Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
File:                     6Is19ZnvHCbySYP5Fafq7GeXx_o.mft (raw, json)
Hash identifier:          IRVtcxRZGUgy3TNle0zder2coIXV492JWnVjIu2gF+k=
Subject key identifier:   80:11:FC:37:1D:5A:5D:12:E1:8C:D9:B5:F5:5F:03:43:E7:13:81:44
Authority key identifier: E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA
Certificate issuer:       /CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
Certificate serial:       01935A661CEE7D9D48442580C9672B0EA0E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
Manifest number:          0F88
Signing time:             Sat 23 Nov 2024 19:01:01 +0000
Manifest this update:     Sat 23 Nov 2024 19:01:01 +0000
Manifest next update:     Sun 24 Nov 2024 19:01:01 +0000
Files and hashes:         1: 6Is19ZnvHCbySYP5Fafq7GeXx_o.crl (hash: CkuAPwXplgvhUCjeQQnMl6m+YGfyhc7ZeSo/DAszqmQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:66:1c:ee:7d:9d:48:44:25:80:c9:67:2b:0e:a0:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
        Validity
            Not Before: Nov 23 19:01:01 2024 GMT
            Not After : Nov 24 19:01:01 2024 GMT
        Subject: CN=8011fc371d5a5d12e18cd9b5f55f0343e7138144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:df:39:8c:8b:e0:f2:a6:51:94:44:77:70:eb:
                    5f:53:fa:c3:39:94:36:10:99:c0:8b:14:1d:da:b8:
                    57:f4:1f:58:03:4f:b9:fc:c3:e4:02:5c:2f:e3:cf:
                    1d:ae:17:5f:59:2c:eb:ec:15:42:13:62:aa:c1:d1:
                    15:e5:d8:08:de:a1:b7:da:70:42:f2:1c:b5:1c:52:
                    1a:ec:05:49:02:04:5f:28:45:79:e5:a2:c5:68:80:
                    58:f2:6f:dd:55:09:0a:5a:13:70:90:f1:33:55:6f:
                    34:09:3e:d1:f4:2c:8d:61:40:8a:40:bd:db:09:9d:
                    a0:bb:ed:19:67:9d:85:88:f6:f8:f9:14:c4:9f:2b:
                    66:31:5e:32:1c:75:c4:15:22:16:83:b5:b7:8f:3c:
                    e9:b3:b7:0e:0c:f5:d9:8b:8c:00:8b:73:54:95:92:
                    a7:f5:94:b0:09:55:bb:dc:39:80:78:d2:0d:a4:63:
                    dd:af:33:d2:61:99:3d:a4:5a:47:93:2b:50:16:fd:
                    37:c8:10:89:0f:f0:d8:96:04:f7:79:3f:b3:5d:d9:
                    38:be:60:58:e6:64:e1:49:ae:a7:7f:9a:e6:74:30:
                    b7:2e:71:e6:31:ae:d9:f9:31:7d:c2:3f:f1:1a:27:
                    99:ff:d2:26:fb:57:aa:88:bc:33:cf:fe:56:3b:a8:
                    d5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:11:FC:37:1D:5A:5D:12:E1:8C:D9:B5:F5:5F:03:43:E7:13:81:44
            X509v3 Authority Key Identifier:
                keyid:E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:02:ad:bf:0d:17:36:6a:47:43:8a:d1:14:80:f4:60:07:af:
         c3:46:58:1d:d4:c9:d5:e9:85:a0:94:dd:0f:6a:b6:25:51:f9:
         ac:05:fa:54:88:ab:68:9a:be:f9:9d:22:5d:87:5c:9e:76:8f:
         88:ce:b0:3b:84:38:ab:39:e6:0b:0c:74:8d:3f:91:65:9a:9c:
         2d:ec:4b:dc:c1:34:0c:18:85:d4:fb:d8:01:64:64:72:08:11:
         ef:dc:02:c0:56:dc:e9:ad:e7:b0:38:15:d0:bf:2d:06:b2:3f:
         c5:42:c0:17:7c:a4:8b:85:b0:64:fd:6b:40:aa:6c:b6:78:fc:
         5b:40:24:bf:25:ba:83:7c:2d:f1:63:b0:d7:2f:ce:24:57:82:
         37:40:84:5c:ee:37:e6:28:b2:79:7d:10:d2:df:1d:a9:ff:3c:
         02:75:f0:0b:bc:e7:e6:b2:32:b2:34:b0:ff:07:bc:2b:74:24:
         51:ed:2c:60:43:72:13:53:fe:44:1e:35:2c:a7:d4:0c:7a:b7:
         69:28:96:cd:63:89:9b:8e:ca:de:c8:28:2a:a3:bb:f6:13:3b:
         76:01:1c:62:7b:76:3d:03:bc:74:27:8d:b2:9e:ef:29:f4:89:
         3d:91:db:ee:5d:44:c3:c3:1e:4a:28:18:e8:9b:d8:04:66:b7:
         d9:81:2b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----