Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
File:                     0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft (raw, json)
Hash identifier:          OlzmPsgcNaKEopprvJAHne45b0y8PxCjg2BWp4J2GRQ=
Subject key identifier:   32:39:CB:91:F1:51:F0:99:38:02:D1:7B:A1:09:C7:85:D1:C4:22:89
Authority key identifier: D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B
Certificate issuer:       /CN=d09ef2093da15eec90efb837b950164669f6198b
Certificate serial:       01940647CAC439372037E61CD563687D1940
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
Manifest number:          0383
Signing time:             Fri 27 Dec 2024 04:02:35 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:35 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:35 +0000
Files and hashes:         1: 0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl (hash: XnpgFAUBS/DUV0NXPKBoKPew87kz62gUfxOTjwax3cg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:ca:c4:39:37:20:37:e6:1c:d5:63:68:7d:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d09ef2093da15eec90efb837b950164669f6198b
        Validity
            Not Before: Dec 27 04:02:35 2024 GMT
            Not After : Dec 28 04:02:35 2024 GMT
        Subject: CN=3239cb91f151f0993802d17ba109c785d1c42289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e6:86:52:76:7c:66:1a:37:75:8b:18:b1:29:
                    81:a1:e0:c0:38:54:87:09:42:96:8d:24:30:a8:ea:
                    d3:fd:d7:c8:93:56:6e:c1:d8:5e:4b:da:dd:a0:8f:
                    4a:e7:a6:11:f6:82:b8:05:90:45:7d:b5:c8:e8:f6:
                    3c:be:8f:8d:b7:4c:c2:72:30:79:cc:cc:44:0a:2f:
                    7e:70:8b:83:ad:ff:8f:99:bd:7f:af:6e:0f:3b:ad:
                    e4:8b:88:75:23:a5:4c:3c:72:ba:04:97:f6:43:3f:
                    4b:80:2f:22:b2:bc:28:01:90:71:cc:88:51:55:f8:
                    7d:46:f3:d3:4e:48:ec:39:12:08:4c:64:81:3c:db:
                    45:7f:4d:82:0d:51:ee:0c:8a:5b:5d:3a:a0:a4:64:
                    dd:f1:35:0f:c0:10:88:d8:d1:15:1a:ea:25:51:cc:
                    7f:5d:2b:ae:23:07:6c:7d:54:46:1a:f4:16:af:e7:
                    71:9f:1b:0a:84:b9:8e:a7:d4:80:a9:5d:0a:ed:54:
                    8e:15:2d:71:59:79:e2:dc:f5:ad:ee:a5:a8:e5:d6:
                    e0:97:a6:bf:9e:a1:e9:f3:d8:50:1d:73:30:f3:0c:
                    83:44:a6:20:24:e6:e1:ba:38:c5:58:1c:e1:d8:b5:
                    aa:34:41:48:03:60:5c:22:46:5a:b0:dc:3f:47:9b:
                    61:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:39:CB:91:F1:51:F0:99:38:02:D1:7B:A1:09:C7:85:D1:C4:22:89
            X509v3 Authority Key Identifier:
                keyid:D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:9c:ed:72:9a:08:d9:40:ca:23:34:75:68:76:80:a0:15:ea:
         54:af:ca:d5:0a:f3:60:cc:d2:39:dc:ac:b7:2c:2c:e7:ac:13:
         7f:5e:8d:92:3c:f7:1d:27:7c:ce:9a:e9:3c:f6:a6:4f:b3:15:
         3d:2e:93:e2:19:81:9e:9b:bd:fd:97:13:fd:b6:27:40:86:3c:
         2e:95:3c:9a:4e:31:97:b5:6b:2b:1e:d7:a8:12:1f:4c:54:2c:
         33:de:47:d0:d6:03:2b:4d:b2:b8:2e:35:b2:ad:2e:1b:59:cb:
         f7:fc:61:b8:96:94:23:95:6a:27:eb:a9:6c:8a:69:c3:1f:56:
         51:37:eb:97:66:b8:57:e8:76:0d:d8:07:d9:df:28:0b:54:68:
         2c:82:3e:12:04:cb:e3:54:88:af:95:ff:fc:00:88:e9:08:13:
         e9:68:4f:eb:9d:09:4b:d8:a1:f5:db:bf:9d:d2:e6:44:69:d9:
         a7:fe:10:eb:1c:9d:c2:2c:7b:1f:60:71:a4:53:3c:0a:01:c6:
         1e:67:49:03:9b:47:6e:70:b7:b1:a8:ce:b2:6d:6d:fc:93:c6:
         fe:e0:69:54:93:ea:ca:4d:4f:b0:e7:e0:d2:bc:0d:75:b4:5c:
         f7:03:f5:a6:36:c5:28:45:42:05:e2:c0:c8:6c:d0:c9:77:1d:
         08:15:5a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----