Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
File:                     V9minRgOgZpHgvtsbqFtOn0ykQA.mft (raw, json)
Hash identifier:          +18ToGrksjmrM6Js6kMxxZWuZc+IZde2bCEkW/QXu7Q=
Subject key identifier:   16:DF:86:BC:FC:F2:14:04:87:46:94:22:BB:5F:DB:33:40:54:84:EC
Authority key identifier: 57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00
Certificate issuer:       /CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
Certificate serial:       019236CA340D60DEC85F67C5C0EF1E23F5E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
Manifest number:          04F1
Signing time:             Sat 28 Sep 2024 04:01:14 +0000
Manifest this update:     Sat 28 Sep 2024 04:01:14 +0000
Manifest next update:     Sun 29 Sep 2024 04:01:14 +0000
Files and hashes:         1: V9minRgOgZpHgvtsbqFtOn0ykQA.crl (hash: hzD8WRPbviM/bm+q9/mnfHF3foqOWYo+y9rAK5yoT5A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 04:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:36:ca:34:0d:60:de:c8:5f:67:c5:c0:ef:1e:23:f5:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
        Validity
            Not Before: Sep 28 04:01:14 2024 GMT
            Not After : Sep 29 04:01:14 2024 GMT
        Subject: CN=16df86bcfcf2140487469422bb5fdb33405484ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:98:44:e0:2c:15:bf:1e:1a:36:be:3c:a6:e7:
                    df:e3:0d:5a:e0:6a:4a:4f:43:af:28:51:7c:e4:cf:
                    03:66:b7:b0:99:71:b1:f7:8d:05:c7:1e:c5:da:8a:
                    9a:71:c3:c7:2c:6e:1b:70:04:3c:c2:b3:81:cc:34:
                    98:98:f7:30:ca:48:27:5f:45:e4:d4:a6:fd:18:ce:
                    f0:64:5f:83:86:3b:e7:93:f6:30:a5:97:3b:4e:11:
                    db:57:5b:55:84:4d:39:24:ed:54:21:7b:12:66:07:
                    10:4f:b3:67:65:09:5e:c5:24:68:83:6b:e4:6a:df:
                    6d:34:c8:74:4b:db:d9:f2:92:87:32:93:5e:72:58:
                    35:bc:29:29:dd:fc:6a:4d:5d:75:d6:a0:5c:af:11:
                    33:ef:15:09:d5:ea:9e:b1:f0:b9:cc:dc:d7:de:4f:
                    16:39:16:fb:ad:48:d1:c3:4e:6e:0c:3c:34:0d:1c:
                    f7:4f:a0:f6:7d:6e:10:01:f2:ea:38:17:12:81:99:
                    53:ba:63:ed:e2:91:37:ea:1b:35:4a:8d:61:40:78:
                    6b:ca:cc:d7:3c:7a:42:1e:fd:e5:72:9a:71:22:e5:
                    00:de:4d:c0:8c:a5:ce:42:a7:22:a8:dc:94:74:87:
                    8d:9a:6c:9f:53:f9:21:97:43:24:66:9d:5a:1b:9b:
                    41:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DF:86:BC:FC:F2:14:04:87:46:94:22:BB:5F:DB:33:40:54:84:EC
            X509v3 Authority Key Identifier:
                keyid:57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:7a:78:9e:00:e1:4e:3d:cb:1b:0b:22:30:c8:d7:da:b0:54:
         29:36:87:63:23:97:4b:4c:49:bd:30:23:28:83:1f:4d:3d:13:
         fa:f8:95:66:46:b1:dc:33:f2:ab:bf:42:e2:ce:61:bb:fc:c0:
         35:7f:df:87:a7:c1:de:2a:1e:58:b2:73:02:bc:f4:b7:6b:4b:
         a1:83:28:70:4b:eb:84:85:4d:41:b6:24:8a:65:2b:72:4d:09:
         4c:36:ac:10:c2:47:22:64:5f:0e:5e:52:5c:af:ad:16:da:db:
         a7:b9:12:6b:6e:f6:52:0a:73:89:66:71:e5:08:e7:82:7d:58:
         9a:7e:0f:ad:bd:73:8f:1e:0d:a6:1a:04:46:bd:33:f8:bb:43:
         0c:a6:da:32:33:4e:0b:1f:ee:92:ca:7d:c2:7b:27:17:ec:2f:
         13:5c:e6:d5:a9:3f:21:5a:f7:61:ec:86:14:b4:5b:71:51:e0:
         ca:29:bd:46:9a:0f:87:dd:3a:ca:1f:af:62:e0:80:35:ad:c4:
         a6:c3:10:21:ca:4e:8b:8f:99:5b:47:e1:66:3e:84:21:72:d3:
         cd:3d:96:ee:75:95:d0:1b:2b:59:cd:12:8b:85:17:a6:17:37:
         95:a0:e1:54:af:52:a4:5c:aa:51:8b:bc:73:27:10:99:cd:ba:
         9e:57:54:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----