Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/b12399-d560-4d08-afe4-1b1c73476fea/1/d-wkPNn4o06pfFDXIR1TJEfnu0g.mft
File:                     d-wkPNn4o06pfFDXIR1TJEfnu0g.mft (raw, json)
Hash identifier:          QvX5LWWi1PoHRG0MobS/15Z5gDQihXyF9/XuaLpAWrk=
Subject key identifier:   CD:F4:36:90:D2:9A:5B:BD:C7:15:15:89:BB:0A:AE:13:01:CB:C8:0E
Authority key identifier: 77:EC:24:3C:D9:F8:A3:4E:A9:7C:50:D7:21:1D:53:24:47:E7:BB:48
Certificate issuer:       /CN=77ec243cd9f8a34ea97c50d7211d532447e7bb48
Certificate serial:       01901D45E2B8845F021700929EE88A33A2D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-wkPNn4o06pfFDXIR1TJEfnu0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/b12399-d560-4d08-afe4-1b1c73476fea/1/d-wkPNn4o06pfFDXIR1TJEfnu0g.mft
Manifest number:          0946
Signing time:             Sat 15 Jun 2024 19:00:37 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:37 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:37 +0000
Files and hashes:         1: d-wkPNn4o06pfFDXIR1TJEfnu0g.crl (hash: 04ZcleJqHQ9254e+PFEXVhoi7bgO/ZfngwG+JYNK4HY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/b12399-d560-4d08-afe4-1b1c73476fea/1/d-wkPNn4o06pfFDXIR1TJEfnu0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/b12399-d560-4d08-afe4-1b1c73476fea/1/d-wkPNn4o06pfFDXIR1TJEfnu0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d-wkPNn4o06pfFDXIR1TJEfnu0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:e2:b8:84:5f:02:17:00:92:9e:e8:8a:33:a2:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77ec243cd9f8a34ea97c50d7211d532447e7bb48
        Validity
            Not Before: Jun 15 19:00:37 2024 GMT
            Not After : Jun 16 19:00:37 2024 GMT
        Subject: CN=cdf43690d29a5bbdc7151589bb0aae1301cbc80e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:64:a4:32:19:d4:78:c3:18:0d:4f:49:37:43:
                    45:ba:e4:f8:fe:6d:13:89:ab:75:13:a1:53:cc:c3:
                    04:d9:25:a3:04:bd:5e:77:a3:c7:1c:fe:d2:c6:9f:
                    1f:87:d1:fc:8e:9b:f6:62:09:49:37:6e:3a:35:b6:
                    e0:79:62:0d:02:45:d5:3d:c6:db:e6:77:e6:56:17:
                    3d:a2:87:25:f7:f5:01:41:ec:be:63:22:09:b0:bd:
                    50:b5:27:ff:de:fd:c5:84:73:91:ce:f1:43:99:5d:
                    0b:65:37:c1:90:2d:a4:a6:75:f6:f4:c1:ee:c4:20:
                    7d:56:9a:fa:d1:56:cd:ac:31:52:3c:e1:66:4f:f8:
                    12:33:8c:85:67:ae:3b:90:5c:7e:98:98:c6:68:72:
                    14:de:bf:aa:a5:12:5b:70:dd:33:ec:67:f9:d2:a7:
                    0c:76:f3:8b:8e:95:84:26:cc:6e:2f:a7:dc:87:42:
                    bc:b3:1c:ef:e8:3d:db:5c:0d:bd:20:53:71:93:f5:
                    e9:be:52:eb:27:32:a0:3f:cd:be:e6:82:9a:a9:bf:
                    fa:28:25:df:82:ad:64:a6:a7:09:3b:b8:7f:e2:6b:
                    ab:e5:02:28:4c:9e:0c:32:12:7e:af:80:ad:74:3d:
                    90:0c:86:a4:ab:c1:11:e8:42:b9:c9:a0:51:95:f5:
                    6c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F4:36:90:D2:9A:5B:BD:C7:15:15:89:BB:0A:AE:13:01:CB:C8:0E
            X509v3 Authority Key Identifier:
                keyid:77:EC:24:3C:D9:F8:A3:4E:A9:7C:50:D7:21:1D:53:24:47:E7:BB:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-wkPNn4o06pfFDXIR1TJEfnu0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b12399-d560-4d08-afe4-1b1c73476fea/1/d-wkPNn4o06pfFDXIR1TJEfnu0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b12399-d560-4d08-afe4-1b1c73476fea/1/d-wkPNn4o06pfFDXIR1TJEfnu0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:28:3f:a9:0a:ed:9e:3d:bc:e5:ac:23:6b:8a:56:05:34:d4:
         23:c3:e2:de:dd:a4:ad:0f:e5:8e:3f:34:3f:10:6e:b8:04:39:
         a4:a4:c8:de:d5:74:e8:a7:cb:19:68:26:b5:58:ec:53:0e:35:
         8a:d5:5b:81:d1:57:75:e4:0a:55:3e:85:0e:d2:fa:7f:f4:7c:
         04:6d:eb:ea:d9:8e:b2:9b:f6:d4:ed:64:ba:39:c1:16:0f:99:
         33:2e:cf:c6:4f:4f:db:d0:c9:3d:fd:31:c7:4e:6c:8d:63:56:
         de:23:0d:89:8f:4d:c0:33:49:e1:5b:96:a6:6b:82:99:f2:06:
         29:54:09:46:3c:a0:b9:7d:b5:71:af:d4:e7:17:98:20:a6:27:
         5b:97:cc:61:6a:81:f3:3f:0e:90:27:88:8e:cd:92:c1:fe:a8:
         c6:e3:db:31:8d:2e:2b:1e:4c:ce:f5:b3:69:74:b1:bf:16:65:
         be:0d:42:34:d0:94:b4:3b:99:85:5e:0b:86:6f:ba:36:e3:93:
         3e:09:8f:28:b4:e0:dc:b0:f5:21:38:4d:c9:d7:86:34:35:df:
         96:64:5e:ce:11:6f:31:36:ea:d9:b9:c2:79:80:ab:1e:f3:b7:
         89:1c:40:87:6d:84:ae:04:f4:d9:1c:ca:55:94:f6:88:3d:c4:
         7b:58:d7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----