Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft
File:                     gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft (raw, json)
Hash identifier:          Z5aAfSAnBVSpUnvbuMUcXE0Or2ell9aqIN4cqKwdyMo=
Subject key identifier:   49:0A:95:9C:B2:7C:BA:92:EA:5A:D2:FA:3E:E7:D3:8E:6C:9F:6F:DB
Authority key identifier: 81:A3:6C:67:E9:A2:35:39:C8:15:3A:98:34:EF:83:E5:C1:8E:6B:72
Certificate issuer:       /CN=81a36c67e9a23539c8153a9834ef83e5c18e6b72
Certificate serial:       01936A7D6E1423A8172148090459DD00443F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gaNsZ-miNTnIFTqYNO-D5cGOa3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft
Manifest number:          01C2
Signing time:             Tue 26 Nov 2024 22:00:25 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:25 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:25 +0000
Files and hashes:         1: gaNsZ-miNTnIFTqYNO-D5cGOa3I.crl (hash: RcWL1OMJAJMcqNrmRHMLAMDVClAY3WopKyXx6AQGEbE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gaNsZ-miNTnIFTqYNO-D5cGOa3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:6e:14:23:a8:17:21:48:09:04:59:dd:00:44:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81a36c67e9a23539c8153a9834ef83e5c18e6b72
        Validity
            Not Before: Nov 26 22:00:25 2024 GMT
            Not After : Nov 27 22:00:25 2024 GMT
        Subject: CN=490a959cb27cba92ea5ad2fa3ee7d38e6c9f6fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:67:01:64:4a:40:07:83:6c:d5:9e:12:82:8f:
                    3d:5e:9e:86:7c:f6:3b:8d:ca:03:1a:f0:49:13:64:
                    a1:32:85:60:2b:cf:8f:a8:83:65:fe:06:9b:8e:f9:
                    19:73:d0:d0:4c:e7:2e:e3:21:55:b1:1e:cc:2a:e4:
                    1f:9c:bd:b4:0a:70:9b:9e:0b:aa:b9:68:39:13:cf:
                    83:94:a6:c6:ab:ea:a9:bc:9b:23:95:e3:33:2e:ea:
                    b3:d3:d1:f7:86:e5:f9:23:86:21:7c:0e:64:5c:c6:
                    ea:de:8c:ce:06:f8:f3:0c:ae:72:ce:9c:50:d6:bc:
                    71:77:45:3a:ae:8a:3c:a5:16:bf:2e:9f:8c:d3:eb:
                    f0:62:e1:a6:ab:28:b6:c2:f3:6f:1c:91:11:9d:f4:
                    96:cd:bc:cf:47:0c:bb:e2:7f:dc:2d:58:b8:98:5d:
                    fa:16:9b:9a:c6:48:86:c8:7a:a4:b5:38:9d:bc:1a:
                    bc:b2:24:2b:1d:1d:fd:13:91:5a:b9:3b:02:c1:fe:
                    f0:89:df:e3:f8:5a:94:07:23:7e:df:a0:72:7f:0b:
                    82:42:0e:c3:b3:e4:ec:f2:f3:60:98:14:b1:1b:36:
                    44:68:5c:41:44:2b:62:6c:9e:a1:42:d5:dc:8d:c7:
                    42:93:5e:61:f4:ff:c9:d1:be:33:49:d0:bb:94:70:
                    45:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0A:95:9C:B2:7C:BA:92:EA:5A:D2:FA:3E:E7:D3:8E:6C:9F:6F:DB
            X509v3 Authority Key Identifier:
                keyid:81:A3:6C:67:E9:A2:35:39:C8:15:3A:98:34:EF:83:E5:C1:8E:6B:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaNsZ-miNTnIFTqYNO-D5cGOa3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:6a:e1:78:38:c7:55:8b:0f:82:90:67:3e:b7:72:e3:64:9c:
         5a:70:2e:3e:f8:18:b8:06:77:b6:68:26:a3:b2:42:32:70:21:
         8b:16:a4:ef:19:33:31:a7:0f:81:b4:4a:64:33:e2:44:ac:90:
         e4:79:e3:b3:21:4e:00:68:1a:0f:cd:fe:5e:94:38:3e:6b:f8:
         8d:00:35:e4:c2:e9:61:47:01:50:06:a9:38:17:dc:69:31:f0:
         3d:86:8b:2f:f3:be:2f:79:44:f5:93:9e:f5:e8:77:a9:bd:54:
         08:5d:1a:dc:ae:78:1a:cb:98:14:7e:7f:61:ef:55:12:cf:cd:
         8f:7e:d2:e2:40:8b:86:ea:86:94:2a:0d:64:57:4e:08:fa:6b:
         46:e4:6f:4d:cd:a8:cc:e8:ea:3b:d7:cd:f4:dc:65:43:5f:06:
         2c:14:e8:3e:8f:9f:ba:27:44:32:77:01:f2:94:f8:30:70:9b:
         ab:df:db:94:05:7a:3a:2c:46:10:24:7f:be:e9:59:38:7a:bc:
         2a:66:55:97:49:ef:fa:ff:e0:13:a9:49:9a:a3:60:08:ff:e2:
         37:43:e2:af:4d:cc:e6:9f:7a:ed:d2:5e:2c:89:0d:24:9a:f2:
         97:26:33:48:9b:4c:b5:04:94:4b:bc:e9:4e:cc:29:e0:51:76:
         0b:6d:25:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----