Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
File:                     rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft (raw, json)
Hash identifier:          cUq5tJF/TxUrW7WcnN+H5/FLyCt9nPCS3k7vuAMxZj4=
Subject key identifier:   54:47:58:F1:66:55:54:79:E0:E1:72:B1:4F:76:4D:E7:25:9E:F9:91
Authority key identifier: AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5
Certificate issuer:       /CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
Certificate serial:       019656B83E73890B4938BD552E76A12EB105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
Manifest number:          03C6
Signing time:             Mon 21 Apr 2025 05:00:37 +0000
Manifest this update:     Mon 21 Apr 2025 05:00:37 +0000
Manifest next update:     Tue 22 Apr 2025 05:00:37 +0000
Files and hashes:         1: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl (hash: gv/sah9jubt5rMcK/9v+SSPAsvIafFbXKiSYNJbz7X8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:56:b8:3e:73:89:0b:49:38:bd:55:2e:76:a1:2e:b1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
        Validity
            Not Before: Apr 21 05:00:37 2025 GMT
            Not After : Apr 22 05:00:37 2025 GMT
        Subject: CN=544758f166555479e0e172b14f764de7259ef991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:67:9b:95:88:a8:44:1c:f1:b6:25:7a:c4:25:
                    b4:3c:5e:c7:e9:23:6e:dd:7d:b9:01:7b:f7:45:65:
                    3d:0d:04:76:62:6d:54:6f:6b:5b:44:21:44:8b:63:
                    02:e8:29:74:d3:34:c5:f5:12:8b:98:3b:c8:32:b0:
                    43:a1:22:e7:f2:84:fa:69:f3:e4:75:69:f1:7e:fd:
                    1f:db:70:86:3d:13:2e:7a:8a:48:2e:d5:a5:aa:ee:
                    45:8f:e4:0f:ed:0c:d0:ec:ea:80:2e:06:6d:e4:81:
                    cc:9e:ef:3e:a4:46:ac:4e:3b:60:37:48:88:11:8d:
                    71:bc:f7:c5:27:de:19:2d:41:a6:fb:56:6b:75:dc:
                    f7:e6:d4:b7:c7:0f:25:9a:b9:04:a8:fe:37:e3:e2:
                    a9:d7:37:56:9e:c1:f0:e3:53:e3:69:2d:bb:a9:72:
                    54:62:57:3c:1e:51:4f:1d:55:c2:08:86:8d:aa:a2:
                    d2:cc:f0:eb:82:15:fa:4f:96:88:1a:f1:27:b6:e9:
                    ab:c3:65:52:3c:e8:93:34:bc:ec:6e:54:0b:02:ec:
                    32:64:93:ff:79:33:0f:b6:52:84:e0:c4:4b:1d:1e:
                    51:8d:93:99:f9:e0:e7:1f:97:ba:76:49:ac:33:bc:
                    d4:56:0a:38:0c:25:a4:de:69:3b:5c:84:21:78:2f:
                    4c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:47:58:F1:66:55:54:79:E0:E1:72:B1:4F:76:4D:E7:25:9E:F9:91
            X509v3 Authority Key Identifier:
                keyid:AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:6c:a7:e7:7b:5d:3e:1f:02:d2:48:2c:a9:c9:79:52:12:20:
         6a:99:ce:38:64:92:5b:c8:72:20:ae:da:f3:9e:db:ee:67:f1:
         e3:79:57:a9:ab:ce:04:45:26:0e:73:ef:d5:b0:7a:3b:64:0a:
         97:e0:0e:0c:5b:aa:d9:35:c3:dc:8c:26:3c:26:b9:06:ac:03:
         ec:9b:29:db:38:3d:f1:e4:46:82:2b:68:0c:5d:58:8b:ec:56:
         c9:23:4f:b7:79:4d:23:ec:b5:8c:1f:56:32:51:34:31:bf:ae:
         86:62:bb:e6:51:fc:95:33:cb:da:23:f4:7f:ed:91:1a:a1:46:
         fb:61:c2:dc:c0:41:e8:32:f0:b3:a8:02:13:95:f1:e2:24:74:
         10:06:24:23:5e:4f:b8:33:12:65:c5:47:bd:a3:13:a3:2e:b3:
         5d:fa:16:f5:21:bb:65:98:39:ba:1f:f3:62:a8:e5:31:30:65:
         15:73:ee:cc:8d:58:95:ef:27:8b:2d:19:fd:e5:68:ad:61:c9:
         c6:aa:a7:25:b1:c5:3a:5a:c8:cc:ef:f3:1f:2f:59:75:99:bf:
         ae:43:8c:61:54:e9:ea:0a:3b:7d:76:d3:b8:d4:3f:fd:c3:82:
         d1:3b:2c:ea:1d:86:12:23:30:e9:5c:02:03:3a:89:13:13:26:
         4d:9b:c7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----