Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
File:                     HCN7aINpeRKVf40zc3AryQbSZEU.mft (raw, json)
Hash identifier:          YQ6aw+JXVOGMsbtfpjW25ErVgzazkC1AgJkvoseNiAg=
Subject key identifier:   36:10:21:B3:21:D3:A1:54:19:6E:A0:43:97:00:C5:64:1B:C1:B7:13
Authority key identifier: 1C:23:7B:68:83:69:79:12:95:7F:8D:33:73:70:2B:C9:06:D2:64:45
Certificate issuer:       /CN=1c237b6883697912957f8d3373702bc906d26445
Certificate serial:       01936A4654CA7158A09C33BD1B77CCBEF57F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
Manifest number:          0F92
Signing time:             Tue 26 Nov 2024 21:00:13 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:13 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:13 +0000
Files and hashes:         1: HCN7aINpeRKVf40zc3AryQbSZEU.crl (hash: DQuX4jGJSBfR6euf8Sh9GschImgIyyzMSfabIPuWIM4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:54:ca:71:58:a0:9c:33:bd:1b:77:cc:be:f5:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c237b6883697912957f8d3373702bc906d26445
        Validity
            Not Before: Nov 26 21:00:13 2024 GMT
            Not After : Nov 27 21:00:13 2024 GMT
        Subject: CN=361021b321d3a154196ea0439700c5641bc1b713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:09:0e:c6:cf:a6:54:3c:46:71:6e:0a:7e:88:
                    d7:e1:7b:ef:2f:0f:59:dd:0a:86:c0:26:aa:5b:e5:
                    72:8d:8e:72:67:a6:4b:67:f1:df:e5:8f:6c:6d:65:
                    35:c1:ad:af:7b:49:e6:e5:76:b6:54:40:ac:85:66:
                    7e:1e:4b:15:96:78:30:4c:79:49:95:3e:bc:d9:40:
                    3c:0b:85:d8:b9:c1:41:f2:70:ba:75:c6:e4:e8:8b:
                    df:ec:f8:5c:75:5a:c8:be:e2:31:fc:87:d3:4f:4a:
                    2a:3f:60:26:f7:6f:87:06:f5:ac:f0:0b:93:c6:a8:
                    5d:8a:34:4e:52:a3:98:62:87:3c:e7:52:98:f1:54:
                    7f:ba:04:7f:81:9f:cb:ef:03:58:8f:1c:5a:f8:6a:
                    33:4c:8f:e6:bb:37:ee:88:fc:f6:1d:2b:69:ea:c3:
                    dc:76:66:8e:0d:91:ce:c7:05:cc:fe:11:bb:b3:d3:
                    c1:02:8b:61:c3:c5:99:44:be:78:4c:a0:65:19:66:
                    82:e5:b4:7a:e3:f3:34:8e:93:1f:19:af:e3:09:a2:
                    24:0e:63:e1:0b:de:b3:36:5e:86:03:94:f4:73:df:
                    be:67:43:bf:a9:cd:37:91:a5:3a:5f:44:1e:59:cb:
                    8d:ff:5b:11:00:20:fc:2a:d3:7a:b0:fc:9c:29:2a:
                    cd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:10:21:B3:21:D3:A1:54:19:6E:A0:43:97:00:C5:64:1B:C1:B7:13
            X509v3 Authority Key Identifier:
                keyid:1C:23:7B:68:83:69:79:12:95:7F:8D:33:73:70:2B:C9:06:D2:64:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:72:aa:96:91:fd:9a:63:fc:ee:d2:90:15:7b:3e:d4:5c:4b:
         16:7d:dc:d5:3b:49:19:5c:c9:86:77:aa:84:e7:37:7b:61:28:
         a8:11:a4:9c:9f:b5:4e:cf:14:fd:e6:b3:cf:95:36:40:53:81:
         13:c8:19:3b:33:2f:e6:2c:69:e7:52:45:63:ae:dc:5e:ef:1f:
         d4:e0:09:c1:01:4a:44:fe:24:85:32:49:1a:21:42:d6:97:0a:
         06:ff:a5:58:35:c3:6c:3e:cb:65:42:2a:9e:aa:e0:3c:e2:e3:
         37:51:ee:24:6e:20:18:91:d5:f9:31:99:e1:2f:d8:fd:3b:64:
         64:5c:a2:43:e7:75:84:35:98:22:4d:ef:a0:75:a3:77:77:bd:
         c7:1d:05:6d:e0:23:24:eb:0c:50:34:16:79:19:8e:40:26:65:
         7f:c1:85:9f:fa:2b:98:4b:89:cc:42:86:b0:61:e7:a4:e5:d0:
         53:2e:8d:b2:04:f7:b7:44:75:a1:7c:29:a8:c1:e3:5a:fc:dd:
         6b:58:c1:04:b0:f8:9c:21:82:76:c4:4f:9a:3c:25:84:24:35:
         93:af:20:0a:e2:35:48:d1:7e:ec:dd:f9:8c:cd:53:d0:86:90:
         f1:0e:28:d8:e3:03:0a:e0:79:68:78:dc:15:ca:b2:31:95:30:
         a8:1c:e3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----