Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft
File:                     Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft (raw, json)
Hash identifier:          Xk1gHkuEfXKvKrEglDSQ4j3kEwSNSKYn972vxbQAhzk=
Subject key identifier:   ED:36:AF:23:F3:C8:4C:4A:4B:47:48:8B:AD:A9:9D:C0:7D:25:F9:32
Authority key identifier: 16:F8:35:98:1E:1E:78:93:47:F4:7F:CC:9B:BA:AC:6B:15:D6:87:C1
Certificate issuer:       /CN=16f835981e1e789347f47fcc9bbaac6b15d687c1
Certificate serial:       0194064733AF1EAA3E1DFB2073F5FB02224E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft
Manifest number:          13C8
Signing time:             Fri 27 Dec 2024 04:01:57 +0000
Manifest this update:     Fri 27 Dec 2024 04:01:57 +0000
Manifest next update:     Sat 28 Dec 2024 04:01:57 +0000
Files and hashes:         1: Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.crl (hash: XlSjDheDum1hqQZYK5VBnY47tZAvXcH6ayk4qA+/61s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:33:af:1e:aa:3e:1d:fb:20:73:f5:fb:02:22:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16f835981e1e789347f47fcc9bbaac6b15d687c1
        Validity
            Not Before: Dec 27 04:01:57 2024 GMT
            Not After : Dec 28 04:01:57 2024 GMT
        Subject: CN=ed36af23f3c84c4a4b47488bada99dc07d25f932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:37:98:02:9b:7a:e6:f3:23:d5:db:ed:91:87:
                    6d:f9:20:17:04:8e:03:84:70:3f:06:6c:c6:5f:e7:
                    bd:85:93:ec:68:1b:02:d3:4f:ae:9d:b4:47:af:64:
                    29:85:9b:77:05:e0:17:c0:eb:a7:43:11:80:e9:a7:
                    41:ab:82:ab:45:36:c6:8b:7a:9a:b4:45:d1:27:43:
                    0c:4c:6f:5e:fb:4a:a6:37:64:41:92:c8:a5:12:2d:
                    12:48:ff:f8:59:ba:bd:83:8d:57:b8:4b:74:9c:26:
                    82:34:77:09:e3:fe:17:12:c9:14:8c:f0:ac:60:6e:
                    1b:01:a5:be:f7:26:62:11:6f:21:62:59:f1:48:89:
                    08:08:dc:cc:2d:dd:d0:1f:ea:65:b7:2d:09:f2:ce:
                    3d:54:6b:91:19:43:99:a0:64:52:bc:d2:de:e5:2b:
                    b0:74:28:8a:e4:fe:4d:13:be:95:8a:83:fb:c4:c2:
                    40:7f:50:16:b4:aa:e7:88:99:a5:1f:f6:30:6a:42:
                    cd:28:18:48:1f:54:a2:6f:4b:b4:f7:10:32:8c:6b:
                    da:a4:b9:b9:32:9a:4c:1a:d2:23:74:73:e3:96:73:
                    f5:7c:ac:6c:b8:18:4b:ca:dd:38:fe:c8:65:8c:0f:
                    e9:75:58:26:3b:a2:91:22:1e:f2:3a:b0:16:4a:3c:
                    f4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:36:AF:23:F3:C8:4C:4A:4B:47:48:8B:AD:A9:9D:C0:7D:25:F9:32
            X509v3 Authority Key Identifier:
                keyid:16:F8:35:98:1E:1E:78:93:47:F4:7F:CC:9B:BA:AC:6B:15:D6:87:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:7f:47:8a:7d:b3:23:1a:5f:64:61:f1:78:18:11:b2:aa:4f:
         c5:98:ef:a0:7b:b1:e5:db:b3:ef:c0:7d:0b:57:3a:8a:4a:08:
         01:25:e9:24:40:f2:41:c2:e4:aa:ef:81:14:fc:1a:cd:35:68:
         e6:f8:5f:b6:79:36:11:85:38:f4:73:4b:aa:a2:bb:9c:1e:e4:
         15:c7:ce:00:b7:c6:25:20:39:0a:c1:94:7a:5b:7b:59:76:aa:
         38:0d:e3:c9:f1:92:56:7a:cc:d9:f5:7a:e7:f5:b6:3e:55:91:
         b8:a4:42:de:00:9a:35:51:1a:71:c1:a3:bc:3a:a0:9f:9d:eb:
         cd:be:30:43:82:3b:65:ae:f7:e8:38:80:42:8f:bf:28:44:52:
         e7:73:ed:c7:c2:2d:c2:d6:1d:aa:7a:13:34:5f:52:0e:5f:c7:
         a6:6b:ad:1c:1c:f1:91:81:84:8c:ec:d9:cb:41:05:02:6a:84:
         5a:1e:32:91:f7:ea:9a:45:e1:a4:98:1a:d1:b8:cd:b7:2d:6b:
         f3:f6:a7:fe:a9:2b:a6:ab:5e:97:65:d5:19:4c:7f:b6:dd:51:
         65:c1:11:30:39:9b:04:82:16:b2:a7:1f:ed:6f:65:e5:b8:6f:
         f4:c7:b4:5e:9d:ee:9a:05:42:9e:11:20:89:de:22:52:7a:8e:
         e2:a7:01:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----