Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
File:                     GWRkVJwHkby2YRd_l67c851Uw5U.mft (raw, json)
Hash identifier:          gmD0zAMiKN3+L+9aH4fKGyaopL4sbBd9K2mYmhy3wD0=
Subject key identifier:   EA:05:97:B0:AF:33:9A:9A:73:9D:CB:B7:2E:F0:91:07:84:94:32:48
Authority key identifier: 19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95
Certificate issuer:       /CN=196464549c0791bcb661177f97aedcf39d54c395
Certificate serial:       01936B224D77BBD76E8B4FB6FC5880BA1DCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
Manifest number:          1377
Signing time:             Wed 27 Nov 2024 01:00:30 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:30 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:30 +0000
Files and hashes:         1: GWRkVJwHkby2YRd_l67c851Uw5U.crl (hash: 4r7V/iOiV3aL2upDhqs3/3jGYWNXGuoQDq/49tQd/c0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:4d:77:bb:d7:6e:8b:4f:b6:fc:58:80:ba:1d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196464549c0791bcb661177f97aedcf39d54c395
        Validity
            Not Before: Nov 27 01:00:30 2024 GMT
            Not After : Nov 28 01:00:30 2024 GMT
        Subject: CN=ea0597b0af339a9a739dcbb72ef0910784943248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ea:85:f3:73:b8:dd:ba:84:ee:cf:af:48:95:
                    65:64:fd:d9:7e:71:3c:4f:42:4c:23:22:18:58:55:
                    a3:8f:b8:10:ae:3e:c0:f5:36:54:2f:2e:29:8b:d2:
                    18:25:00:25:d6:ab:1f:db:84:ea:5c:41:e7:cc:34:
                    47:a9:52:9d:be:00:42:c2:e3:07:fa:ab:e2:02:8a:
                    bd:da:e5:80:ea:1a:63:81:b6:09:1d:1c:7f:9e:4e:
                    82:8a:f7:bc:5b:2a:49:11:52:ce:28:6c:3a:7e:03:
                    34:8c:f3:4a:70:7f:37:8f:97:69:4d:e6:d7:a5:34:
                    0d:68:db:e6:61:93:d4:e4:f5:f6:2f:8d:8f:dd:ce:
                    5b:40:9e:7b:d4:03:6a:95:cc:e5:a2:86:5d:96:05:
                    7b:9e:82:f0:49:27:b2:3f:49:fc:57:a1:de:44:a0:
                    2d:d4:a5:00:c9:ca:90:0c:59:fe:08:08:6b:14:df:
                    1e:18:6b:be:07:f1:0e:e7:6e:28:5a:d8:fa:3f:63:
                    0b:0c:cf:58:c0:8c:be:39:67:83:30:1e:ef:4c:7f:
                    3d:97:0f:ab:13:ec:5e:4c:52:96:55:9a:f6:d2:66:
                    40:1b:be:98:17:74:76:bb:7d:eb:70:47:02:79:36:
                    bf:50:b0:6a:9d:14:e7:e0:71:2e:53:fc:21:c2:b3:
                    1e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:05:97:B0:AF:33:9A:9A:73:9D:CB:B7:2E:F0:91:07:84:94:32:48
            X509v3 Authority Key Identifier:
                keyid:19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:12:45:bf:ba:fb:26:54:3c:fc:66:f3:3e:d2:51:4e:e3:e6:
         6a:66:65:ba:b7:bd:74:b4:5f:14:a8:54:2e:a6:ef:3f:76:e8:
         dc:fe:c0:04:9a:fa:ff:48:64:b8:70:15:1b:ef:88:c9:a2:bc:
         61:25:2e:30:5d:22:5c:0a:69:dd:fb:05:34:e9:4b:00:e0:2c:
         a8:56:6a:79:de:4b:23:a9:29:bd:a4:c9:2c:d8:07:cc:54:79:
         11:93:4f:06:7a:81:e1:ac:05:57:65:74:39:6c:c6:83:b0:d1:
         32:5d:44:f3:aa:2d:40:4a:7d:8d:ff:fd:79:43:9e:8c:f4:86:
         69:91:1e:4a:af:e3:24:5d:3d:cf:08:d2:40:fa:22:1f:24:d3:
         3a:2f:3f:4d:1f:aa:4f:95:b4:30:30:53:f2:88:4f:9a:67:b0:
         22:78:6d:13:0c:d4:19:e4:6c:16:25:d8:19:91:2e:e3:c6:e7:
         2d:ed:49:46:75:6d:2e:24:f0:1b:3f:e8:18:46:00:15:e4:b8:
         17:19:e0:c8:45:8e:14:98:13:91:68:fe:22:a9:c4:d4:fb:d6:
         26:01:b9:cd:be:4f:60:f7:ac:ad:28:b0:94:32:0d:42:ee:21:
         ea:cd:95:06:1e:7d:eb:1b:ee:3c:4d:8e:f7:91:93:5e:a7:0c:
         36:66:7f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----