Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
File:                     1FbufkhK4u8JINCVvK4mj6_Wlhk.mft (raw, json)
Hash identifier:          nu40HDnQAJxrBZFMtvRkntGzn262gWtwZO5CVY8b1SY=
Subject key identifier:   D1:1C:58:05:6C:6C:69:64:4E:F1:70:86:AD:61:2B:F1:43:A7:D5:4C
Authority key identifier: D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19
Certificate issuer:       /CN=d456ee7e484ae2ef0920d095bcae268fafd69619
Certificate serial:       019357D2ADBFCE06AA076E64EEBA9366DEE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 07:00:45 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:45 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:45 +0000
Files and hashes:         1: 1FbufkhK4u8JINCVvK4mj6_Wlhk.crl (hash: UQPtLopjf/FDrkdDPs8AN2yTTn8aAHX+FMRaR3xQx0Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:ad:bf:ce:06:aa:07:6e:64:ee:ba:93:66:de:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d456ee7e484ae2ef0920d095bcae268fafd69619
        Validity
            Not Before: Nov 23 07:00:45 2024 GMT
            Not After : Nov 24 07:00:45 2024 GMT
        Subject: CN=d11c58056c6c69644ef17086ad612bf143a7d54c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:12:7b:58:fa:64:98:c0:97:ea:bd:ce:d8:
                    da:b5:c0:ac:f4:77:76:a5:0c:b8:81:f0:45:c9:f0:
                    5e:3c:28:c9:44:2a:a6:a2:89:c2:e6:52:7c:4e:da:
                    88:e8:e8:80:24:99:75:b5:e3:fd:da:9e:60:88:81:
                    7d:a7:e7:8f:93:f2:99:6d:e0:d8:c1:81:d1:16:b2:
                    ea:f5:9d:46:9e:a5:81:8e:9a:53:4e:36:63:1e:ec:
                    b0:18:4d:54:b6:92:5e:99:bb:82:a0:17:fa:c6:bb:
                    63:57:25:db:3d:b1:4d:35:74:56:54:79:d0:ca:cc:
                    90:03:c6:67:eb:b8:74:6e:ff:fb:2c:ba:ec:e8:ba:
                    93:92:ca:74:d0:87:e6:36:6c:28:2f:54:15:6c:7d:
                    62:ec:c6:f9:2d:d4:55:85:69:35:06:55:cf:63:d9:
                    27:7b:52:28:16:0d:58:27:6c:54:6f:8f:3b:29:54:
                    38:17:df:a5:70:35:40:c9:9b:62:84:0f:58:d7:24:
                    b8:d8:77:8c:5b:5b:19:55:17:cb:2f:a7:74:8e:64:
                    87:d0:05:d1:78:29:84:a6:b4:e9:f2:e3:75:26:26:
                    80:37:9e:de:1e:c2:95:82:f5:be:4f:e2:45:45:46:
                    72:76:f5:24:35:2d:a4:42:15:2c:58:b3:91:cf:ac:
                    aa:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1C:58:05:6C:6C:69:64:4E:F1:70:86:AD:61:2B:F1:43:A7:D5:4C
            X509v3 Authority Key Identifier:
                keyid:D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:af:f9:9a:ef:22:82:16:2b:15:db:28:55:f7:c2:f6:5a:3d:
         50:63:a3:eb:bf:21:75:76:aa:76:0b:ec:87:99:92:2a:4a:48:
         95:f8:a1:2b:57:64:e1:cb:05:51:af:0d:29:f4:68:17:25:77:
         af:a3:f4:36:be:2b:2a:1a:79:2b:f7:ef:8a:5a:d3:b5:87:5f:
         98:9e:16:e0:02:f1:d6:40:05:d3:18:48:40:18:36:36:af:8d:
         bc:70:97:43:7d:be:db:91:6a:d1:07:01:6f:b2:c9:0a:de:85:
         3e:a5:45:5c:7f:e6:5a:b7:2e:70:20:7a:b1:60:4a:3a:d8:ef:
         44:a5:0a:15:02:22:5b:72:61:36:24:7a:a6:fb:ef:cf:26:d2:
         d1:f5:35:4d:68:aa:7a:17:95:df:dc:80:f5:2a:a8:fa:c2:a9:
         d5:af:a5:9b:31:b6:f3:1a:82:af:c0:b6:0e:6a:00:a7:3a:22:
         7b:6d:69:e9:b9:0a:f6:a1:63:ad:e0:6d:8c:7c:95:6e:65:a4:
         23:b6:4a:e5:a9:71:36:cf:97:07:31:7e:20:57:66:e3:0e:a4:
         9f:82:56:0c:8f:ec:7b:78:04:80:82:4d:83:30:0a:07:50:27:
         15:8b:79:b7:94:61:3b:fb:e1:ba:85:8d:23:9b:6a:c2:75:78:
         6d:0c:82:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----