Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
File:                     7PsAOB5zPcbkHQbbnsjd0xEoG90.mft (raw, json)
Hash identifier:          vbhzpD7HlCF9ttHkook3QxcBjXVta23YqbSrycV2Hg0=
Subject key identifier:   09:4D:81:6D:B6:E3:E6:E8:CC:D1:6D:A0:E6:A8:91:77:4B:20:83:F6
Authority key identifier: EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
Certificate issuer:       /CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Certificate serial:       01936A466845604D1F7F960F95FA2EB09B0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
Manifest number:          0D98
Signing time:             Tue 26 Nov 2024 21:00:19 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:19 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:19 +0000
Files and hashes:         1: 7PsAOB5zPcbkHQbbnsjd0xEoG90.crl (hash: SUvHfDgUJdvIZibR1QtHFqcJjRbkH/lybjvSwncPacg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:68:45:60:4d:1f:7f:96:0f:95:fa:2e:b0:9b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
        Validity
            Not Before: Nov 26 21:00:19 2024 GMT
            Not After : Nov 27 21:00:19 2024 GMT
        Subject: CN=094d816db6e3e6e8ccd16da0e6a891774b2083f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:53:e6:b5:16:a3:b4:a6:d3:9b:73:2a:d0:b7:
                    1a:38:50:74:2a:31:33:d6:fa:b2:d7:bb:69:f6:89:
                    6e:e7:52:44:00:d7:80:ee:e4:0d:3a:c7:d2:4b:ed:
                    c9:f7:6e:71:ff:85:38:04:d8:6e:2a:f7:ef:5c:32:
                    88:32:10:dd:ef:cd:35:e7:98:85:dc:76:af:45:06:
                    a7:ae:fd:9c:29:03:23:ca:f4:94:89:e9:03:da:5e:
                    ec:8e:3f:3d:04:4a:42:ee:cd:cf:2f:39:af:fd:f1:
                    12:a9:8c:9a:83:ab:8b:2a:a0:f1:7e:05:b9:66:85:
                    e1:ea:62:37:d8:8b:86:66:d6:10:fd:b4:05:e2:fc:
                    1b:fa:fc:5e:dc:1e:b0:4b:76:a5:5b:3e:a0:e3:25:
                    f0:06:cb:2d:43:5c:60:5c:97:f7:ce:16:fa:3d:c9:
                    5b:32:8d:9c:c5:76:27:44:f8:d5:9b:ff:76:26:30:
                    4e:e3:c2:bd:a3:bf:32:d5:af:8c:56:76:55:1c:8c:
                    72:0f:5e:0d:8d:85:7b:c2:94:26:aa:70:af:18:52:
                    fb:10:4a:91:74:f7:76:ad:bb:d6:43:bc:34:a9:37:
                    50:be:d7:2f:f7:f8:01:18:01:64:9b:82:04:84:6a:
                    4a:28:54:8e:79:b0:45:73:1c:e4:c2:72:a4:19:55:
                    ec:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4D:81:6D:B6:E3:E6:E8:CC:D1:6D:A0:E6:A8:91:77:4B:20:83:F6
            X509v3 Authority Key Identifier:
                keyid:EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ea:4d:7f:0e:38:11:3c:25:35:65:8f:15:19:e2:b1:66:e8:
         98:b6:e1:56:e2:a7:bd:d1:86:b6:2c:a2:64:d4:2a:b6:08:5c:
         b0:5f:6a:66:a1:c6:a7:3a:80:40:4c:ca:a3:42:39:03:eb:0c:
         02:b3:37:69:45:71:91:78:e9:4a:93:06:c1:ff:57:2e:8b:ff:
         a9:d5:32:64:33:5d:d5:eb:6b:13:5d:28:81:db:8b:b7:52:42:
         d1:40:61:89:c9:5a:cf:56:bb:01:d5:4f:d4:80:2c:93:3b:70:
         c3:86:93:45:bf:7b:aa:3b:53:64:cb:08:f5:f8:f7:ba:54:20:
         68:4f:ca:e9:75:32:3a:5e:99:29:02:71:9b:c5:00:78:43:67:
         40:e3:60:c6:f2:69:a0:b9:4d:7e:2e:cf:a6:43:83:bd:6b:f4:
         09:87:45:6b:c5:49:e4:76:1c:85:73:43:62:aa:47:2b:a9:ab:
         31:cf:35:5b:7a:f3:3b:89:8f:d9:c6:03:4a:7f:18:50:1f:69:
         11:e7:d0:ff:07:6d:90:01:0a:11:22:ab:a5:64:cc:b7:a6:95:
         63:a3:e8:35:fb:55:73:9d:5b:c3:3b:b7:46:78:e0:54:1d:0c:
         40:81:bd:73:e3:06:a0:9e:b4:b9:04:24:94:dc:d6:51:99:c1:
         2d:da:46:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----