Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9c17c4-67eb-4d78-ac7c-7aa939ad9fe0/1/nwDOElva92YyktO-I2S_ZFyGtqY.mft
File:                     nwDOElva92YyktO-I2S_ZFyGtqY.mft (raw, json)
Hash identifier:          U+UfMP9pp1g2RcIH1D1YHT60CXqfniVvfh5VEL1/hgM=
Subject key identifier:   76:16:A1:37:D8:23:3C:59:3F:2D:3B:42:73:52:3D:30:8A:53:51:93
Authority key identifier: 9F:00:CE:12:5B:DA:F7:66:32:92:D3:BE:23:64:BF:64:5C:86:B6:A6
Certificate issuer:       /CN=9f00ce125bdaf7663292d3be2364bf645c86b6a6
Certificate serial:       018F9428EB2F1CC4E88BED33B20C8714E50E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nwDOElva92YyktO-I2S_ZFyGtqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/9c17c4-67eb-4d78-ac7c-7aa939ad9fe0/1/nwDOElva92YyktO-I2S_ZFyGtqY.mft
Manifest number:          0869
Signing time:             Mon 20 May 2024 04:01:00 +0000
Manifest this update:     Mon 20 May 2024 04:01:00 +0000
Manifest next update:     Tue 21 May 2024 04:01:00 +0000
Files and hashes:         1: nwDOElva92YyktO-I2S_ZFyGtqY.crl (hash: vjadrc5FgnAAVRk9ZU71T11FSn8OyKI/Sf5bKtFXwIQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/9c17c4-67eb-4d78-ac7c-7aa939ad9fe0/1/nwDOElva92YyktO-I2S_ZFyGtqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/9c17c4-67eb-4d78-ac7c-7aa939ad9fe0/1/nwDOElva92YyktO-I2S_ZFyGtqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nwDOElva92YyktO-I2S_ZFyGtqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:94:28:eb:2f:1c:c4:e8:8b:ed:33:b2:0c:87:14:e5:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f00ce125bdaf7663292d3be2364bf645c86b6a6
        Validity
            Not Before: May 20 04:01:00 2024 GMT
            Not After : May 21 04:01:00 2024 GMT
        Subject: CN=7616a137d8233c593f2d3b4273523d308a535193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3d:fb:cf:7c:a5:54:79:05:a6:50:46:65:1f:
                    d4:31:53:1d:2a:5a:01:35:c6:3f:2a:81:48:87:18:
                    27:98:89:aa:4d:49:9f:bb:32:33:1c:85:6e:86:da:
                    cf:3c:32:2a:a4:ad:7a:2d:a7:84:b3:8a:88:92:94:
                    ee:75:2e:0e:7c:c9:80:4f:dd:94:de:ac:2e:74:05:
                    fe:01:cc:95:d1:f5:b8:75:34:41:61:b6:16:25:03:
                    c2:94:14:38:ca:13:7a:23:d5:b4:bf:26:a8:3d:09:
                    32:ce:52:70:7f:92:46:1a:e4:6e:f2:06:f5:e6:bf:
                    4c:09:d5:13:c5:a7:5a:6f:88:77:1b:6e:d6:4e:a5:
                    a7:b7:f4:3e:ff:0e:e2:70:22:de:99:5e:ba:65:07:
                    8b:62:2d:30:49:e8:b7:f2:44:a8:bc:c3:d4:36:e3:
                    1a:36:e5:4d:bd:ee:50:c9:83:bc:1a:a2:f7:d5:e3:
                    f3:09:d6:b6:6b:78:60:fa:0c:99:ed:ab:8b:19:2d:
                    91:b9:e9:31:a3:28:44:74:e1:c6:96:00:f4:ef:f7:
                    e2:b8:e9:78:f4:3b:40:fa:5c:72:14:1f:f8:b8:a6:
                    d3:a8:78:be:8a:83:95:2a:be:83:25:f4:35:e0:ae:
                    2e:cb:51:7e:c1:e8:9f:75:29:ce:21:2b:51:9d:c8:
                    c1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:16:A1:37:D8:23:3C:59:3F:2D:3B:42:73:52:3D:30:8A:53:51:93
            X509v3 Authority Key Identifier:
                keyid:9F:00:CE:12:5B:DA:F7:66:32:92:D3:BE:23:64:BF:64:5C:86:B6:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwDOElva92YyktO-I2S_ZFyGtqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9c17c4-67eb-4d78-ac7c-7aa939ad9fe0/1/nwDOElva92YyktO-I2S_ZFyGtqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9c17c4-67eb-4d78-ac7c-7aa939ad9fe0/1/nwDOElva92YyktO-I2S_ZFyGtqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:2e:5d:a4:71:0f:07:d5:95:ed:e4:74:d2:1e:8b:74:ac:5b:
         cd:cb:f3:78:40:05:d6:ae:43:57:17:aa:6e:f9:39:24:a6:10:
         c9:fa:c2:a5:9c:31:ef:c9:7a:33:a4:b4:84:11:c8:54:45:ec:
         76:03:d7:05:ae:6d:e3:a5:83:ca:5a:eb:15:36:ad:1d:ef:c5:
         c4:51:2b:84:4f:bf:fa:fc:ef:52:7a:b8:40:89:ef:c7:0c:34:
         ef:6d:a6:7d:02:ce:84:03:21:4b:d7:cd:32:25:8e:60:1f:b8:
         04:e3:80:fa:9e:e0:fa:0d:dd:b3:c1:0a:b3:61:c2:17:73:60:
         86:63:e8:45:6b:f3:87:89:a7:6c:32:8a:68:18:fc:f9:06:81:
         fd:ce:f9:ff:75:b7:08:a5:a5:68:02:79:e1:3a:9a:51:13:d1:
         96:7d:a4:63:94:70:12:7c:b0:43:ea:6c:7c:84:98:16:62:fa:
         1a:2e:cf:0b:f1:8c:e0:b3:a7:c2:6f:c2:f2:d2:a5:70:85:63:
         12:6d:72:dc:2c:0f:2e:b3:a2:da:0a:1f:28:99:c1:db:e9:36:
         41:c5:51:dc:dd:97:9a:e2:e6:71:3a:85:1f:d5:bf:2c:bd:0b:
         0a:d4:ed:53:d4:bf:ea:7c:54:e5:66:0f:01:87:c9:8a:27:bd:
         34:c1:63:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----