Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.mft
File:                     OFYFj7mk9--XizgCGuFSwk6_zkA.mft (raw, json)
Hash identifier:          zPAogGAU2N/3JlqEqogRs4IgwbP44G1rEERlgigXQdI=
Subject key identifier:   24:88:E0:34:57:3D:18:FE:8C:0F:CC:C0:50:3F:51:EA:09:A1:EA:46
Authority key identifier: 38:56:05:8F:B9:A4:F7:EF:97:8B:38:02:1A:E1:52:C2:4E:BF:CE:40
Certificate issuer:       /CN=3856058fb9a4f7ef978b38021ae152c24ebfce40
Certificate serial:       019354D12CFC42AFB444882DE9A1E1C012E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OFYFj7mk9--XizgCGuFSwk6_zkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.mft
Manifest number:          76
Signing time:             Fri 22 Nov 2024 17:00:14 +0000
Manifest this update:     Fri 22 Nov 2024 17:00:14 +0000
Manifest next update:     Sat 23 Nov 2024 17:00:14 +0000
Files and hashes:         1: OFYFj7mk9--XizgCGuFSwk6_zkA.crl (hash: HyF2a1sbHOp+1LJKK1uG4+/xEWXMLjgnbTgZTXCvOIo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OFYFj7mk9--XizgCGuFSwk6_zkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:d1:2c:fc:42:af:b4:44:88:2d:e9:a1:e1:c0:12:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3856058fb9a4f7ef978b38021ae152c24ebfce40
        Validity
            Not Before: Nov 22 17:00:14 2024 GMT
            Not After : Nov 23 17:00:14 2024 GMT
        Subject: CN=2488e034573d18fe8c0fccc0503f51ea09a1ea46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cc:bc:40:ce:7b:97:6b:8e:7e:26:50:31:e8:
                    03:3f:ce:b2:5c:cd:cb:3d:05:0e:25:70:95:f3:62:
                    05:8c:f7:5c:05:a3:f3:7b:dc:30:c5:49:18:e9:1a:
                    bc:93:5b:20:b9:90:62:83:7a:39:4c:6d:7a:14:b6:
                    bd:e5:20:93:fd:85:3b:a7:a9:d7:64:f3:8d:85:e5:
                    47:1c:44:21:3d:ed:d8:4b:02:3a:34:fa:c9:a6:05:
                    03:19:c2:e0:c2:0f:58:12:5b:62:b9:03:5d:65:90:
                    e4:6a:bc:f6:21:62:29:a1:de:e3:a4:f8:a6:4e:ea:
                    c0:f0:bd:0a:c0:ac:bb:f7:f2:92:28:74:e4:95:8b:
                    92:55:b4:c4:44:a4:62:d9:ff:22:1d:bd:b6:21:28:
                    e7:4c:42:e1:6d:d0:46:cf:b8:07:d1:a0:cc:bb:5c:
                    68:58:08:c5:35:78:09:bf:9e:8b:93:7f:0f:ef:e4:
                    6f:07:b9:48:d9:0d:5c:75:37:36:55:8e:ef:a4:10:
                    9d:7e:0b:3f:fd:79:e4:3b:b5:be:e0:c5:bb:fe:85:
                    19:bf:f3:e9:3a:58:66:ae:93:d7:47:93:f6:4d:17:
                    7f:ee:b6:08:05:44:1a:e3:5e:2f:37:c8:e1:01:4b:
                    df:f6:dd:f0:01:4a:51:26:3f:e2:10:56:3c:c0:64:
                    49:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:88:E0:34:57:3D:18:FE:8C:0F:CC:C0:50:3F:51:EA:09:A1:EA:46
            X509v3 Authority Key Identifier:
                keyid:38:56:05:8F:B9:A4:F7:EF:97:8B:38:02:1A:E1:52:C2:4E:BF:CE:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFYFj7mk9--XizgCGuFSwk6_zkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:56:49:20:4b:e4:84:e2:ca:c4:33:4c:b1:5b:ce:a7:e2:d0:
         40:38:40:e9:c4:91:4e:d6:1d:5e:d8:e6:e7:68:24:b1:ed:c5:
         f5:6c:09:62:54:28:10:b4:97:8a:18:1d:88:35:72:88:79:36:
         bd:14:4a:ba:fb:2b:e6:02:5e:73:8c:c0:82:ca:e3:23:b1:a1:
         40:7a:a3:66:bd:f5:43:4a:4f:a9:f3:60:38:b7:39:ea:b1:4a:
         c9:7c:15:40:67:20:97:4f:47:60:7d:7e:21:26:b9:d3:71:da:
         28:ed:92:ee:be:cb:d2:d8:57:db:67:b7:fb:f9:dc:95:03:8a:
         5a:dc:93:68:0c:cb:4b:36:bc:19:a1:25:b5:3b:78:13:9d:ff:
         ed:de:5d:0c:85:d2:1e:02:df:fb:37:48:02:85:3d:e7:cc:76:
         57:e7:46:85:3f:ea:7e:26:a7:d6:19:30:25:04:ec:b7:5b:25:
         77:00:69:05:3b:19:b3:9a:41:de:d0:a2:05:19:b3:ea:c3:30:
         c6:60:94:a0:30:c7:03:9d:32:38:c2:c2:33:c0:57:a8:78:35:
         71:d3:0a:89:e2:4a:68:45:38:4a:be:97:ba:f3:3a:96:73:7c:
         ab:75:d3:3f:b5:e8:36:18:c8:9c:20:5e:93:72:85:0f:6a:e5:
         5f:3b:4d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----