Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0d1664-bf71-4dbb-83e6-a01f760dd4c9/1/eeOR1_ik51JOBfUxkEKdsk2fs6c.mft
File:                     eeOR1_ik51JOBfUxkEKdsk2fs6c.mft (raw, json)
Hash identifier:          cuEChrw5aYbAX0a2IVZmwTr5B+OjhHxyHvxDATgzpzw=
Subject key identifier:   CB:4B:E8:FA:1E:DA:89:F1:62:5D:2A:05:35:70:26:ED:52:CD:37:0C
Authority key identifier: 79:E3:91:D7:F8:A4:E7:52:4E:05:F5:31:90:42:9D:B2:4D:9F:B3:A7
Certificate issuer:       /CN=79e391d7f8a4e7524e05f53190429db24d9fb3a7
Certificate serial:       0191F9D972D25B0571EEA860D3012CFFF1B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eeOR1_ik51JOBfUxkEKdsk2fs6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/0d1664-bf71-4dbb-83e6-a01f760dd4c9/1/eeOR1_ik51JOBfUxkEKdsk2fs6c.mft
Manifest number:          0128
Signing time:             Mon 16 Sep 2024 08:01:03 +0000
Manifest this update:     Mon 16 Sep 2024 08:01:03 +0000
Manifest next update:     Tue 17 Sep 2024 08:01:03 +0000
Files and hashes:         1: eeOR1_ik51JOBfUxkEKdsk2fs6c.crl (hash: frJZnKC/N4R0iNGsJ+McDInrgPsW3gre4WITfknJlfE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/0d1664-bf71-4dbb-83e6-a01f760dd4c9/1/eeOR1_ik51JOBfUxkEKdsk2fs6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/0d1664-bf71-4dbb-83e6-a01f760dd4c9/1/eeOR1_ik51JOBfUxkEKdsk2fs6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eeOR1_ik51JOBfUxkEKdsk2fs6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:72:d2:5b:05:71:ee:a8:60:d3:01:2c:ff:f1:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79e391d7f8a4e7524e05f53190429db24d9fb3a7
        Validity
            Not Before: Sep 16 08:01:03 2024 GMT
            Not After : Sep 17 08:01:03 2024 GMT
        Subject: CN=cb4be8fa1eda89f1625d2a05357026ed52cd370c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cb:de:02:70:9c:55:3b:36:bf:3a:7d:30:de:
                    9c:b4:a2:cb:9a:69:90:31:59:0a:4f:60:08:e9:4d:
                    b5:4c:42:46:1a:9b:f2:08:61:2e:72:84:49:34:22:
                    a7:2e:b5:6e:2d:a7:af:3b:7e:ad:03:f8:9a:6b:4f:
                    5c:82:90:2b:ed:4b:fa:28:36:f9:ca:f0:59:84:45:
                    f3:dd:6e:e9:fe:4e:37:de:e1:92:b6:6a:7d:d4:22:
                    21:6f:59:24:86:80:44:c9:a3:83:d2:09:b9:c3:a4:
                    a6:30:5c:a0:a0:a5:a2:1f:81:61:2a:4a:9d:1d:64:
                    58:1b:96:52:fb:46:cf:04:55:8f:f5:4d:94:b6:57:
                    e7:55:87:29:4c:fa:0a:33:78:95:8f:fa:b9:91:2d:
                    e4:e1:5f:84:b9:64:34:bb:bf:b3:22:1d:9a:49:92:
                    b6:f4:66:58:8b:94:6f:9e:ee:ce:ba:dc:14:2d:4f:
                    8e:cc:0f:15:ed:e2:a8:ae:5e:c1:0c:71:de:a8:b9:
                    67:e0:27:ae:4c:7c:5f:0d:01:ff:4d:a9:77:9e:23:
                    34:07:49:b9:aa:ee:a3:b2:28:47:c2:d1:15:5c:83:
                    53:60:8e:a4:55:1a:b3:5a:81:1c:6c:7f:f7:b7:36:
                    0d:21:0e:d5:72:65:97:e9:58:50:83:28:6a:9c:7d:
                    c0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4B:E8:FA:1E:DA:89:F1:62:5D:2A:05:35:70:26:ED:52:CD:37:0C
            X509v3 Authority Key Identifier:
                keyid:79:E3:91:D7:F8:A4:E7:52:4E:05:F5:31:90:42:9D:B2:4D:9F:B3:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eeOR1_ik51JOBfUxkEKdsk2fs6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0d1664-bf71-4dbb-83e6-a01f760dd4c9/1/eeOR1_ik51JOBfUxkEKdsk2fs6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0d1664-bf71-4dbb-83e6-a01f760dd4c9/1/eeOR1_ik51JOBfUxkEKdsk2fs6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:99:3c:60:90:b2:b1:a9:30:f2:f3:f1:23:09:ff:e2:af:ba:
         c7:4b:2d:a3:ae:9f:60:62:ab:8c:6c:7c:32:25:ba:03:6c:ea:
         18:c0:3f:ad:35:e0:a8:9d:ad:94:e6:99:11:e7:df:48:aa:b9:
         a0:89:a4:d1:b8:3c:36:41:b3:83:02:bb:fa:37:bd:ef:1a:d6:
         28:b4:97:3c:68:83:1a:48:d2:5f:0c:3a:70:41:3f:2f:b2:e9:
         6a:e8:e5:08:33:9b:e7:c9:95:e5:94:c6:c5:de:fe:70:3b:85:
         15:c1:4c:e1:9f:54:12:26:2e:83:51:09:25:a2:6c:4d:91:59:
         f4:21:95:be:df:90:ea:94:fa:0f:a0:b3:c7:89:f7:d8:ac:fe:
         17:6b:7e:7d:f5:99:66:60:ef:5d:21:77:96:fe:1b:72:8e:56:
         db:dd:2a:01:70:fe:31:17:56:cd:6b:89:a9:b6:19:f2:95:2b:
         4d:9f:3a:b6:85:b5:93:90:46:33:f4:33:58:21:ed:a0:9d:f5:
         6a:c8:bb:86:48:75:fb:18:36:9c:6e:87:8b:7c:f1:99:8b:44:
         d1:cf:75:0c:06:76:1f:76:9c:65:ec:5f:01:3b:fb:52:d6:72:
         f2:4d:86:8d:94:c6:5a:f0:fe:67:9e:54:37:ad:d3:53:ba:4f:
         fa:26:fe:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----