Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft
File:                     wwvzI77VsMENPzevDrNjrafKxKs.mft (raw, json)
Hash identifier:          J5NqHsQtid4foxJ35SpcfDDQtPm9MEbmvejXxsb9mI4=
Subject key identifier:   A0:B2:CB:0F:F4:72:6C:5F:83:84:FE:78:97:E1:76:A1:0A:A7:CF:CE
Authority key identifier: C3:0B:F3:23:BE:D5:B0:C1:0D:3F:37:AF:0E:B3:63:AD:A7:CA:C4:AB
Certificate issuer:       /CN=c30bf323bed5b0c10d3f37af0eb363ada7cac4ab
Certificate serial:       0193568A2B3BD149E63822FF96B924958346
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwvzI77VsMENPzevDrNjrafKxKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft
Manifest number:          06B2
Signing time:             Sat 23 Nov 2024 01:01:55 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:55 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:55 +0000
Files and hashes:         1: wwvzI77VsMENPzevDrNjrafKxKs.crl (hash: /tzJa9DN/GtSWrbi9s0YLt9Y9pwRhfiTKzP25C9/V7M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wwvzI77VsMENPzevDrNjrafKxKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:2b:3b:d1:49:e6:38:22:ff:96:b9:24:95:83:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c30bf323bed5b0c10d3f37af0eb363ada7cac4ab
        Validity
            Not Before: Nov 23 01:01:55 2024 GMT
            Not After : Nov 24 01:01:55 2024 GMT
        Subject: CN=a0b2cb0ff4726c5f8384fe7897e176a10aa7cfce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cb:a9:5b:ff:e4:23:7a:7e:c3:11:5a:36:8d:
                    ba:58:c3:cc:99:68:e4:8f:9f:45:6d:32:97:87:53:
                    b2:ee:60:44:48:62:ad:85:65:cf:96:7c:8f:41:cf:
                    98:4d:bc:da:ff:e7:bd:96:80:89:aa:81:5b:47:ab:
                    86:26:5f:5a:41:18:b5:a5:72:20:1b:2c:3a:dc:e1:
                    83:9b:0d:c2:4c:1b:12:e7:f0:92:e5:02:00:00:3b:
                    6b:28:9b:e6:5b:6a:66:82:f6:21:3d:df:77:fa:07:
                    36:6b:59:5f:f5:09:aa:ae:50:f2:e5:d0:7e:e4:7a:
                    72:62:89:8f:84:96:c4:62:d0:57:a2:f2:39:d5:33:
                    68:ad:49:b3:52:88:a6:bb:57:97:75:2a:8a:c8:1c:
                    6d:40:93:3e:c9:98:69:6d:e8:6a:7a:0f:22:6d:6c:
                    99:0f:75:98:ff:c9:18:5b:45:a5:ef:5e:1e:b4:bb:
                    c6:8b:59:ea:4c:ac:f7:6c:e5:4f:35:c9:be:8d:2f:
                    00:92:98:bf:67:2c:7c:a6:c6:da:82:e1:93:49:4b:
                    46:26:7f:27:f7:05:db:5c:ae:81:0a:20:b5:eb:97:
                    64:eb:9f:c7:6c:3b:48:e7:71:93:54:32:cb:0c:ff:
                    10:f6:c1:90:5b:10:e5:10:2a:f9:94:2f:88:84:3e:
                    b2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B2:CB:0F:F4:72:6C:5F:83:84:FE:78:97:E1:76:A1:0A:A7:CF:CE
            X509v3 Authority Key Identifier:
                keyid:C3:0B:F3:23:BE:D5:B0:C1:0D:3F:37:AF:0E:B3:63:AD:A7:CA:C4:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwvzI77VsMENPzevDrNjrafKxKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:68:e2:36:3c:dc:03:69:7f:aa:ac:d0:81:35:9f:5c:7a:46:
         3f:09:80:a7:41:26:c5:11:82:06:21:af:02:b2:8c:7a:19:d5:
         04:63:7b:a9:ed:18:c0:6a:ec:48:5b:12:fa:e2:61:c0:e7:34:
         b7:f9:1d:c1:f2:93:dc:e0:9c:92:c8:c9:8d:ae:00:fa:58:d6:
         9e:85:c4:95:a0:a6:2f:e0:cc:d8:0d:96:a6:9a:d2:7e:dc:48:
         54:0e:88:c2:70:fa:f9:af:0b:a0:db:0a:0b:54:64:11:bb:3a:
         e2:f2:92:ae:1c:68:2f:d4:8e:ad:19:ab:bf:41:be:d8:1b:d7:
         3d:f9:3c:99:f4:de:c8:b6:44:72:94:2c:a4:c7:17:8b:fd:9c:
         34:ac:42:4b:34:bb:fb:e9:24:c9:f6:d2:86:c2:a7:aa:06:b5:
         08:0e:a2:ac:05:de:e4:44:05:93:59:85:2e:4c:48:66:64:09:
         04:b5:cf:09:04:99:50:41:5c:2d:b0:6b:b6:07:55:af:66:68:
         64:ea:55:75:b7:ee:94:12:e6:6c:f7:46:c1:9c:cc:cb:18:29:
         a3:a0:8d:ab:bf:cc:d0:24:46:2b:4d:ad:78:99:6e:04:10:6a:
         d5:23:91:3d:a8:a6:cc:b1:06:fd:b4:c2:8f:66:ea:9d:94:88:
         ac:84:d7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----