Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
File:                     n9e3i11VWv7XZxyRbCbrf_x-LJo.mft (raw, json)
Hash identifier:          LfRhfrJkcyF0QWs0ECyjj9/3PvfdRhZoQQqhOc6CzfI=
Subject key identifier:   B1:41:A7:65:4A:F3:AE:E3:88:54:C4:25:05:E1:40:93:96:A7:88:5A
Authority key identifier: 9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A
Certificate issuer:       /CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a
Certificate serial:       019511A2CFC0DB370A6D3D1280EAD73CF101
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
Manifest number:          0352
Signing time:             Mon 17 Feb 2025 02:00:37 +0000
Manifest this update:     Mon 17 Feb 2025 02:00:37 +0000
Manifest next update:     Tue 18 Feb 2025 02:00:37 +0000
Files and hashes:         1: n9e3i11VWv7XZxyRbCbrf_x-LJo.crl (hash: wBLL1MM7Pzy1YJbBLUkoekUt0LHXgLVyz7bU5DlDKvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:a2:cf:c0:db:37:0a:6d:3d:12:80:ea:d7:3c:f1:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a
        Validity
            Not Before: Feb 17 02:00:37 2025 GMT
            Not After : Feb 18 02:00:37 2025 GMT
        Subject: CN=b141a7654af3aee38854c42505e1409396a7885a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:22:9a:a2:cb:ee:9c:75:74:6d:d2:cd:ba:96:
                    5f:5d:bb:2d:98:97:2e:13:57:f6:cb:53:33:6d:83:
                    7f:36:10:7f:ca:0c:2b:bf:e3:94:bc:5c:ad:5f:4b:
                    84:ad:6c:76:83:52:42:2b:f3:87:3d:f6:78:36:89:
                    97:20:6a:49:b3:55:05:67:42:43:3c:ed:6b:0b:fb:
                    a8:db:c6:ed:ea:15:ab:bd:38:3b:fb:d0:79:4d:0f:
                    01:06:3f:59:33:6b:9c:c1:42:fa:e9:07:3d:7b:61:
                    a9:59:6f:06:71:91:11:e0:b7:b9:bc:37:0f:c2:e9:
                    7a:d1:ec:e5:7b:aa:38:4e:ef:19:d4:d2:60:86:b7:
                    ec:9e:4b:9c:2e:69:9f:76:00:f0:0a:52:06:40:c2:
                    cb:f9:c8:4c:bc:c6:d7:21:ae:3f:48:4a:3a:6c:86:
                    fd:61:f2:38:e3:05:f1:e1:e8:33:8d:9e:71:38:18:
                    da:77:9e:a4:8a:2e:0d:48:cb:f5:4c:59:7b:4b:ed:
                    dd:f3:ec:3b:22:ac:36:91:d2:c7:f7:d3:86:b1:0c:
                    0a:c7:0c:3b:54:45:0d:e3:bb:3e:cf:1e:a2:33:e2:
                    dd:26:23:99:7f:37:95:40:7e:15:31:3b:a0:67:04:
                    b6:03:4a:14:df:dd:48:cf:83:2c:0b:2e:89:af:79:
                    76:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:41:A7:65:4A:F3:AE:E3:88:54:C4:25:05:E1:40:93:96:A7:88:5A
            X509v3 Authority Key Identifier:
                keyid:9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:c6:ef:39:bc:90:c2:22:16:d7:5b:f2:67:88:eb:b7:82:3a:
         ce:2d:b3:bb:79:d9:96:e6:a6:c6:32:60:ae:44:f9:0a:f4:dc:
         9c:c8:3b:d2:45:b0:1f:41:c4:64:76:29:58:48:6d:31:6c:25:
         4b:c6:ef:07:e7:a7:dc:d5:3f:88:db:94:19:b7:53:21:b4:6e:
         d7:6e:1b:46:7c:40:59:60:b2:22:9b:06:ce:a8:5b:30:1a:f4:
         d4:50:03:3a:bf:4a:64:93:04:8c:b7:d4:93:e3:c5:9f:27:a8:
         ba:48:62:8e:ce:13:3c:f2:9b:b3:b0:d7:16:ee:67:b7:48:84:
         18:66:ad:09:d9:66:2f:34:4e:9a:75:7b:c3:e9:fa:f7:a2:0f:
         23:3d:1c:d2:8f:66:37:da:18:b3:f8:e5:28:90:08:ed:f5:cc:
         cf:72:dc:68:17:07:88:46:9d:fd:fa:f9:00:72:61:ab:d8:fe:
         44:b1:c2:c5:9d:e1:71:a0:77:53:48:b7:72:ad:62:35:27:66:
         44:74:e3:3f:aa:5c:d8:15:ea:e6:17:6d:57:f0:85:e5:b1:98:
         3d:04:14:7c:4c:17:74:1d:59:75:7f:db:e2:44:01:03:53:73:
         93:1a:cc:c5:ed:ee:c9:ba:b3:d1:9c:fe:8c:6b:0f:f9:fa:30:
         0a:f6:27:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----