Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
File:                     XjQjtgOmIDy5KMje8-WM2Nqv1og.mft (raw, json)
Hash identifier:          fdJWibmkUGQBXW0yBIsMwo0lTmxyYQpvP2S2AwVApgs=
Subject key identifier:   B8:14:D7:19:EA:91:51:59:E6:E2:2F:60:E4:E1:29:5D:2B:ED:DA:A7
Authority key identifier: 5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
Certificate issuer:       /CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Certificate serial:       019510C7BC2C80600DDA5C02E06ECAEB856D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
Manifest number:          0812
Signing time:             Sun 16 Feb 2025 22:01:20 +0000
Manifest this update:     Sun 16 Feb 2025 22:01:20 +0000
Manifest next update:     Mon 17 Feb 2025 22:01:20 +0000
Files and hashes:         1: XjQjtgOmIDy5KMje8-WM2Nqv1og.crl (hash: c/qCHb1kXSctHvpXHQnFXtOXGoAzdsfy+4uzrMzb3VI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:bc:2c:80:60:0d:da:5c:02:e0:6e:ca:eb:85:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3423b603a6203cb928c8def3e58cd8daafd688
        Validity
            Not Before: Feb 16 22:01:20 2025 GMT
            Not After : Feb 17 22:01:20 2025 GMT
        Subject: CN=b814d719ea915159e6e22f60e4e1295d2beddaa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b2:7d:20:23:5d:41:90:ae:04:1c:a6:54:5e:
                    78:fe:7c:b8:0e:e8:ae:e4:54:49:9b:86:e9:29:f9:
                    54:5a:6a:6e:d7:9f:95:24:c5:e5:64:d9:47:fa:0c:
                    22:e6:a4:5e:f4:6a:b9:5f:64:52:1e:88:c0:78:4d:
                    34:83:0f:56:1d:6b:22:a3:62:e1:1f:60:35:bf:a0:
                    fa:26:c6:b5:91:6c:e5:1a:31:8b:0a:90:5c:35:27:
                    3e:c9:82:37:45:16:9d:3e:1c:3f:ff:e8:14:3c:24:
                    6a:3e:2d:19:93:90:9f:8f:3a:73:45:7e:2a:4c:cf:
                    ea:80:ec:76:38:3f:31:ef:60:25:94:3b:76:f6:68:
                    2d:18:90:eb:40:9d:47:f7:53:b1:45:72:fc:8d:f2:
                    da:79:9b:e9:c3:47:74:3c:2a:f7:1c:cf:04:fa:9e:
                    46:b1:42:d3:36:a3:98:59:34:a2:54:41:eb:1d:73:
                    c7:3c:64:3e:f2:3d:77:f6:b0:3c:d9:7f:5b:44:2c:
                    b6:2e:37:9f:aa:cc:7b:b5:65:69:a2:8c:4e:94:06:
                    88:7e:36:37:ce:dc:2a:d0:34:3c:3c:17:e8:8a:4b:
                    df:12:a0:c2:a5:ed:06:61:4b:e6:c8:ba:ab:f2:2f:
                    88:2f:33:e8:1b:cf:3e:e6:a5:72:ad:9c:5d:86:52:
                    be:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:14:D7:19:EA:91:51:59:E6:E2:2F:60:E4:E1:29:5D:2B:ED:DA:A7
            X509v3 Authority Key Identifier:
                keyid:5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:24:ae:b5:25:f1:4c:e9:76:38:5c:8b:d3:b4:0f:cc:e4:15:
         c2:3a:36:17:9b:57:e0:03:39:a8:f4:0f:0f:6d:51:86:d0:64:
         a1:6a:69:d4:f2:77:ec:95:14:21:5f:29:75:4f:f3:b9:dd:dd:
         f6:ea:a5:6b:72:85:14:79:60:4c:b5:61:5f:97:e8:95:4e:61:
         41:49:8c:69:e4:79:cf:61:fe:e0:7f:48:9e:03:38:3e:9e:44:
         04:3c:3e:68:b2:18:53:32:fb:57:3c:61:83:33:29:8f:bc:d1:
         0f:f2:5b:f5:00:07:72:45:68:28:b7:e4:56:61:f2:40:77:37:
         4e:7c:68:11:11:03:b1:d6:22:98:f5:d0:55:59:26:0a:7b:6a:
         f1:2b:eb:81:59:a1:3b:17:4b:83:fe:d6:ca:fc:9e:d2:2d:72:
         fd:26:16:17:9e:b4:48:11:9c:50:2b:bf:a3:4f:ff:ff:ef:d9:
         74:39:d7:2c:93:da:2a:17:6c:a5:ed:64:08:ef:c5:77:fc:bf:
         4d:c6:7e:bc:f7:37:bd:42:42:a2:61:d5:30:7b:51:be:72:c2:
         fc:7e:8d:e0:b1:9f:b1:23:56:36:c2:72:fb:b4:43:70:f2:c2:
         50:1a:f6:cd:3a:02:35:b9:b8:8d:26:8c:c9:28:59:be:7c:57:
         26:26:bd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----