Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
File:                     czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft (raw, json)
Hash identifier:          FshKDV2iwnxFgb/qIvVOni8TgKXWcXUtm3gAMi+Z8MI=
Subject key identifier:   05:B5:2E:40:A4:3F:3C:0B:A0:99:31:C8:D9:22:F3:76:E0:BD:70:89
Authority key identifier: 73:3C:01:FC:6B:DF:EB:09:0D:57:32:C8:72:EE:DA:53:CB:42:1A:BE
Certificate issuer:       /CN=733c01fc6bdfeb090d5732c872eeda53cb421abe
Certificate serial:       0192376F51FABE92E58DECFC42A728B55C46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
Manifest number:          1232
Signing time:             Sat 28 Sep 2024 07:01:35 +0000
Manifest this update:     Sat 28 Sep 2024 07:01:35 +0000
Manifest next update:     Sun 29 Sep 2024 07:01:35 +0000
Files and hashes:         1: czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl (hash: xd5RGb6WUdW2Fd8Zh4+IffpLTRL/fdUKI01a3CHqdcQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:37:6f:51:fa:be:92:e5:8d:ec:fc:42:a7:28:b5:5c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733c01fc6bdfeb090d5732c872eeda53cb421abe
        Validity
            Not Before: Sep 28 07:01:35 2024 GMT
            Not After : Sep 29 07:01:35 2024 GMT
        Subject: CN=05b52e40a43f3c0ba09931c8d922f376e0bd7089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:65:11:51:83:18:55:b8:9b:cb:09:c6:de:f7:
                    33:fb:93:90:52:3e:c6:57:57:63:14:3d:0f:6a:c5:
                    c1:fb:be:fb:13:b6:45:97:2f:58:d0:44:f8:f5:f7:
                    1c:53:fd:51:cc:98:c3:56:96:e9:53:3a:19:d0:7d:
                    c3:aa:1b:67:9d:2d:ce:a7:80:a8:25:6c:0d:68:3c:
                    cf:6e:08:f2:1d:8d:48:4c:60:e9:d5:3e:0a:6c:48:
                    5d:76:7f:0a:8e:85:00:59:d5:ae:34:64:bb:0a:b2:
                    ce:54:ca:f0:9d:7d:75:63:f8:ce:61:d8:08:95:9e:
                    29:aa:25:ae:36:23:23:30:e1:be:b6:44:79:11:2a:
                    0a:f1:c8:d0:42:ec:24:80:6e:26:8a:47:7d:e0:ea:
                    c3:f5:0a:b6:b9:e8:20:cf:d2:96:8e:21:dc:d1:f7:
                    9e:a5:ba:cf:7e:f2:aa:f8:1b:0e:60:c9:dc:d0:47:
                    24:95:75:90:33:ef:75:78:fc:c6:8c:1d:ff:b9:3b:
                    b8:ea:69:be:63:e5:ba:52:6d:2f:b8:0a:c5:74:eb:
                    7e:1b:b0:01:d3:18:6a:97:45:e7:0b:78:77:8d:68:
                    98:74:69:01:8c:ff:22:75:e5:7d:1e:75:f2:df:bc:
                    0e:9a:8c:ce:58:7f:22:be:ee:4d:0b:84:6f:6a:ac:
                    e2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B5:2E:40:A4:3F:3C:0B:A0:99:31:C8:D9:22:F3:76:E0:BD:70:89
            X509v3 Authority Key Identifier:
                keyid:73:3C:01:FC:6B:DF:EB:09:0D:57:32:C8:72:EE:DA:53:CB:42:1A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:71:7f:fe:5c:8d:d1:d2:46:97:06:dd:48:13:42:ae:4d:0d:
         1d:87:1e:e3:8f:82:c4:ad:57:29:6e:20:46:28:5e:1b:90:dc:
         a7:02:88:05:a6:b0:58:cb:30:e8:41:ed:29:1b:a0:1c:54:f1:
         74:e3:6a:f0:e0:60:b8:5b:12:63:d9:86:b8:cf:a2:90:35:6c:
         ac:95:7a:e2:5b:e8:bf:d7:42:47:f1:a6:27:10:9c:c3:3f:f8:
         64:ba:d2:33:5e:d8:bb:d7:44:32:02:e3:81:24:53:0d:73:44:
         80:11:77:4f:10:0d:23:23:15:45:33:1e:ad:32:97:29:a2:af:
         d6:6f:a9:65:95:02:cf:d8:83:8b:c9:22:ef:cb:07:f4:2a:57:
         75:47:9f:ae:14:f4:8b:b4:32:88:fc:4a:ac:bd:16:8e:1f:f8:
         7a:2a:3f:54:90:5e:1a:ee:f8:51:10:bd:53:31:3b:37:d1:7c:
         a6:57:4c:c0:c7:45:10:95:2c:a7:dd:a7:f8:a5:9e:d9:7c:28:
         a9:fa:1a:48:af:16:ea:d0:f1:b9:d4:e9:82:57:be:30:b3:bf:
         2a:40:4a:f4:0c:2d:55:12:2d:35:76:4d:40:43:ca:60:94:51:
         be:30:9d:40:77:79:d3:cb:9a:22:ee:c4:e9:3e:85:58:89:de:
         48:26:d5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----