Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft
File:                     wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft (raw, json)
Hash identifier:          ou/IAXvJT7QAtOObBnwtuIYAfiChZyfi+vtaK9Ca3n4=
Subject key identifier:   0C:CC:97:94:CB:4A:45:08:6B:7A:8F:E3:24:C0:24:87:C4:FE:A2:8D
Authority key identifier: C1:4D:C9:58:ED:15:2D:C7:70:29:EC:8F:86:CF:01:8A:E2:BB:F9:09
Certificate issuer:       /CN=c14dc958ed152dc77029ec8f86cf018ae2bbf909
Certificate serial:       01935764C569FB54BA2C68BDF62EAFD64028
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft
Manifest number:          136D
Signing time:             Sat 23 Nov 2024 05:00:42 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:42 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:42 +0000
Files and hashes:         1: wU3JWO0VLcdwKeyPhs8BiuK7-Qk.crl (hash: vr/R0K8RtkKGBHiztopMsB4WUmLcAFvGIICNtNgWJMo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:c5:69:fb:54:ba:2c:68:bd:f6:2e:af:d6:40:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c14dc958ed152dc77029ec8f86cf018ae2bbf909
        Validity
            Not Before: Nov 23 05:00:42 2024 GMT
            Not After : Nov 24 05:00:42 2024 GMT
        Subject: CN=0ccc9794cb4a45086b7a8fe324c02487c4fea28d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:96:87:3f:b0:4a:02:7b:d4:80:6d:55:62:8c:
                    f3:e0:b1:e0:74:2b:7a:8d:43:89:98:6e:96:69:a6:
                    71:53:ec:60:e1:4f:28:f0:f6:2f:e4:1f:67:30:2e:
                    cf:42:a8:1a:05:a1:bf:4f:7d:84:29:d0:71:cb:6f:
                    86:5b:87:c0:85:a7:b4:9f:9f:36:ad:66:14:e0:97:
                    82:e9:0b:13:aa:1e:f6:92:c5:33:b2:07:ec:2e:7d:
                    f2:37:87:75:09:26:8e:a4:82:72:71:e2:50:58:3a:
                    e2:cd:4e:f8:11:ce:8a:8e:3d:a1:6f:3d:5c:92:f1:
                    61:88:86:41:ec:2e:9d:cd:3d:52:83:18:74:73:f1:
                    f0:a0:f3:17:d9:72:50:76:0b:e6:03:d6:8e:e5:8d:
                    0c:ad:53:42:7f:5f:71:59:86:ad:b7:d0:8b:72:d8:
                    e3:ba:b0:79:12:fa:7f:79:19:76:14:a9:8d:b4:ef:
                    60:a1:03:dd:3a:b0:53:ee:ec:6e:04:2a:11:c7:0f:
                    ee:b3:96:b4:95:32:fe:e5:46:2f:a8:db:42:93:d6:
                    9f:fa:2d:6b:79:09:ae:f5:62:77:7c:40:cf:bc:0c:
                    9f:b8:c2:f0:18:7a:a9:ed:cf:52:9d:2b:63:04:e3:
                    b9:7b:20:36:ad:b6:3d:c7:08:2e:08:02:b2:57:71:
                    de:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CC:97:94:CB:4A:45:08:6B:7A:8F:E3:24:C0:24:87:C4:FE:A2:8D
            X509v3 Authority Key Identifier:
                keyid:C1:4D:C9:58:ED:15:2D:C7:70:29:EC:8F:86:CF:01:8A:E2:BB:F9:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:89:2c:40:86:a4:bf:23:b2:c7:1b:0f:bc:3d:73:b2:4d:c0:
         a4:0e:e6:f6:a5:e5:04:cb:4f:df:f2:ca:82:2e:16:e9:90:70:
         64:c2:b0:33:c0:b5:12:1f:1a:2c:d2:ed:22:5f:be:64:61:b8:
         5c:17:95:6a:df:e4:01:1a:d9:bd:ad:1d:95:bf:a4:56:e5:69:
         43:f0:30:3c:be:b3:a2:c8:e1:fa:68:41:66:99:19:1f:3d:9f:
         96:1d:9e:57:5d:85:5f:e7:e3:f9:63:5e:32:ef:37:85:e8:ad:
         e2:44:77:d0:0c:f2:64:bb:01:d8:19:e9:b9:53:5e:56:f7:83:
         81:08:87:cd:b1:4f:56:6c:4e:47:7f:6c:f9:c1:4d:2d:70:a4:
         87:bd:8c:1a:15:d9:2f:d5:65:82:59:06:2c:4d:40:df:34:cf:
         2a:cd:8c:6c:27:50:bf:b3:ce:d6:a1:c8:8c:fe:a8:f4:ae:71:
         0c:67:ce:92:ca:01:06:b7:63:ec:c1:19:4d:35:75:1c:70:84:
         01:cf:09:8f:3b:34:56:d6:8e:33:5a:88:cb:0d:9b:d6:79:91:
         f6:53:ae:f3:85:91:74:35:29:7c:a6:b4:6a:90:f1:da:d6:21:
         67:92:29:ce:6f:1b:74:4e:19:7c:09:d1:53:be:f9:66:77:3c:
         11:47:83:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----