Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft
File:                     gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft (raw, json)
Hash identifier:          I2akWK674YqLSrPthhsF4ScvzbvrmnoDOdSnqWicUFc=
Subject key identifier:   58:B3:26:8A:0B:A8:B3:B4:83:21:5D:2D:45:0B:34:B6:0A:7F:8A:7C
Authority key identifier: 81:A3:6C:67:E9:A2:35:39:C8:15:3A:98:34:EF:83:E5:C1:8E:6B:72
Certificate issuer:       /CN=81a36c67e9a23539c8153a9834ef83e5c18e6b72
Certificate serial:       0191F9A2B1A3FB4CB894C593A86D55CB6BC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gaNsZ-miNTnIFTqYNO-D5cGOa3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft
Manifest number:          0103
Signing time:             Mon 16 Sep 2024 07:01:14 +0000
Manifest this update:     Mon 16 Sep 2024 07:01:14 +0000
Manifest next update:     Tue 17 Sep 2024 07:01:14 +0000
Files and hashes:         1: gaNsZ-miNTnIFTqYNO-D5cGOa3I.crl (hash: CIrQ/AA09g7EBeBL7wXputu8HcfvXhJ2alXoaVWR/4s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gaNsZ-miNTnIFTqYNO-D5cGOa3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:b1:a3:fb:4c:b8:94:c5:93:a8:6d:55:cb:6b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81a36c67e9a23539c8153a9834ef83e5c18e6b72
        Validity
            Not Before: Sep 16 07:01:14 2024 GMT
            Not After : Sep 17 07:01:14 2024 GMT
        Subject: CN=58b3268a0ba8b3b483215d2d450b34b60a7f8a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:57:aa:80:c0:79:9a:ca:26:73:0e:35:32:be:
                    e6:23:78:1e:e0:b9:3c:83:e2:9d:ea:0f:3a:aa:e2:
                    1a:01:d6:63:f3:c8:fa:3c:0e:15:23:f4:b7:a3:4a:
                    c7:75:e7:6d:ae:76:29:b3:a9:0e:08:2a:d1:ff:97:
                    da:fc:3a:c8:b8:6b:e9:76:68:8e:c9:07:e7:0e:a0:
                    ab:0c:eb:b2:60:6d:1c:7f:cf:7c:e8:d2:88:2f:92:
                    98:20:74:77:36:17:d8:04:55:18:c2:5c:73:6a:6e:
                    23:38:d9:3a:86:4c:8d:57:74:d3:e3:02:67:38:e9:
                    b3:a3:21:88:22:9c:29:33:e9:9e:a9:5f:9c:71:01:
                    28:ca:a7:d4:61:80:90:b5:d8:b1:47:48:86:69:7b:
                    84:4c:c5:a8:98:e8:24:c2:5f:50:84:f3:85:36:d9:
                    45:4f:f6:1f:78:81:a6:3d:0f:ad:a1:ab:31:6b:2e:
                    68:fe:93:52:d4:b0:9a:53:53:fd:89:32:f9:8d:58:
                    ca:ec:a2:4c:b3:06:da:6f:7e:29:c0:55:e3:45:27:
                    f0:94:89:70:ea:63:97:58:ea:c9:2a:e6:29:b9:21:
                    47:9b:8a:98:2f:f6:a5:84:53:98:aa:e2:b6:73:8d:
                    1d:02:f7:32:e9:91:14:a2:03:a5:42:c7:e4:37:88:
                    fc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B3:26:8A:0B:A8:B3:B4:83:21:5D:2D:45:0B:34:B6:0A:7F:8A:7C
            X509v3 Authority Key Identifier:
                keyid:81:A3:6C:67:E9:A2:35:39:C8:15:3A:98:34:EF:83:E5:C1:8E:6B:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaNsZ-miNTnIFTqYNO-D5cGOa3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:47:e4:3d:cc:82:ba:b1:ef:cb:07:a4:8a:77:16:dd:67:9e:
         c9:ec:5a:11:aa:50:a7:2d:d8:d4:eb:2c:c3:fa:4d:e8:74:1c:
         8a:2d:38:49:3f:e1:96:85:d4:60:63:92:40:d0:8c:81:f4:6a:
         ea:89:05:1a:11:8b:8c:64:7f:18:7c:06:57:04:57:c2:26:f4:
         f3:ad:12:f2:26:51:fe:3c:94:e2:b7:2b:8c:70:61:37:81:f4:
         95:bb:b3:29:b2:77:13:f0:32:7d:8f:90:46:08:f6:b8:bf:1e:
         2a:90:42:b7:c6:36:94:18:42:44:21:ad:65:cb:ed:48:65:1c:
         fc:68:f0:89:ba:fe:34:8e:2f:9b:8e:d3:68:58:bb:d1:14:0e:
         af:af:fc:db:6f:19:3a:92:d6:2c:8a:a3:dd:01:fe:e6:49:66:
         02:fa:70:10:28:32:86:5d:a0:a8:5b:91:a5:cc:6d:17:1e:77:
         06:74:8b:63:13:27:61:62:f8:3d:de:8a:ab:f5:cc:6d:1b:4a:
         f3:cc:46:8c:9f:b0:9f:e6:b2:95:2f:5d:d7:0a:d6:f5:11:7f:
         77:57:25:e0:15:73:04:bd:7c:db:37:7c:a9:55:27:8c:c2:39:
         cc:cd:a8:29:c2:52:5a:9e:84:9a:79:36:29:af:93:9b:cc:18:
         f5:ab:59:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----