Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
File:                     nMHPS2otJ73LJqeD6Ddu5uspX9g.mft (raw, json)
Hash identifier:          r7atQmXkDZJbEw7LBw/dVQV1LIe4d/gjVaxkCbozdl0=
Subject key identifier:   9C:06:6A:56:28:44:40:31:D7:D6:33:DB:B3:5D:39:AE:BB:39:74:B7
Authority key identifier: 9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8
Certificate issuer:       /CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
Certificate serial:       0194C3878366D4341FC1F6E81E3E72B6597C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
Manifest number:          0A57
Signing time:             Sat 01 Feb 2025 22:00:25 +0000
Manifest this update:     Sat 01 Feb 2025 22:00:25 +0000
Manifest next update:     Sun 02 Feb 2025 22:00:25 +0000
Files and hashes:         1: nMHPS2otJ73LJqeD6Ddu5uspX9g.crl (hash: BSKR86vJTSHMjhjSp/zDvgvbIWNvZENlER+2iv7qZz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:87:83:66:d4:34:1f:c1:f6:e8:1e:3e:72:b6:59:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
        Validity
            Not Before: Feb  1 22:00:25 2025 GMT
            Not After : Feb  2 22:00:25 2025 GMT
        Subject: CN=9c066a5628444031d7d633dbb35d39aebb3974b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b6:52:74:d4:e7:ab:d6:36:1c:a4:a8:d3:5e:
                    07:53:d4:92:b1:8c:5d:ca:5b:ed:a0:5c:29:c4:32:
                    07:fc:de:33:27:ee:57:06:a0:ea:d2:c4:bc:21:2e:
                    33:96:67:be:11:ab:8f:ad:c9:c2:d0:4c:59:d7:1f:
                    9a:54:89:2f:51:62:d8:38:fb:76:14:31:6a:82:66:
                    e2:6d:eb:8e:af:87:97:af:13:b4:07:1c:3f:79:db:
                    a4:84:0f:77:fa:56:1b:2c:14:c6:2d:0f:01:de:a9:
                    03:06:29:e8:b5:ce:d9:1f:30:d0:fd:78:77:aa:4d:
                    92:b2:f8:bd:f7:39:a8:eb:42:e4:1f:48:68:bc:18:
                    fb:21:95:8b:cd:43:d4:ba:30:9e:0d:d5:d8:32:f0:
                    1f:1c:3e:36:e9:af:13:60:5b:0f:eb:87:c0:6f:d8:
                    24:89:fe:fe:d2:b2:42:2c:05:90:29:14:78:c2:bf:
                    b4:fb:30:c9:25:7a:f2:de:93:45:bc:5e:ae:40:6b:
                    c5:19:78:05:f2:77:27:50:65:27:35:27:5f:db:dc:
                    f8:f7:dd:cf:10:35:e0:cd:6c:26:5a:65:fd:30:24:
                    ce:24:97:47:aa:82:de:0c:e8:f7:45:d9:8b:89:87:
                    8a:df:bf:60:25:8e:79:74:2f:6b:05:36:89:6a:5c:
                    09:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:06:6A:56:28:44:40:31:D7:D6:33:DB:B3:5D:39:AE:BB:39:74:B7
            X509v3 Authority Key Identifier:
                keyid:9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:6e:86:3b:36:d7:30:12:ed:f0:81:d0:02:c7:f6:65:67:7f:
         83:76:91:c2:43:25:34:45:e1:d9:b4:d8:47:00:95:8f:2a:73:
         9d:98:25:43:2d:90:88:57:8c:5f:9d:4e:de:58:d8:90:51:cd:
         da:f1:fa:ea:71:3b:1c:a6:c6:1b:ef:62:ea:81:50:58:6e:d1:
         5c:48:12:c2:f6:4d:a5:59:6f:74:6a:40:3e:97:50:8f:44:d0:
         6a:a3:82:50:b0:f0:45:3f:88:21:a7:07:57:c0:e1:5e:89:f8:
         c8:eb:54:58:08:62:02:94:5a:ac:a8:ef:07:67:f1:83:40:fd:
         ee:f5:c2:e8:3a:6a:dd:ed:ab:50:ad:48:5b:ca:58:d2:54:af:
         ce:4a:bb:3d:ef:43:dc:50:f0:e0:2c:78:34:0e:68:53:1d:7e:
         13:6c:e7:7c:32:88:c1:be:65:c4:ba:8f:71:cb:5e:5c:1d:dc:
         d3:bf:9a:7b:bc:73:b4:70:53:f7:b9:41:ca:f0:18:48:6e:16:
         e8:43:c8:09:4f:c2:ad:5a:11:68:1d:54:dc:62:e9:e5:5d:1b:
         6d:e6:08:16:76:4a:e0:58:ef:8b:a9:e8:da:0a:02:f5:45:f4:
         1b:e2:cc:be:ad:cd:4d:7e:6a:85:c3:38:ed:52:92:6f:09:36:
         dd:03:36:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:38 2025 by rpki-client