Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
File:                     GVc7IITN9G7hzNKC36O49rfqcmw.mft (raw, json)
Hash identifier:          V+QLden/nejQtJhdm7G85WWWGQPM6MmImx4yPiB+0Tk=
Subject key identifier:   09:98:3B:49:68:E6:74:A5:8A:EE:64:C1:4F:10:06:8F:3D:38:83:0D
Authority key identifier: 19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
Certificate issuer:       /CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
Certificate serial:       0193572D7598D653584B5910D91AD33F5D3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
Manifest number:          10B0
Signing time:             Sat 23 Nov 2024 04:00:17 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:17 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:17 +0000
Files and hashes:         1: GVc7IITN9G7hzNKC36O49rfqcmw.crl (hash: pJz3y8eT4EuZns18OnKMxxqW6Xfok9WiVneGQ/x5fwQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:75:98:d6:53:58:4b:59:10:d9:1a:d3:3f:5d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
        Validity
            Not Before: Nov 23 04:00:17 2024 GMT
            Not After : Nov 24 04:00:17 2024 GMT
        Subject: CN=09983b4968e674a58aee64c14f10068f3d38830d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ef:6f:4e:4b:e1:c9:99:75:52:44:78:db:68:
                    84:0a:b7:28:eb:88:3a:44:e1:27:3b:55:6e:a1:14:
                    d7:d6:de:5a:17:e3:f3:cb:62:59:e7:b0:33:89:c7:
                    dd:f5:f8:c9:8a:ef:fb:74:ee:e0:ed:ad:69:bf:be:
                    c8:ae:b4:b9:b5:b8:f3:0a:c4:f3:bb:8d:71:7d:66:
                    49:1c:6e:7c:ac:e6:78:6d:bc:e9:56:50:6f:5a:5d:
                    76:13:86:be:b6:95:ae:f7:3d:94:64:b2:85:02:47:
                    24:a2:c3:af:90:51:cb:a2:52:89:4d:9a:d2:0f:23:
                    ed:7f:7a:a8:30:91:c9:fa:4f:48:d0:36:27:ec:79:
                    f2:67:52:05:67:ef:91:78:54:0f:9c:d6:1b:27:0b:
                    5c:c5:f8:60:07:24:cd:41:60:ba:6e:7c:81:3e:1e:
                    59:14:48:b0:eb:48:f8:7c:a2:13:b3:ef:ec:92:dc:
                    c5:b3:40:63:25:ab:87:a3:6b:cd:06:59:ce:f6:b5:
                    30:cc:32:9b:8d:a7:47:a4:b2:3e:c0:6c:04:27:b5:
                    1e:2e:c1:5e:90:cb:ec:54:5f:e8:c0:e6:e0:b2:7a:
                    13:d3:e0:35:2c:27:b0:bb:fa:6c:e4:3f:ff:aa:5c:
                    eb:70:2a:dd:8a:e6:e0:f0:71:ae:a4:b6:e5:cb:94:
                    18:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:98:3B:49:68:E6:74:A5:8A:EE:64:C1:4F:10:06:8F:3D:38:83:0D
            X509v3 Authority Key Identifier:
                keyid:19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e8:3e:c1:8c:b1:88:e2:ec:19:f0:dc:98:28:62:6d:fb:de:
         16:bc:0b:5d:5e:d3:e2:a1:42:cd:71:c5:03:60:3a:c2:13:48:
         03:1e:f9:19:30:aa:68:7f:34:2c:01:26:f6:93:07:7c:60:67:
         d0:d6:d0:f8:b7:ba:4e:d6:59:5f:f5:4d:61:f5:0f:5a:5f:ae:
         cb:51:e0:e6:fe:7f:b1:6b:51:ac:fa:24:5a:16:6c:46:84:a7:
         89:59:c2:65:41:a5:e1:08:5e:c9:52:89:f7:06:46:6b:54:4c:
         7a:e7:27:c5:8f:cc:2a:c6:4b:fb:76:a0:83:f1:6a:2f:80:bd:
         79:03:ba:ff:58:06:c2:be:91:53:71:a3:0e:dc:e5:5a:5d:64:
         35:9a:a3:d9:0c:7f:d0:d6:da:98:22:2c:cd:3c:21:50:26:e6:
         61:54:0f:b3:94:c7:76:6c:ab:05:c3:d9:1f:ff:21:0f:fc:ee:
         46:82:c2:63:23:4b:08:e0:e4:1d:75:23:99:c0:13:64:15:9e:
         5d:be:f7:b0:8c:4d:1d:5d:b1:2a:2b:86:f6:8e:c4:21:cb:22:
         20:d4:38:99:a8:fd:c1:0a:bf:c5:77:76:13:70:5f:6d:da:11:
         12:88:b2:b8:dc:5a:a3:4c:36:7f:4c:43:82:2a:62:63:82:9c:
         5c:05:44:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----