Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/19af62-56d7-453c-b69f-77e19e60c328/1/v9aef9UBKJF3mCF6xh-OgrH6FOs.mft
File:                     v9aef9UBKJF3mCF6xh-OgrH6FOs.mft (raw, json)
Hash identifier:          V2xLZq9VbdiLHHNqm1BuxzR0eyv2c2fxzt1BfbC2RyE=
Subject key identifier:   14:CD:2C:11:55:6B:E7:1A:24:7B:18:0E:ED:E8:C7:0A:78:68:F5:D0
Authority key identifier: BF:D6:9E:7F:D5:01:28:91:77:98:21:7A:C6:1F:8E:82:B1:FA:14:EB
Certificate issuer:       /CN=bfd69e7fd50128917798217ac61f8e82b1fa14eb
Certificate serial:       01936AEB709F2B59665E985E7520BEB3C9BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9aef9UBKJF3mCF6xh-OgrH6FOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/19af62-56d7-453c-b69f-77e19e60c328/1/v9aef9UBKJF3mCF6xh-OgrH6FOs.mft
Manifest number:          02FD
Signing time:             Wed 27 Nov 2024 00:00:34 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:34 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:34 +0000
Files and hashes:         1: v9aef9UBKJF3mCF6xh-OgrH6FOs.crl (hash: fbQO/71AWXU3RgDal3wxlEumqLmgC8Ykx97bwakpj2M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/19af62-56d7-453c-b69f-77e19e60c328/1/v9aef9UBKJF3mCF6xh-OgrH6FOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/19af62-56d7-453c-b69f-77e19e60c328/1/v9aef9UBKJF3mCF6xh-OgrH6FOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9aef9UBKJF3mCF6xh-OgrH6FOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:70:9f:2b:59:66:5e:98:5e:75:20:be:b3:c9:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd69e7fd50128917798217ac61f8e82b1fa14eb
        Validity
            Not Before: Nov 27 00:00:34 2024 GMT
            Not After : Nov 28 00:00:34 2024 GMT
        Subject: CN=14cd2c11556be71a247b180eede8c70a7868f5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:67:c7:a2:cd:aa:f4:92:73:4f:9c:e9:0d:b0:
                    51:7c:2d:a6:a2:4c:c0:08:8c:67:87:42:ed:2f:73:
                    69:29:a8:4e:76:d0:78:11:0e:5e:b1:d1:38:ae:58:
                    ef:5a:5c:3f:7a:c7:d9:41:62:70:4f:28:75:5a:c2:
                    e8:3b:49:94:09:37:8b:27:e8:a5:17:37:47:e0:ec:
                    f3:5c:44:5d:5d:e2:62:cb:4f:40:85:9b:83:38:fe:
                    4c:aa:89:d0:cf:b4:a0:e6:a9:c1:34:e8:5f:ba:40:
                    00:81:67:76:5e:1b:56:ee:9b:ba:90:c8:5a:fa:75:
                    13:39:f9:c1:f7:5f:af:fe:a2:99:e1:75:ea:8a:d4:
                    38:d0:1f:c6:a0:ce:40:11:99:10:64:15:b3:5e:0b:
                    27:86:5f:6e:d8:2d:8a:96:27:67:c7:7f:53:62:4b:
                    36:f9:b8:eb:65:e8:cc:6d:ec:1b:45:22:f0:da:b4:
                    4e:be:da:a4:86:c8:10:ee:08:f4:5e:46:1b:b5:26:
                    3c:9e:36:b6:81:01:21:8c:cb:37:04:84:67:aa:a7:
                    7b:84:4d:9c:68:ef:38:06:ad:c8:26:4d:4e:fd:76:
                    dc:dd:3e:61:e3:8d:72:09:d5:2e:c8:7c:91:16:35:
                    45:b2:0d:a4:f9:f4:37:1c:e7:dd:1d:ae:d7:b9:d5:
                    ab:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CD:2C:11:55:6B:E7:1A:24:7B:18:0E:ED:E8:C7:0A:78:68:F5:D0
            X509v3 Authority Key Identifier:
                keyid:BF:D6:9E:7F:D5:01:28:91:77:98:21:7A:C6:1F:8E:82:B1:FA:14:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9aef9UBKJF3mCF6xh-OgrH6FOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/19af62-56d7-453c-b69f-77e19e60c328/1/v9aef9UBKJF3mCF6xh-OgrH6FOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/19af62-56d7-453c-b69f-77e19e60c328/1/v9aef9UBKJF3mCF6xh-OgrH6FOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:41:15:c0:bb:01:77:7e:4c:2f:22:c2:1b:de:26:74:4b:bb:
         38:eb:5f:83:4e:ed:42:26:b5:90:9f:40:b0:d1:51:72:5f:e0:
         68:59:14:cd:9b:a4:9f:23:4e:61:7a:5d:ab:3e:8b:51:31:67:
         6c:6b:07:77:4a:81:39:99:9c:84:08:59:c7:c9:41:1d:d4:b7:
         d0:92:4c:00:e6:7d:95:ae:9d:ae:77:fd:97:02:21:0c:95:2d:
         66:6e:6a:cd:08:4e:30:ef:5b:43:17:b2:d0:27:3a:6d:33:c1:
         d0:66:a8:1f:a5:33:61:b9:62:35:68:44:77:36:02:35:b0:58:
         53:87:34:d3:66:79:79:b5:59:a0:42:ac:b8:68:c8:41:3d:ff:
         17:f8:2c:c2:ae:ed:9e:06:05:63:0c:58:b0:1a:9d:bc:06:96:
         04:fe:e5:bc:da:3d:06:15:88:26:83:aa:8a:6f:87:47:45:87:
         46:db:c5:81:a8:6f:be:55:fd:43:d3:e0:de:a0:ca:bc:56:d2:
         eb:b3:36:c1:d2:b2:21:f5:62:8b:fc:3d:f4:85:18:d5:50:25:
         5e:23:90:e2:c3:cc:32:ae:ae:77:56:89:48:88:3d:89:40:7f:
         0b:aa:82:b9:bf:26:0a:bf:bc:6f:5e:68:45:52:c2:2f:02:bf:
         47:74:e3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----