Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft
File:                     NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft (raw, json)
Hash identifier:          bwbUARh1349tVXLSxFnMgXShVltFyW9TxZq4zMNNG9g=
Subject key identifier:   0C:9B:A6:7B:B7:02:89:91:96:C6:E8:49:91:C6:9C:8A:15:95:F6:FC
Authority key identifier: 37:25:8E:BE:E6:74:5F:06:D7:33:E4:B6:DD:0D:27:A7:3B:FD:FB:65
Certificate issuer:       /CN=37258ebee6745f06d733e4b6dd0d27a73bfdfb65
Certificate serial:       018F94CE69A29864E5FD2569369C45569410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NyWOvuZ0XwbXM-S23Q0npzv9-2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft
Manifest number:          0E9F
Signing time:             Mon 20 May 2024 07:01:46 +0000
Manifest this update:     Mon 20 May 2024 07:01:46 +0000
Manifest next update:     Tue 21 May 2024 07:01:46 +0000
Files and hashes:         1: NyWOvuZ0XwbXM-S23Q0npzv9-2U.crl (hash: 5O2hGKvhR0qBIrUd64Wo2vgYGsTNwfUZQ3qGycItEYo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NyWOvuZ0XwbXM-S23Q0npzv9-2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:94:ce:69:a2:98:64:e5:fd:25:69:36:9c:45:56:94:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37258ebee6745f06d733e4b6dd0d27a73bfdfb65
        Validity
            Not Before: May 20 07:01:46 2024 GMT
            Not After : May 21 07:01:46 2024 GMT
        Subject: CN=0c9ba67bb702899196c6e84991c69c8a1595f6fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:db:64:e8:87:79:ab:20:19:6c:81:33:05:db:
                    52:4d:00:59:09:2f:79:71:96:96:e2:05:7d:19:35:
                    f4:1e:6a:30:84:ca:0e:48:fc:f1:0a:6d:a6:84:bd:
                    54:7d:c7:69:a2:2c:11:5c:8b:22:8f:3e:81:fb:c1:
                    9e:87:ea:f6:88:de:bc:d0:45:83:62:eb:54:92:bd:
                    3f:71:b3:d6:0e:71:a4:76:60:0f:29:40:54:a2:18:
                    d2:0b:60:f8:5b:6f:94:3e:a4:1a:fd:eb:ef:a0:96:
                    f7:2f:79:06:6a:55:35:7f:a5:39:f6:b9:0a:c1:b6:
                    a9:9c:ca:c5:36:43:92:9b:72:ff:a0:69:7c:0a:dc:
                    27:fc:1f:db:dd:ef:0e:0d:a4:b6:a3:68:35:3b:4e:
                    a8:8b:32:3d:a9:ec:e2:99:81:74:b2:19:18:0c:67:
                    90:78:a1:b1:1b:0d:ca:be:f6:36:c8:2d:77:43:be:
                    83:b7:5c:17:5f:a8:5c:03:63:49:60:73:ff:bd:ad:
                    8b:41:28:1d:1c:4c:2b:4d:cc:69:cd:b1:0e:20:07:
                    59:44:51:fb:00:2f:24:3f:31:61:5a:d8:89:5e:69:
                    89:eb:64:28:20:98:fe:ae:09:9e:09:d8:dd:99:51:
                    01:5e:92:8d:ac:86:35:f8:be:00:fa:6c:3d:5c:6a:
                    02:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9B:A6:7B:B7:02:89:91:96:C6:E8:49:91:C6:9C:8A:15:95:F6:FC
            X509v3 Authority Key Identifier:
                keyid:37:25:8E:BE:E6:74:5F:06:D7:33:E4:B6:DD:0D:27:A7:3B:FD:FB:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyWOvuZ0XwbXM-S23Q0npzv9-2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b4d9e-c25e-4d8a-aa63-2b8fabc4e05c/1/NyWOvuZ0XwbXM-S23Q0npzv9-2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c3:3a:5d:ec:82:fa:cb:1b:80:16:cb:e5:08:43:87:44:08:
         70:10:9d:ab:e2:2c:fb:20:f3:16:a0:0b:27:8b:0e:32:a8:f9:
         2b:65:a9:9d:13:45:80:a7:ea:48:9c:1f:5f:6f:7f:6c:42:4e:
         60:3d:e6:98:3e:f7:61:0d:a3:a6:95:61:5d:16:7d:99:39:22:
         98:02:35:7a:04:30:5f:e9:3d:79:6c:36:f9:ff:d6:db:79:6d:
         f3:93:9f:6f:8d:0e:67:b7:21:1e:68:81:e1:3c:e8:bf:e9:3f:
         1c:4f:84:a6:ae:74:fe:e6:a3:6a:fc:d5:1e:79:93:ad:72:be:
         f0:f7:c8:b1:e6:28:40:6e:de:78:da:b7:07:15:c1:2a:65:61:
         9f:3e:22:fe:10:12:e0:ec:ed:69:c3:f9:e9:4b:99:59:12:48:
         b6:2c:be:82:34:ef:ce:96:3b:a5:2b:35:0e:84:be:9c:4d:79:
         83:f5:af:2a:59:a8:2d:1e:f8:a8:ce:e5:8e:9a:af:59:0c:23:
         91:7e:4b:0d:cb:a2:60:f6:e3:5b:12:4a:a9:bc:f4:db:0f:a2:
         7e:e9:21:e0:b1:4a:ae:d9:39:ed:06:a4:6e:95:ae:b9:0b:cd:
         e5:5c:72:ad:e9:29:42:72:ef:21:b0:95:95:00:96:87:71:01:
         cf:3a:e7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----