Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
File:                     9V4Fkwjkaz074E0x_V4Q9U80OQw.mft (raw, json)
Hash identifier:          5eZebWY5PSIpuRtm002EPYhXDMBIQqt2YdRKFFl0W2M=
Subject key identifier:   95:B2:1B:95:87:A7:75:51:5B:D3:6D:E8:9D:6F:30:B1:F3:E5:00:76
Authority key identifier: F5:5E:05:93:08:E4:6B:3D:3B:E0:4D:31:FD:5E:10:F5:4F:34:39:0C
Certificate issuer:       /CN=f55e059308e46b3d3be04d31fd5e10f54f34390c
Certificate serial:       01940721B2112545A4A683A6FD147917D916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
Manifest number:          0328
Signing time:             Fri 27 Dec 2024 08:00:36 +0000
Manifest this update:     Fri 27 Dec 2024 08:00:36 +0000
Manifest next update:     Sat 28 Dec 2024 08:00:36 +0000
Files and hashes:         1: 9V4Fkwjkaz074E0x_V4Q9U80OQw.crl (hash: JB6i9hTiYfE5HwekE8M2F2NsysGwXtz5q1a+RONx57U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:21:b2:11:25:45:a4:a6:83:a6:fd:14:79:17:d9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55e059308e46b3d3be04d31fd5e10f54f34390c
        Validity
            Not Before: Dec 27 08:00:36 2024 GMT
            Not After : Dec 28 08:00:36 2024 GMT
        Subject: CN=95b21b9587a775515bd36de89d6f30b1f3e50076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d9:da:c1:cc:d1:af:c3:0c:80:c6:e0:91:f5:
                    ed:27:8c:88:94:ec:96:67:7b:59:0b:6f:3c:1b:bd:
                    16:b2:39:99:13:5d:f0:7b:b4:b4:d0:93:00:8b:c2:
                    9e:16:b5:d9:f4:68:ba:9c:83:ec:8d:b3:de:7e:15:
                    41:31:2c:1c:16:3f:68:d6:71:a6:03:55:2f:6f:02:
                    fd:54:01:9c:7b:11:45:2d:9c:29:04:0a:20:12:50:
                    a9:17:d9:40:7f:50:9d:b7:c1:cf:88:11:c7:56:5b:
                    80:7b:f3:ae:38:0d:de:cc:dd:bc:41:44:ad:a2:7e:
                    ec:0e:5b:90:d0:30:7c:9d:b5:d8:91:25:12:b2:d9:
                    f7:1d:48:a2:fb:bb:13:e7:05:19:66:fe:ae:14:b7:
                    e7:11:99:68:35:0a:76:24:51:b5:40:7c:0c:c6:e8:
                    9e:3a:f7:ab:4c:04:57:43:ec:fc:62:3c:d4:63:9e:
                    0a:28:26:7b:22:d9:84:31:2a:3d:68:25:ab:e9:f1:
                    1c:4f:13:e4:ec:0a:79:41:ec:b8:4a:6c:74:08:df:
                    58:20:76:7e:aa:76:af:47:d8:d3:0e:23:8a:b5:c1:
                    fb:24:53:0d:1b:92:8b:8d:f2:f9:6b:3d:c6:08:d6:
                    fd:d6:8f:42:dc:c5:7f:7b:06:b4:0a:b2:0b:bf:f8:
                    f8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B2:1B:95:87:A7:75:51:5B:D3:6D:E8:9D:6F:30:B1:F3:E5:00:76
            X509v3 Authority Key Identifier:
                keyid:F5:5E:05:93:08:E4:6B:3D:3B:E0:4D:31:FD:5E:10:F5:4F:34:39:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:02:63:c0:8e:38:61:b8:3b:2e:40:2b:d4:0d:ff:3e:88:f5:
         2a:86:a6:4a:d0:b7:76:33:ba:d3:a2:0c:21:96:a1:33:0c:c9:
         bc:90:f8:0a:d9:2b:d6:89:e7:28:cb:ed:c4:fb:44:19:05:9e:
         3d:aa:e1:12:55:fd:60:53:2c:aa:fc:82:01:da:71:ac:88:0d:
         39:eb:c1:41:46:d3:16:7b:a8:e3:f0:2e:25:ee:54:07:1b:91:
         cb:58:bc:2e:68:9c:4c:85:9f:80:c9:3e:1c:e9:91:32:8e:df:
         29:cf:47:9f:4c:ae:b3:fc:58:ae:39:5b:2a:d7:e2:51:76:68:
         27:b6:d0:6e:a2:fd:32:68:91:d3:79:c7:5f:df:c5:bd:ed:62:
         56:b1:94:4f:2c:77:21:16:6a:cf:9c:5b:96:bc:0a:6d:fb:c5:
         30:14:04:1d:27:49:86:ef:53:68:b6:4e:23:c3:29:9c:23:c7:
         43:12:53:26:b3:4e:6a:b4:5b:d9:97:b4:3e:3e:10:17:98:4f:
         6c:c9:f9:4f:f8:65:70:64:db:bf:45:20:1f:d9:18:1d:49:f0:
         4b:0a:4c:8a:a5:52:2c:73:04:20:dc:ec:ff:fe:79:a6:78:d1:
         fc:e7:39:19:3f:13:7b:33:42:6a:42:3e:93:67:af:11:bc:83:
         8a:71:32:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----