Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
File:                     gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft (raw, json)
Hash identifier:          1N7jiuZMuQYVftoCPOO8sn5FOKKna2NKAwb29P6OeR0=
Subject key identifier:   A9:02:59:9C:D8:A6:0E:C0:66:47:E4:D5:97:0A:E2:5A:EE:61:4E:E1
Authority key identifier: 80:6C:18:06:B0:6C:5A:8C:2B:03:50:A0:FC:6F:74:6A:66:7E:4E:C8
Certificate issuer:       /CN=806c1806b06c5a8c2b0350a0fc6f746a667e4ec8
Certificate serial:       019369D935C1537B590646AB326FACA5F438
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
Manifest number:          1377
Signing time:             Tue 26 Nov 2024 19:01:02 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:02 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:02 +0000
Files and hashes:         1: gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl (hash: 9znqhdxqMXrXbrDgJx9pBVmUvKBFqKp6eC6zWirX61o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:35:c1:53:7b:59:06:46:ab:32:6f:ac:a5:f4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=806c1806b06c5a8c2b0350a0fc6f746a667e4ec8
        Validity
            Not Before: Nov 26 19:01:02 2024 GMT
            Not After : Nov 27 19:01:02 2024 GMT
        Subject: CN=a902599cd8a60ec06647e4d5970ae25aee614ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:76:60:5d:42:ec:62:25:58:a3:cc:45:fa:47:
                    e1:89:5b:c6:de:5a:5f:91:69:cd:ca:5c:23:54:ee:
                    7a:44:9d:32:08:59:95:a0:14:8b:bb:e5:fb:84:21:
                    72:b4:ec:ae:89:c4:8e:42:35:da:6d:ca:b6:91:17:
                    ed:4f:d3:2a:05:ab:3a:05:d2:c5:21:fd:81:90:d7:
                    bf:b7:fe:4a:d5:30:b8:4e:a7:b4:2a:84:5c:97:b8:
                    9c:c3:0b:67:4f:a9:46:df:f7:20:79:4d:1b:f5:8b:
                    ed:80:f4:03:41:66:1e:04:33:23:2e:18:d6:a0:5b:
                    c6:e6:4f:46:06:83:23:06:ec:3c:45:d6:14:e7:58:
                    1a:e0:e3:d2:f5:2a:8c:e5:a1:ac:41:08:e5:09:ee:
                    b8:16:49:8e:6b:fb:43:bb:c8:ee:4e:b8:d7:4c:80:
                    b1:cc:6a:1b:cf:7b:0a:76:3e:b1:8e:1c:fb:f5:b3:
                    7f:07:90:29:a9:34:cd:b5:39:23:af:19:1a:41:85:
                    ad:2e:7e:4d:97:99:fb:66:b6:4e:8b:1b:b2:20:4b:
                    a4:40:b0:8a:9a:fd:b8:27:b0:1c:27:50:72:8f:a9:
                    bc:bd:4a:7c:ff:0f:ae:f6:88:05:50:9f:42:19:68:
                    5d:9d:38:c6:7b:24:37:be:f8:23:d3:7c:e3:d0:ba:
                    4a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:02:59:9C:D8:A6:0E:C0:66:47:E4:D5:97:0A:E2:5A:EE:61:4E:E1
            X509v3 Authority Key Identifier:
                keyid:80:6C:18:06:B0:6C:5A:8C:2B:03:50:A0:FC:6F:74:6A:66:7E:4E:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:6b:86:64:38:3c:ca:ac:d7:13:f7:45:68:51:17:05:26:99:
         78:e9:78:29:66:d4:a9:e5:66:2b:a6:b4:bf:58:90:7b:55:f4:
         d3:07:15:22:1e:3d:d0:75:88:9e:b7:a1:8e:ac:75:e7:c8:c2:
         a0:62:8f:8b:58:9e:eb:ce:39:ee:0d:53:c7:91:1b:07:80:59:
         f1:7f:16:51:ba:3e:35:dc:65:ef:26:13:17:fc:7c:63:ec:aa:
         d0:86:8c:11:4b:df:a5:29:ca:4c:cc:22:d4:64:29:f8:74:4d:
         fa:4f:c5:77:fe:16:d1:fe:b1:bd:14:5a:53:7e:92:2a:3a:78:
         9b:84:ae:ad:df:de:69:43:e2:7f:f1:f7:db:37:16:47:14:4f:
         4a:c1:f7:5c:0a:6d:86:e8:c9:d5:9d:55:74:29:a7:c0:25:5d:
         15:19:d4:e3:e2:ab:ec:6a:9d:56:72:53:25:60:fd:ce:b7:fe:
         1a:cf:69:5b:60:70:99:ab:b3:ff:10:4a:b2:a5:d1:15:cd:51:
         17:f7:c3:e8:e3:09:44:67:a8:e7:75:fb:22:43:04:11:5f:b0:
         bf:04:27:a8:26:06:44:95:25:46:bd:15:5c:5c:54:2a:c0:da:
         21:cb:48:c5:e7:cd:c5:3a:f2:a5:4d:79:02:5c:b9:95:f2:d1:
         57:bf:78:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----