Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
File:                     0WKatyzbkDPuVW45m_UiY9WqWkY.mft (raw, json)
Hash identifier:          Jrdi6qrsgzVS/oE0Wb2mcuTJJ/KCoRlE1lWoc1/ttSg=
Subject key identifier:   3C:FF:1B:B6:51:EB:D2:24:B8:3C:97:31:60:09:23:BE:53:64:72:C5
Authority key identifier: D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
Certificate issuer:       /CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Certificate serial:       019406EAF849F768C0C7D9832E7AC94732CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
Manifest number:          1103
Signing time:             Fri 27 Dec 2024 07:00:49 +0000
Manifest this update:     Fri 27 Dec 2024 07:00:49 +0000
Manifest next update:     Sat 28 Dec 2024 07:00:49 +0000
Files and hashes:         1: 0WKatyzbkDPuVW45m_UiY9WqWkY.crl (hash: dMiZGM9HGGRTr4W5kiA2Z9YYswK+tE9TzHrDdF5RWK8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:ea:f8:49:f7:68:c0:c7:d9:83:2e:7a:c9:47:32:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
        Validity
            Not Before: Dec 27 07:00:49 2024 GMT
            Not After : Dec 28 07:00:49 2024 GMT
        Subject: CN=3cff1bb651ebd224b83c9731600923be536472c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:70:97:a4:d6:80:4e:0d:1a:dc:28:fe:e9:72:
                    6f:ec:75:39:07:42:ea:4d:9f:dc:86:e0:2e:34:94:
                    74:14:01:8a:96:20:53:a7:d1:31:44:bf:14:78:38:
                    7d:8b:c2:15:ea:ff:3a:39:fc:6c:40:1a:33:6f:3e:
                    c3:b1:15:22:92:ad:8d:39:b7:1a:ee:20:7e:c6:3a:
                    d3:5a:e9:85:12:eb:a9:cc:a5:70:51:d6:57:04:7d:
                    58:de:51:04:33:95:57:d9:ec:e7:19:12:bd:a1:dc:
                    8f:7c:42:c2:ae:ac:ee:25:a8:38:4e:75:66:d3:59:
                    34:e8:3b:87:62:09:c7:ca:ad:ed:08:14:ce:d9:15:
                    a4:f7:d7:cc:12:d3:0c:ba:28:7a:63:8d:21:3b:7d:
                    34:f5:ba:44:23:cf:5e:af:a2:fb:c4:61:0b:f3:09:
                    80:f7:2c:7c:0b:c8:3f:09:85:98:43:6f:bf:ac:20:
                    ba:b7:42:e3:70:e0:6b:48:da:97:b3:61:f2:0e:de:
                    5f:da:60:24:9c:90:6d:36:e6:b5:fb:d0:49:80:4c:
                    04:7f:57:b9:28:92:4e:9e:b1:9b:64:b7:3f:5f:17:
                    26:e1:eb:14:e6:c8:2f:c9:b3:de:7f:be:9b:76:54:
                    70:cc:24:27:58:fd:d6:c5:5b:b8:69:70:38:96:a7:
                    b0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FF:1B:B6:51:EB:D2:24:B8:3C:97:31:60:09:23:BE:53:64:72:C5
            X509v3 Authority Key Identifier:
                keyid:D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:e5:f8:90:ba:0a:6a:9d:8e:44:60:a0:93:33:51:86:3b:5b:
         49:71:df:38:db:b6:e2:6a:e6:68:f5:81:45:68:63:64:6f:66:
         5f:d6:a0:0d:b6:2b:b5:da:58:82:55:1c:69:13:7d:91:ab:7f:
         d7:c7:ca:13:5e:19:1e:15:34:3c:5c:66:88:a7:0d:50:0b:eb:
         28:e2:23:c3:3d:f0:d6:e3:07:f4:8c:a7:f8:89:13:8a:70:af:
         80:31:b5:22:06:a3:b9:18:b3:38:c9:57:59:41:97:cd:cb:58:
         a9:43:dc:89:e8:84:18:53:8d:d0:84:48:2b:66:19:81:53:a7:
         46:85:1a:49:ed:e3:db:da:a0:5b:06:25:24:25:00:11:9c:6d:
         8a:f1:40:01:4f:dc:be:8c:80:9c:13:a9:0e:c7:29:e3:1b:70:
         07:51:18:fd:be:32:88:0a:9f:2f:d6:6c:f7:92:d7:06:23:8f:
         d0:d6:d3:6e:90:80:74:15:e0:03:2d:23:7d:d8:dd:b7:45:8d:
         94:58:34:5b:8d:c9:53:89:72:f9:b4:f9:4e:b0:f7:5f:95:a2:
         d5:e3:21:68:bd:40:b4:17:4c:95:bc:6f:64:e8:d9:f9:12:f6:
         7a:21:48:14:6d:e2:46:27:70:fd:07:e5:5d:ac:b9:c8:fc:87:
         d7:c9:bd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----