Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/35c426-27fa-409e-a8da-f28683424623/1/57nHwL3lwmrI5fa1YNpwGLzOjJk.mft
File:                     57nHwL3lwmrI5fa1YNpwGLzOjJk.mft (raw, json)
Hash identifier:          SWVHF28RuwIJhSiB12haJdsJXcsJEcKXA/WHyRT7hIk=
Subject key identifier:   0F:87:D9:A8:CD:CF:AD:96:82:9A:C6:3C:51:93:FF:DC:E4:9A:61:30
Authority key identifier: E7:B9:C7:C0:BD:E5:C2:6A:C8:E5:F6:B5:60:DA:70:18:BC:CE:8C:99
Certificate issuer:       /CN=e7b9c7c0bde5c26ac8e5f6b560da7018bcce8c99
Certificate serial:       018F21935D27E4BB5EB06DF607EEB11D1B33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/57nHwL3lwmrI5fa1YNpwGLzOjJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/35c426-27fa-409e-a8da-f28683424623/1/57nHwL3lwmrI5fa1YNpwGLzOjJk.mft
Manifest number:          0DD7
Signing time:             Sat 27 Apr 2024 22:00:56 +0000
Manifest this update:     Sat 27 Apr 2024 22:00:56 +0000
Manifest next update:     Sun 28 Apr 2024 22:00:56 +0000
Files and hashes:         1: 57nHwL3lwmrI5fa1YNpwGLzOjJk.crl (hash: 5gGsLZz+CEwNvV2Ye49b6o4+eRV8Mycu0qgXCJQHpjc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/35c426-27fa-409e-a8da-f28683424623/1/57nHwL3lwmrI5fa1YNpwGLzOjJk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/35c426-27fa-409e-a8da-f28683424623/1/57nHwL3lwmrI5fa1YNpwGLzOjJk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/57nHwL3lwmrI5fa1YNpwGLzOjJk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:21:93:5d:27:e4:bb:5e:b0:6d:f6:07:ee:b1:1d:1b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b9c7c0bde5c26ac8e5f6b560da7018bcce8c99
        Validity
            Not Before: Apr 27 22:00:56 2024 GMT
            Not After : Apr 28 22:00:56 2024 GMT
        Subject: CN=0f87d9a8cdcfad96829ac63c5193ffdce49a6130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:66:38:9a:80:6f:64:41:77:89:08:1b:71:10:
                    cc:01:88:4a:49:b8:60:75:b8:d5:78:07:93:53:de:
                    ef:88:56:eb:8e:a1:3f:64:b6:4e:21:30:b0:1a:ae:
                    70:80:3c:f4:e9:e1:ab:40:eb:60:95:5e:c0:88:da:
                    b0:ec:25:49:02:41:0d:3d:75:cb:96:b1:c7:15:76:
                    a7:8b:07:66:9b:13:bf:a2:fc:f9:30:20:b3:eb:eb:
                    c5:f0:3a:ba:62:04:98:0c:8c:5f:45:e1:f6:34:b4:
                    76:eb:3c:55:16:04:69:75:72:f9:f7:7b:a6:f4:ea:
                    26:51:15:7f:6b:f1:a6:c8:37:fe:f1:e2:92:99:92:
                    6b:de:0a:2d:76:75:0d:ba:8b:e3:55:d1:09:63:35:
                    b3:85:27:53:95:d2:4d:1e:36:5b:da:e8:00:8a:f3:
                    40:85:25:1b:9c:1c:64:a5:b9:8e:0a:c9:32:81:93:
                    81:1e:b1:99:f7:59:04:db:fe:a4:e3:56:75:17:75:
                    d2:74:2c:2e:b7:30:4d:51:b5:55:69:ce:ee:ad:4a:
                    40:82:b1:f9:06:f3:d8:ac:d6:42:5a:16:a2:79:5e:
                    2e:9e:c0:e9:cf:8d:5d:59:7c:7a:47:8c:d1:dc:4a:
                    6b:06:b2:ac:36:16:8c:e1:29:ca:65:c1:39:57:db:
                    a5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:87:D9:A8:CD:CF:AD:96:82:9A:C6:3C:51:93:FF:DC:E4:9A:61:30
            X509v3 Authority Key Identifier:
                keyid:E7:B9:C7:C0:BD:E5:C2:6A:C8:E5:F6:B5:60:DA:70:18:BC:CE:8C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57nHwL3lwmrI5fa1YNpwGLzOjJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/35c426-27fa-409e-a8da-f28683424623/1/57nHwL3lwmrI5fa1YNpwGLzOjJk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/35c426-27fa-409e-a8da-f28683424623/1/57nHwL3lwmrI5fa1YNpwGLzOjJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:06:1a:c3:40:bb:73:27:8b:81:18:24:8d:6e:af:89:e4:8b:
         82:a2:de:fb:e6:0d:09:e4:d7:17:36:42:38:ca:a8:ec:55:45:
         89:bd:3b:42:c1:3a:90:a2:a6:82:b4:0e:6d:fc:7a:45:60:f1:
         d5:23:18:05:33:ae:b9:76:e8:a3:6a:52:72:40:f0:34:5b:24:
         e6:a4:bf:6e:c3:bb:80:6c:5d:d9:1a:62:60:e5:f9:a2:98:51:
         aa:57:6e:8c:2b:8f:55:c6:2c:72:03:24:a7:46:f2:38:d2:09:
         c0:d0:3a:d9:3f:59:bf:83:a6:a7:f6:7b:8e:ca:46:86:21:9d:
         70:5b:87:78:54:54:77:ce:45:fc:7c:09:84:e9:55:f1:06:ca:
         f7:11:2b:4b:9b:d4:50:b5:27:b1:84:bc:3b:79:06:2d:87:3e:
         8b:39:db:92:ac:98:c2:22:f4:c7:19:3f:a7:ec:40:a0:2a:94:
         fe:4d:03:6e:e7:23:cf:72:32:a5:03:65:da:2b:7a:10:7e:58:
         be:69:f1:bc:32:91:44:df:6b:a4:81:5d:9e:1a:27:4d:5a:f6:
         f5:bd:66:e6:f3:84:bf:81:74:cd:9b:14:ff:95:e0:3a:3f:74:
         85:5e:89:4e:25:1b:00:a2:9c:77:1f:bc:a0:0e:0a:c9:22:7d:
         ca:2a:90:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----