Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
File:                     uo1nmL3QsriAXUOzRV92c5uUbx0.mft (raw, json)
Hash identifier:          DKutS2tLPwonhGEmuenditYoyGaUIYPgYjxxfpYDTCo=
Subject key identifier:   A8:47:F7:8F:E7:AF:2D:44:57:44:8B:F0:E4:A7:45:82:56:55:D3:43
Authority key identifier: BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D
Certificate issuer:       /CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d
Certificate serial:       019369D9B61C3D9C0F2A1AB2BD0AC9F6016C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
Manifest number:          130A
Signing time:             Tue 26 Nov 2024 19:01:35 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:35 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:35 +0000
Files and hashes:         1: uo1nmL3QsriAXUOzRV92c5uUbx0.crl (hash: cBxb+M+0h/leakRdDKkGBQCr1BJ7T+ym3N5Tbv1jEvQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:b6:1c:3d:9c:0f:2a:1a:b2:bd:0a:c9:f6:01:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d
        Validity
            Not Before: Nov 26 19:01:35 2024 GMT
            Not After : Nov 27 19:01:35 2024 GMT
        Subject: CN=a847f78fe7af2d4457448bf0e4a745825655d343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:20:d1:9b:e9:54:1f:b9:05:de:a0:87:e6:61:
                    1d:11:d6:4c:2a:9d:c7:b3:e3:5b:c4:14:4d:52:28:
                    86:75:a4:7a:35:df:3f:e0:0d:75:cb:63:bb:ad:7e:
                    3a:39:a0:cf:12:f2:0d:98:8b:68:ed:1b:1e:15:f5:
                    1a:0c:7e:7c:6e:dd:8d:9e:67:64:fb:42:e4:cb:93:
                    6b:b0:62:8a:23:2e:83:59:78:45:42:85:3c:4d:44:
                    93:35:7c:65:14:06:da:ad:ec:c8:45:f5:bc:65:33:
                    8d:b2:44:33:41:a1:1e:64:9b:b1:f0:db:0f:33:6d:
                    9d:03:41:a9:83:84:db:62:2a:f9:18:34:69:b1:30:
                    c0:be:6f:64:ba:30:21:e9:a4:c4:cd:70:d9:f4:d8:
                    f6:60:f9:13:9b:0f:d4:c0:12:66:65:c6:b5:ee:7a:
                    a5:6f:fd:b1:5e:37:32:ee:11:55:8c:5c:8d:17:4f:
                    d2:b8:db:06:bd:66:84:c9:fa:e4:61:93:c2:38:f7:
                    14:0b:27:25:59:9f:aa:8c:e6:df:36:b2:de:19:40:
                    5f:b1:85:a5:cc:ae:f3:63:73:15:0b:9e:24:76:8b:
                    c3:10:01:dd:d8:51:31:15:1b:7d:95:47:aa:e2:fa:
                    b2:69:fc:e4:5b:77:6f:df:09:e0:d5:d0:fe:c6:c9:
                    73:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:47:F7:8F:E7:AF:2D:44:57:44:8B:F0:E4:A7:45:82:56:55:D3:43
            X509v3 Authority Key Identifier:
                keyid:BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:43:b1:eb:3f:cf:70:3e:1d:fd:73:07:e2:6a:bf:52:b9:d7:
         9a:63:ea:ef:72:bf:87:c7:f1:13:f6:1d:f4:20:c9:5e:fd:6b:
         20:04:e1:df:15:c9:00:57:47:92:c1:da:69:94:44:df:04:7c:
         40:78:02:d1:5b:88:2d:7b:ae:b9:e5:74:e8:dc:af:01:dd:b7:
         a0:6c:a9:42:17:39:b0:10:8f:49:9d:69:59:7c:0d:74:e8:f5:
         fb:f1:97:69:d0:2c:3b:1c:5d:32:62:ed:b6:32:f3:98:4b:ae:
         1d:2f:7d:87:fb:b4:b5:07:3b:d9:8e:00:4f:0c:ea:9b:bd:38:
         8a:65:22:b8:26:5e:94:b6:11:8e:33:e3:22:a8:e5:e1:31:24:
         99:9c:83:7c:dd:5b:30:5e:61:fb:34:7b:3e:43:0f:0a:f1:ed:
         1c:b2:9d:f9:ad:55:20:2b:62:d3:06:35:03:1c:dc:91:02:84:
         d0:2b:98:a5:0a:58:1e:ca:6f:19:5b:af:4b:1f:61:a9:eb:e7:
         e6:dc:d5:b7:ba:9c:2b:cd:48:0c:ef:74:29:f1:3e:bc:b7:c1:
         18:c2:53:ed:e1:c4:b5:e8:aa:aa:87:27:37:dc:3e:64:81:b0:
         ed:a3:0e:8b:1d:10:ca:b9:33:13:53:8c:b9:1a:fd:a8:5e:96:
         a3:b3:94:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----