Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
File:                     V9minRgOgZpHgvtsbqFtOn0ykQA.mft (raw, json)
Hash identifier:          cT+SnwyAlGefmYcAvahx6aH6AHUuzyE56ptbTKPozJM=
Subject key identifier:   FE:5E:5A:11:F4:32:D9:7E:F2:12:06:D9:FF:67:C7:8C:05:66:66:D3
Authority key identifier: 57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00
Certificate issuer:       /CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
Certificate serial:       0193568A5AD69D34A601587592A468909F8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
Manifest number:          0586
Signing time:             Sat 23 Nov 2024 01:02:07 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:07 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:07 +0000
Files and hashes:         1: V9minRgOgZpHgvtsbqFtOn0ykQA.crl (hash: bnHu2c0ceSPQr020lqgUmJx5wYZGK/ffEMTd8p8WbvU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:5a:d6:9d:34:a6:01:58:75:92:a4:68:90:9f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
        Validity
            Not Before: Nov 23 01:02:07 2024 GMT
            Not After : Nov 24 01:02:07 2024 GMT
        Subject: CN=fe5e5a11f432d97ef21206d9ff67c78c056666d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:28:0c:ae:c2:c2:48:f7:83:24:8b:8d:d0:28:
                    a9:ab:68:85:2f:40:2a:e5:49:ee:67:c4:61:40:55:
                    cc:4f:55:da:12:71:d9:00:fd:19:71:64:d6:77:44:
                    af:13:5e:ca:24:e1:6d:11:a6:8b:01:f9:e3:43:a6:
                    76:0b:22:ee:36:b0:f2:b7:60:a7:e6:de:ef:9b:35:
                    07:39:f3:b5:29:bb:25:0e:25:db:46:2c:1f:4f:9d:
                    c9:6a:ca:96:4d:8d:ac:0e:90:2a:47:2a:af:aa:10:
                    04:db:fd:8e:97:98:eb:b3:a0:43:b2:a7:69:40:3f:
                    30:e0:15:c1:9c:e6:b8:20:5a:05:c0:5e:ab:15:c0:
                    c1:e5:7d:92:9d:ca:5e:91:11:c7:d4:f4:8b:11:1b:
                    52:74:3e:01:3d:8d:13:99:b3:6e:7c:70:d9:0a:54:
                    a8:e4:f6:db:ba:7f:71:8d:45:28:91:97:73:55:87:
                    ec:67:b3:3b:15:c0:fa:6e:43:00:a1:7e:ae:2e:b3:
                    bc:06:5a:23:00:2d:98:d0:64:44:0d:d4:22:62:aa:
                    c0:c0:65:de:8c:a4:af:51:2d:f7:cb:4a:7d:cd:01:
                    56:e7:b3:a2:6a:ed:c4:3c:c6:75:14:83:75:3a:e2:
                    08:c3:90:0a:76:2a:5b:02:8f:3b:af:fb:da:d1:ca:
                    8f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5E:5A:11:F4:32:D9:7E:F2:12:06:D9:FF:67:C7:8C:05:66:66:D3
            X509v3 Authority Key Identifier:
                keyid:57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:49:6a:ae:10:b1:1b:53:ac:03:97:76:8c:5d:ad:3b:b2:36:
         00:20:11:0b:e3:f1:35:e4:cd:98:ff:ab:71:19:ba:58:b3:d5:
         96:4f:cb:e6:a9:32:93:e0:cd:5a:11:12:3b:16:ea:a3:49:44:
         ec:24:f3:51:d6:f3:d6:0b:1d:00:02:ea:4a:bc:4d:68:47:d5:
         5a:5e:e0:66:12:33:88:81:c9:96:5d:43:07:28:b9:5f:87:14:
         a5:aa:17:0a:09:5a:c6:25:b0:f9:40:65:89:ff:87:1d:04:d5:
         47:23:5d:f3:a6:6e:0f:ea:10:5a:9d:58:29:2d:c6:ef:39:2d:
         1d:99:ed:70:5e:81:b2:a7:27:3b:e3:45:6d:b7:0f:94:b5:8e:
         d8:d5:8f:c6:44:db:d9:65:e7:11:80:c0:54:51:9a:64:46:d8:
         5e:93:30:c7:9f:c1:66:26:f1:1b:af:c2:06:e6:95:bd:de:b4:
         9b:23:d2:72:80:59:42:8b:9c:e3:db:d1:38:e8:d9:39:42:33:
         55:f5:7d:3f:2d:17:4f:29:aa:e0:e1:6c:56:bf:9d:10:49:aa:
         b3:8e:58:78:28:f0:40:4c:db:fd:99:ac:64:ee:76:d1:32:f3:
         f8:07:b1:fe:51:2b:20:dc:5e:ae:35:40:23:fa:fd:4b:76:be:
         4e:2c:35:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----