Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
File:                     GgWAKcls4or4AY1X-PpAMSYVG-Y.mft (raw, json)
Hash identifier:          VCQRX56LnpQz631sWn9sjDaS29F/T8fB3VycCeXBJoM=
Subject key identifier:   90:15:53:8E:5A:B8:3E:6A:6B:18:EC:E6:87:92:FF:50:02:D9:D8:9E
Authority key identifier: 1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
Certificate issuer:       /CN=1a058029c96ce28af8018d57f8fa403126151be6
Certificate serial:       018F87B68C8B6D64BBDEEA2603124275C60F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
Manifest number:          030C
Signing time:             Fri 17 May 2024 18:00:38 +0000
Manifest this update:     Fri 17 May 2024 18:00:38 +0000
Manifest next update:     Sat 18 May 2024 18:00:38 +0000
Files and hashes:         1: GgWAKcls4or4AY1X-PpAMSYVG-Y.crl (hash: pxM0jFq3Hcqv5vBVOx/iVgZdyWxA4p6Iw+bBVvtaQWg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:8c:8b:6d:64:bb:de:ea:26:03:12:42:75:c6:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a058029c96ce28af8018d57f8fa403126151be6
        Validity
            Not Before: May 17 18:00:38 2024 GMT
            Not After : May 18 18:00:38 2024 GMT
        Subject: CN=9015538e5ab83e6a6b18ece68792ff5002d9d89e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:18:7e:da:5f:d0:24:b6:7e:68:1c:29:5e:29:
                    bb:9d:84:80:dd:12:ff:4f:de:60:bb:60:46:a3:df:
                    e9:df:25:19:4a:0b:60:cd:b7:58:45:6e:31:b0:75:
                    82:eb:30:b2:4c:72:e3:5f:71:5d:12:c4:e8:df:b6:
                    f2:4f:ac:2d:1e:b2:41:0f:bd:99:88:d8:85:3c:93:
                    8c:64:ba:b4:3b:fe:bf:48:67:cb:e0:6c:aa:bc:e9:
                    17:c6:8f:39:8c:61:c1:9e:a3:f5:ff:c8:34:1a:1d:
                    8c:0f:bb:5e:e9:52:4b:f4:1e:ac:ae:ce:1b:5e:dd:
                    69:c0:86:a4:99:5f:03:2a:b2:1e:b8:16:54:7d:f3:
                    ab:d2:ba:2a:07:22:5e:5a:eb:be:26:b4:ea:2d:44:
                    9d:15:7b:59:71:99:8b:1d:cc:1c:f0:14:7d:1d:0d:
                    ab:7c:ed:07:e1:67:0c:e4:b7:3e:01:ec:28:45:d0:
                    a9:9c:51:a6:c4:3c:a0:b4:a4:cd:ef:c1:e0:e8:30:
                    21:5c:26:ac:3a:ae:a9:0e:15:0b:da:7a:7e:45:c1:
                    7f:34:7e:18:e9:24:38:35:80:4f:12:8d:ac:e6:7a:
                    f9:49:45:29:92:04:02:ae:6f:cc:99:85:66:fd:e4:
                    4c:cd:44:10:54:98:d4:4f:c4:3a:f8:c4:ec:a7:49:
                    d4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:15:53:8E:5A:B8:3E:6A:6B:18:EC:E6:87:92:FF:50:02:D9:D8:9E
            X509v3 Authority Key Identifier:
                keyid:1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:57:42:f3:0a:9a:1f:33:4f:5a:7f:0c:4a:0d:27:c0:a0:08:
         b6:f4:59:dd:f5:fb:ef:fe:77:d7:f1:5d:c6:b9:bc:9b:bf:cc:
         e0:02:23:5b:3b:56:9f:80:bf:cc:7b:8c:94:df:a9:b1:10:ab:
         cd:fd:5d:a6:9d:f5:c9:94:01:ad:8c:82:e3:c7:a5:8d:8c:dd:
         2d:46:8a:85:8f:95:27:93:a1:75:3d:d4:52:2e:6b:a2:87:f0:
         ea:f3:8a:0c:09:4b:f0:f1:a7:95:46:98:bb:1c:d8:4d:87:20:
         46:a1:0f:c7:fb:66:7e:88:4a:a4:00:01:2f:51:83:80:6b:ee:
         f9:a7:e0:bf:11:72:3b:50:84:ae:f2:9b:ab:e3:63:86:f9:2a:
         df:ad:dd:d3:7a:c4:7c:5c:ed:de:66:10:55:14:02:ed:39:e3:
         10:62:0a:a1:ca:e6:f5:6f:9b:a0:78:cc:36:86:b1:5c:2d:e5:
         71:30:85:0d:47:e3:60:d1:bf:10:75:73:c2:ee:ea:a0:92:44:
         e8:97:b5:c6:db:0e:3d:c4:c1:9c:52:d4:c4:59:e8:55:1a:ad:
         9b:7f:ea:4f:b9:f8:32:e5:73:f3:b6:4d:8c:64:4f:97:a8:ee:
         b3:d4:46:19:34:64:0b:7f:ea:48:b7:95:50:95:ec:ba:42:f6:
         a2:5e:ca:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----