Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
File:                     m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft (raw, json)
Hash identifier:          dVoqStPlY8RGmQ+mLxgHIvuvfy07gruN9pVlcpruNoU=
Subject key identifier:   DA:95:84:32:65:E7:9B:39:01:49:99:91:30:B1:B5:86:CF:21:79:93
Authority key identifier: 9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
Certificate issuer:       /CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
Certificate serial:       01936AB4CCF0DFC30DA62047B84210545376
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
Manifest number:          05E1
Signing time:             Tue 26 Nov 2024 23:00:54 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:54 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:54 +0000
Files and hashes:         1: m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl (hash: 2E7B8IQOddX0GQoqdnvaVIcAOjj19Cc8Bl5Yn1A6FJk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:cc:f0:df:c3:0d:a6:20:47:b8:42:10:54:53:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
        Validity
            Not Before: Nov 26 23:00:54 2024 GMT
            Not After : Nov 27 23:00:54 2024 GMT
        Subject: CN=da95843265e79b390149999130b1b586cf217993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:43:10:58:50:c5:94:3a:2a:51:09:dc:2e:99:
                    f2:a3:91:49:16:7b:31:12:85:06:80:2c:89:71:34:
                    01:3d:cb:b9:5b:6b:45:b1:d4:69:71:5d:7d:19:7e:
                    91:49:aa:ad:44:63:fe:8e:ac:5c:14:f5:ed:d4:fe:
                    fe:21:61:0c:93:d7:5a:13:00:19:97:d1:c9:e8:5f:
                    b2:73:f5:11:a6:47:81:2d:04:b6:0a:56:37:93:e3:
                    80:46:e0:57:d7:90:db:2f:ee:e4:82:bb:45:06:21:
                    8c:b8:bf:35:3b:9c:84:9b:5e:95:56:19:36:c0:9a:
                    4d:64:d8:07:0c:94:81:fd:3e:5c:d9:58:0e:f9:fd:
                    18:09:30:d3:6e:e0:e3:ee:c1:f4:4f:b1:2d:97:73:
                    c5:8c:1d:27:44:89:92:79:5f:4f:91:33:dd:67:d6:
                    1f:2c:19:6f:9f:33:56:2a:fc:01:a5:f7:77:10:e7:
                    fe:c0:14:6e:9e:71:af:a6:2e:9c:65:6a:19:bb:cb:
                    28:0c:4f:c3:fa:08:c9:26:84:0b:a5:df:fc:19:4c:
                    e0:bd:22:4e:3b:78:90:ff:d9:f4:29:37:87:c0:cb:
                    98:9c:0e:71:71:da:40:a7:47:ef:c8:14:05:52:c1:
                    7b:41:b7:22:89:b1:83:91:c1:ad:46:8e:75:47:9c:
                    97:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:95:84:32:65:E7:9B:39:01:49:99:91:30:B1:B5:86:CF:21:79:93
            X509v3 Authority Key Identifier:
                keyid:9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:83:31:c7:4f:7f:9d:68:19:dd:fa:39:9c:d4:33:cb:e6:0f:
         e1:26:40:c3:d1:02:e6:58:b8:7e:ac:8a:2d:2c:c7:3a:3a:f4:
         40:cb:bf:37:3a:ed:47:09:ef:5c:a4:b1:4e:7d:c6:6b:ba:61:
         94:34:b2:ff:7e:b0:89:65:5e:39:ef:81:91:c8:3f:d6:ee:9f:
         18:47:29:0c:b7:c1:d5:7b:bb:d1:07:a0:eb:11:21:c6:6e:93:
         cc:b2:0d:e2:91:27:16:0e:1e:c2:eb:e2:d5:28:e5:4e:be:8e:
         f8:3c:5c:f9:ec:f0:99:70:4c:54:e9:ca:37:59:1a:1e:97:8e:
         7b:0c:2c:15:2a:9e:c0:51:01:90:88:e7:a0:47:85:66:2e:57:
         3a:95:6f:1f:83:5b:2e:02:61:e5:24:57:cb:a1:ac:88:45:68:
         34:92:ce:eb:71:a3:ce:a8:67:d6:24:37:d2:af:99:09:1e:79:
         10:ae:86:49:3b:8a:ef:97:c4:63:02:3a:e5:d7:81:ca:69:3a:
         e3:cd:c6:2f:ff:a9:12:ea:3c:8f:b8:76:bd:1f:e1:8e:c6:b8:
         28:f8:86:07:c5:83:ca:7b:ad:18:10:bf:74:c2:5a:39:cf:6a:
         b4:0e:e5:9b:13:fd:87:10:c1:7f:41:7e:ac:ac:c3:a8:a8:59:
         dc:c5:eb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----