Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
File:                     6RJGEsq9EBwYyTXtIXdaDlxKibc.mft (raw, json)
Hash identifier:          AQi1TE36VHoiDO6g4moVwDzfKwEuYIJHJtgG7B3scJc=
Subject key identifier:   97:43:94:19:AD:DE:31:4D:21:C7:AB:2D:2D:08:C2:6E:75:F9:A7:2A
Authority key identifier: E9:12:46:12:CA:BD:10:1C:18:C9:35:ED:21:77:5A:0E:5C:4A:89:B7
Certificate issuer:       /CN=e9124612cabd101c18c935ed21775a0e5c4a89b7
Certificate serial:       01935A66003F40E7F24D35CD3B7AF6C7DEDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
Manifest number:          0718
Signing time:             Sat 23 Nov 2024 19:00:54 +0000
Manifest this update:     Sat 23 Nov 2024 19:00:54 +0000
Manifest next update:     Sun 24 Nov 2024 19:00:54 +0000
Files and hashes:         1: 6RJGEsq9EBwYyTXtIXdaDlxKibc.crl (hash: Sd1BYvZAhPYX4Z1SbqdTS8J/ThrTKgQm0MXCl5Aq+FY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:66:00:3f:40:e7:f2:4d:35:cd:3b:7a:f6:c7:de:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9124612cabd101c18c935ed21775a0e5c4a89b7
        Validity
            Not Before: Nov 23 19:00:54 2024 GMT
            Not After : Nov 24 19:00:54 2024 GMT
        Subject: CN=97439419adde314d21c7ab2d2d08c26e75f9a72a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7e:0f:2e:5a:de:14:39:03:1e:65:f3:8c:c7:
                    96:64:f2:1b:86:26:36:50:a0:7c:32:c3:6a:6b:57:
                    c9:64:02:3f:d7:44:f3:ea:83:18:f7:c1:1d:c9:70:
                    fe:d2:15:6b:4d:ab:eb:fe:29:a4:f6:96:03:3b:da:
                    e8:b7:71:a3:38:fd:79:29:1b:99:78:26:c4:93:91:
                    4c:02:af:80:b4:45:27:ea:d9:02:7a:3a:3f:22:c6:
                    2e:20:16:12:62:36:8a:3d:24:f5:53:f6:08:db:83:
                    5d:46:aa:b2:f1:f7:d6:41:80:25:16:68:4e:16:c7:
                    ed:fc:4f:a0:e6:db:2f:4f:10:6a:49:04:c1:88:71:
                    50:bd:af:b0:be:34:11:42:11:e8:86:b3:e6:f1:63:
                    98:c2:31:b5:e7:c9:af:36:d4:e7:fe:74:ec:02:c3:
                    f0:96:c8:1c:ce:fa:ed:b3:88:37:36:79:bc:1d:0a:
                    51:a3:2d:3c:f4:d9:a3:bb:a6:97:8c:00:48:d6:9b:
                    4d:7a:76:fa:f3:f0:d5:70:5d:e1:ec:68:91:2c:ab:
                    84:60:53:50:dc:2d:f9:e0:68:08:cd:c3:d4:5e:c1:
                    8c:e8:93:46:24:0e:8d:18:6b:12:9c:19:cd:e0:b6:
                    34:c0:37:d2:09:44:a7:0b:2a:0f:bf:86:3d:20:ac:
                    5e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:43:94:19:AD:DE:31:4D:21:C7:AB:2D:2D:08:C2:6E:75:F9:A7:2A
            X509v3 Authority Key Identifier:
                keyid:E9:12:46:12:CA:BD:10:1C:18:C9:35:ED:21:77:5A:0E:5C:4A:89:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RJGEsq9EBwYyTXtIXdaDlxKibc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d72628-2d37-4c9f-b1f3-c1d845708a6b/1/6RJGEsq9EBwYyTXtIXdaDlxKibc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:0d:3f:34:20:b8:e3:36:07:60:64:03:b8:12:e7:04:24:3c:
         0a:06:6c:0d:86:e6:bb:ba:8f:b9:60:c9:6d:16:f4:a1:2a:12:
         45:22:4e:a5:0c:51:82:30:f7:03:25:0a:56:9e:cd:b3:a7:ef:
         19:e0:79:6f:55:b6:53:31:90:87:ab:aa:4e:d0:62:6c:0b:c7:
         df:cf:97:92:83:1b:65:ef:fd:fc:fa:1d:dd:ce:40:71:51:56:
         30:03:82:85:94:27:23:88:b9:b8:62:7f:44:50:5f:5e:d6:6f:
         48:bc:86:5f:b1:09:43:25:bc:e9:45:fe:43:d1:87:5e:b4:eb:
         6a:c5:23:2b:ae:3d:b2:04:69:45:e4:d4:e7:88:6a:53:bd:97:
         38:e7:7e:32:1d:c3:36:30:4d:0a:26:f1:a6:8e:31:81:e1:ff:
         60:1b:2a:7c:82:b0:54:da:73:58:45:f4:9e:d3:3c:bc:d2:ec:
         4d:d6:7b:77:19:f7:0a:ba:03:f8:ba:c4:e9:56:e0:32:a2:3d:
         89:18:19:a1:96:5c:44:61:b0:b3:6f:25:74:f4:0d:89:b1:fb:
         69:c5:6c:0f:93:91:31:d2:ee:9c:e0:4d:f1:05:d8:eb:f0:2c:
         bb:c5:45:d4:43:18:1d:7d:08:02:be:35:b4:27:56:34:87:0a:
         47:c7:e7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----