM8grE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.mft
Manifest number:          07EE
Signing time:             Tue 26 Nov 2024 21:00:33 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:33 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:33 +0000
Files and hashes:         1: sUIEOsH4lSfPigbXJijjaYM8grE.crl (hash: ht4sPGwGKNgp+Akx+MebU1ULHXD0wdKzOMscpBwAxZg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUIEOsH4lSfPigbXJijjaYM8grE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:9e:c5:62:2c:c5:da:05:9c:9a:6a:d8:7e:50:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b142043ac1f89527cf8a06d72628e369833c82b1
        Validity
            Not Before: Nov 26 21:00:33 2024 GMT
            Not After : Nov 27 21:00:33 2024 GMT
        Subject: CN=14d823bc68217ad6374c7b2b9ac4f4e04e788267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7c:f3:21:5e:5c:8f:1f:27:b5:03:2c:e8:e0:
                    91:1d:56:a2:c9:9c:16:40:2d:54:36:20:49:52:06:
                    a0:f6:69:a0:e7:4e:76:a7:e5:93:89:4e:ca:ec:cd:
                    5e:52:93:04:11:95:33:f7:a3:b5:4d:d5:97:26:00:
                    78:ad:cb:06:70:9a:f3:d0:ea:45:9e:23:6f:f9:b2:
                    a6:7b:12:f2:9f:6c:d4:78:75:10:4a:92:0b:fe:51:
                    35:0c:bb:5e:56:c0:5b:93:03:09:2b:de:d1:a0:65:
                    64:48:37:83:f9:81:9e:8f:4e:a4:d8:0b:22:8c:35:
                    a2:7f:3f:8a:9b:74:c4:f3:5f:93:bc:27:43:1b:fa:
                    7c:e6:c9:a7:fc:03:c3:ef:a7:4c:7c:77:cb:67:d4:
                    be:2e:9c:a1:d3:0b:8a:3d:b8:1e:81:ab:41:35:7f:
                    49:2a:da:9f:a4:d0:d3:5b:e4:c0:be:0d:66:b0:01:
                    82:32:b1:bb:a5:d0:30:ae:df:95:ec:bc:e4:84:0e:
                    6e:c7:9b:9c:9c:0d:1c:5f:74:4f:ed:7b:50:9e:d2:
                    66:d2:a6:ab:0f:c5:3e:8f:04:2a:b0:c4:73:ea:87:
                    14:c4:8d:d0:9c:75:67:60:7c:74:ce:a7:40:1d:c5:
                    9c:ad:a9:16:95:30:ce:87:b5:2b:03:6f:25:a1:6b:
                    2d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D8:23:BC:68:21:7A:D6:37:4C:7B:2B:9A:C4:F4:E0:4E:78:82:67
            X509v3 Authority Key Identifier:
                keyid:B1:42:04:3A:C1:F8:95:27:CF:8A:06:D7:26:28:E3:69:83:3C:82:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUIEOsH4lSfPigbXJijjaYM8grE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:1a:a5:fa:27:11:0b:04:02:ca:b4:dd:23:01:ca:43:c7:f8:
         b6:d7:12:fd:06:26:37:1b:fe:cc:d4:f3:a1:7f:13:38:8b:e0:
         94:c5:05:f6:3b:e1:73:ea:da:ad:34:f8:de:27:6d:66:aa:af:
         ef:49:0d:9e:99:c8:7f:45:97:98:e3:64:6f:30:f0:0e:5c:b5:
         32:e8:9d:36:93:b5:29:49:ff:da:62:2c:f3:d8:da:e5:e8:6c:
         46:ae:66:2e:4c:70:1d:63:73:e0:22:ab:86:89:b1:26:fb:be:
         08:03:e9:36:a9:4f:30:c7:dc:88:56:f4:78:a9:14:23:3a:1c:
         10:7c:b0:99:a0:ef:32:4c:c3:79:8f:49:c3:5a:4b:cb:09:b2:
         1e:da:60:ab:6e:03:9c:e7:45:0e:f0:52:19:47:d8:6d:11:83:
         37:ba:6c:ba:c2:52:5a:60:23:3a:8b:83:74:01:5c:42:02:4d:
         0c:e2:42:65:5c:24:12:c3:99:80:35:d6:3b:bf:36:d6:80:0f:
         ea:49:53:aa:78:b6:24:a9:f2:69:f6:45:c7:c8:2b:f5:d1:3c:
         32:ae:34:7e:8e:48:db:6d:14:47:9f:04:85:f7:f9:64:83:3a:
         98:22:72:2e:f1:2d:d1:fb:b4:ad:94:e7:a6:b9:8b:42:7f:1c:
         11:08:8d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----