Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
File:                     7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft (raw, json)
Hash identifier:          IZSMg2fdmuECOKUwyzO6JJ5Wsda25eSeiUl8wSB89YQ=
Subject key identifier:   F9:63:B9:49:32:61:10:7C:E5:69:4B:8E:94:54:19:A7:92:C4:96:45
Authority key identifier: EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96
Certificate issuer:       /CN=eff987189da4e38385b0721854feccc3ef466a96
Certificate serial:       019405A13E30F17166E77304DE5A63804CF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
Manifest number:          0A64
Signing time:             Fri 27 Dec 2024 01:00:40 +0000
Manifest this update:     Fri 27 Dec 2024 01:00:40 +0000
Manifest next update:     Sat 28 Dec 2024 01:00:40 +0000
Files and hashes:         1: 7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl (hash: ZCYOv6il1Eksnisx7o8jc21/sx29QeZnvor/VvmHmuw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:05:a1:3e:30:f1:71:66:e7:73:04:de:5a:63:80:4c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff987189da4e38385b0721854feccc3ef466a96
        Validity
            Not Before: Dec 27 01:00:40 2024 GMT
            Not After : Dec 28 01:00:40 2024 GMT
        Subject: CN=f963b9493261107ce5694b8e945419a792c49645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c5:ce:58:84:d6:1e:0e:bb:a4:36:c8:0d:99:
                    a9:a4:24:91:e0:dd:ef:c2:e3:89:8f:b3:ad:65:cc:
                    0d:14:3c:c4:2c:58:95:b8:15:dc:33:5f:b0:18:64:
                    af:dc:3f:46:bb:73:1f:b1:73:9d:62:a9:1d:ff:73:
                    14:94:cf:c0:27:63:6e:96:2e:b0:8c:70:6b:5b:dd:
                    db:e3:0d:d6:6b:32:3a:97:a3:6a:19:78:0d:c1:b0:
                    41:3b:4b:b6:52:05:11:5d:a3:2a:07:a9:d1:ce:af:
                    ba:d0:2f:4e:d1:ae:d7:6f:75:f7:b0:0a:76:ca:6f:
                    e9:60:f0:7c:e3:9d:7c:51:f8:79:8d:06:c0:ee:4a:
                    01:00:70:03:bc:4c:0c:16:4d:91:e9:f1:75:bd:e5:
                    ce:1f:15:70:92:64:67:51:f8:5d:10:37:05:8c:4b:
                    b0:05:31:38:ff:b9:f7:ff:e9:7e:22:01:39:65:ad:
                    fb:94:14:70:10:27:6b:01:7f:73:e1:41:d7:4c:13:
                    f3:23:a6:53:7b:f7:47:41:ad:75:c8:8f:58:7c:2b:
                    a1:ed:06:86:12:04:a0:b7:ff:2b:18:5f:73:01:94:
                    9b:91:98:a8:b4:b8:5d:e7:89:31:dd:4a:5c:88:84:
                    ff:68:71:4b:dd:59:4e:82:82:de:77:2a:11:76:8b:
                    34:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:63:B9:49:32:61:10:7C:E5:69:4B:8E:94:54:19:A7:92:C4:96:45
            X509v3 Authority Key Identifier:
                keyid:EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:84:d7:b5:c9:c6:2f:fb:40:48:fd:cb:71:2d:98:d3:ed:df:
         74:32:46:14:53:77:fa:48:75:85:40:56:13:1a:d2:85:ee:e7:
         3e:4a:5a:14:e6:33:8f:46:24:22:ce:25:bc:f7:b5:d4:47:f3:
         c2:c6:0a:76:fc:a9:1a:9e:94:40:d2:e4:85:b2:73:2c:4e:23:
         3b:e0:49:3a:96:dd:3b:df:e7:d9:8e:24:d2:30:7d:33:5d:c7:
         99:01:49:b7:4e:ca:48:ba:76:af:0f:c5:ca:ee:30:86:3e:81:
         0b:3b:82:54:7d:b9:02:64:2d:49:be:d5:03:25:52:cc:ca:ff:
         66:13:c2:af:63:2b:27:7e:1c:94:f4:6f:96:ae:3b:2a:8a:6b:
         2e:f3:47:44:51:94:1c:c4:63:42:19:6b:56:73:e9:c2:f5:bf:
         ec:31:c2:81:28:9a:57:85:de:3c:2a:a3:d4:62:fb:33:de:26:
         be:8f:de:ae:5b:2b:3e:d4:5c:f4:6b:f0:63:b8:ae:a2:53:03:
         e8:ac:98:d9:68:a4:2c:25:f6:a5:af:19:b8:35:1b:5f:9d:7e:
         da:c3:d6:c3:73:32:c6:92:3b:84:7b:9c:c0:25:bd:57:f4:28:
         b0:ed:ea:e3:53:0c:df:50:ae:5e:ed:ea:7e:f3:73:17:8e:66:
         1a:a8:0d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----