Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0495e3-a6cd-41ee-9d72-912edee71870/1/2dybKOREONnQi9VZl59J47v6Yiw.mft
File:                     2dybKOREONnQi9VZl59J47v6Yiw.mft (raw, json)
Hash identifier:          Cnr0uFOJJ2ebHD07i3zZR7aA+28ACaaU5WgYhDP7Z5Q=
Subject key identifier:   97:7C:2C:A4:EC:3F:0F:48:1C:85:E5:F8:D8:DA:5B:71:30:09:99:91
Authority key identifier: D9:DC:9B:28:E4:44:38:D9:D0:8B:D5:59:97:9F:49:E3:BB:FA:62:2C
Certificate issuer:       /CN=d9dc9b28e44438d9d08bd559979f49e3bbfa622c
Certificate serial:       01935689F6DAA292779545B47AB2F091AB3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dybKOREONnQi9VZl59J47v6Yiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/0495e3-a6cd-41ee-9d72-912edee71870/1/2dybKOREONnQi9VZl59J47v6Yiw.mft
Manifest number:          03AF
Signing time:             Sat 23 Nov 2024 01:01:42 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:42 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:42 +0000
Files and hashes:         1: 2dybKOREONnQi9VZl59J47v6Yiw.crl (hash: CdX8oTelKzk1u4ieGf+QMQ9CaPwhx8pK85DxxD+Tg40=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/0495e3-a6cd-41ee-9d72-912edee71870/1/2dybKOREONnQi9VZl59J47v6Yiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/0495e3-a6cd-41ee-9d72-912edee71870/1/2dybKOREONnQi9VZl59J47v6Yiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2dybKOREONnQi9VZl59J47v6Yiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:f6:da:a2:92:77:95:45:b4:7a:b2:f0:91:ab:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9dc9b28e44438d9d08bd559979f49e3bbfa622c
        Validity
            Not Before: Nov 23 01:01:42 2024 GMT
            Not After : Nov 24 01:01:42 2024 GMT
        Subject: CN=977c2ca4ec3f0f481c85e5f8d8da5b7130099991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1f:93:87:64:0f:f8:72:ef:f7:d1:37:ff:45:
                    2f:1c:df:73:21:a2:e4:b4:f2:42:3a:0d:a1:94:8f:
                    8e:96:5c:c0:fb:a4:7d:47:3c:46:3f:0b:e2:3e:47:
                    3f:9e:d2:bf:cb:6f:9d:85:42:90:82:0a:d2:6b:15:
                    24:0e:d6:ba:99:60:fb:7a:9d:9b:fe:f1:41:8b:68:
                    10:35:32:b9:35:d4:66:d2:fd:d4:ae:8a:22:fa:4a:
                    35:11:e5:7b:11:53:a3:f5:df:5a:bf:12:35:42:fe:
                    14:5a:25:af:cf:f2:34:d9:aa:3b:f5:68:85:01:e7:
                    30:69:e5:e9:f1:2e:c1:eb:f5:7c:ac:88:7f:fb:5c:
                    b5:3a:93:4c:11:50:ba:eb:bb:ba:76:5c:4d:a3:c1:
                    ea:07:2c:92:fb:03:2a:84:fb:8d:14:a3:d4:a0:f8:
                    97:ec:a3:28:c3:9c:3a:c9:17:ed:12:ff:fa:37:aa:
                    f6:26:c3:0b:8f:03:db:aa:63:32:f6:93:f6:22:99:
                    26:c8:f0:11:aa:02:a5:ac:46:7e:31:11:59:cb:6e:
                    1d:57:55:6b:6a:3e:da:0f:16:8e:87:98:25:f7:22:
                    e1:02:03:1c:5a:46:55:10:1f:d0:9c:1b:09:e2:00:
                    32:e4:ee:7f:bb:14:b7:2d:a5:54:1c:bd:ac:8e:a2:
                    16:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7C:2C:A4:EC:3F:0F:48:1C:85:E5:F8:D8:DA:5B:71:30:09:99:91
            X509v3 Authority Key Identifier:
                keyid:D9:DC:9B:28:E4:44:38:D9:D0:8B:D5:59:97:9F:49:E3:BB:FA:62:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dybKOREONnQi9VZl59J47v6Yiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0495e3-a6cd-41ee-9d72-912edee71870/1/2dybKOREONnQi9VZl59J47v6Yiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0495e3-a6cd-41ee-9d72-912edee71870/1/2dybKOREONnQi9VZl59J47v6Yiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ec:11:69:ba:1f:5a:da:7b:9c:21:43:ef:fd:cd:1b:3f:0f:
         93:f1:e7:cb:9e:19:58:b6:2d:d8:86:b5:ee:b2:ab:1b:aa:c5:
         2c:f5:81:3b:00:47:96:e5:67:9c:bf:c3:5e:90:ac:6a:01:94:
         76:4c:1a:15:d0:86:61:1b:bd:7c:82:be:5b:06:7e:52:85:fb:
         7f:e3:b8:37:ba:75:99:4a:30:59:59:57:27:27:f0:10:84:df:
         a0:1b:5a:75:49:d2:4a:68:92:ce:7b:8a:60:e0:da:d9:07:2c:
         ef:fc:eb:09:8c:f2:f9:e8:c9:12:ca:aa:f7:94:69:90:fc:8c:
         d7:33:aa:40:b7:0b:8b:39:75:00:b9:4b:ab:e6:86:d8:1b:bf:
         af:10:e4:03:48:5b:39:b3:fb:62:03:c7:20:6c:8f:ce:44:6e:
         1a:2c:01:81:fe:0e:bf:3a:e5:14:bd:ed:55:c9:a3:13:6a:dd:
         6c:37:b1:b2:4a:ae:c8:f3:61:05:43:1b:fe:f6:1b:04:68:cf:
         73:e6:c8:d8:26:2a:18:f3:18:c2:7b:74:60:be:85:18:7a:b2:
         34:01:73:02:36:02:37:60:4b:52:4c:b9:f4:f5:b3:af:b0:a8:
         55:fa:12:5c:9a:5c:38:07:a8:56:86:3c:9c:d8:b9:4e:f1:dd:
         83:b3:47:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----