Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
File:                     _WjZ9SvHlS3fCn34GhHuFD8zJwo.mft (raw, json)
Hash identifier:          PJBvPmUHmovIX8RXz1A+fJD9BCjSr8lu1AThZZh57iA=
Subject key identifier:   D0:93:6A:16:C5:B8:24:AC:52:FD:52:AF:0B:B1:D0:B0:48:8E:8E:82
Authority key identifier: FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A
Certificate issuer:       /CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a
Certificate serial:       019357D260A13FC517697F002633CF308F54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
Manifest number:          099E
Signing time:             Sat 23 Nov 2024 07:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:25 +0000
Files and hashes:         1: _WjZ9SvHlS3fCn34GhHuFD8zJwo.crl (hash: Kh+Py6wr6cAJXqJcbyIlBvQoainqR9c8Om800DqMlKE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:60:a1:3f:c5:17:69:7f:00:26:33:cf:30:8f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a
        Validity
            Not Before: Nov 23 07:00:25 2024 GMT
            Not After : Nov 24 07:00:25 2024 GMT
        Subject: CN=d0936a16c5b824ac52fd52af0bb1d0b0488e8e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:44:b2:34:8c:ef:24:00:d1:da:b1:ea:ce:84:
                    d7:59:cc:27:a9:bb:48:8e:10:c9:1d:e9:4c:40:f5:
                    84:75:22:45:19:90:5b:68:12:c9:39:9c:22:fb:2a:
                    29:7a:1c:31:1c:3f:57:e0:e3:75:b4:42:7b:f3:8e:
                    56:28:98:f9:2b:06:c0:5b:d2:7b:34:1f:d1:f1:9c:
                    9d:07:4e:70:80:1a:7e:7b:f4:45:fa:c1:2a:4d:53:
                    d4:c0:71:f3:ee:63:b3:2f:1e:ad:fb:9c:ae:d7:29:
                    d3:9d:3c:7f:87:89:5b:b9:ec:7a:e0:f6:9e:b8:7c:
                    8c:82:c9:56:71:e9:75:3d:1c:fe:a2:52:0f:db:3a:
                    e2:7c:fe:77:63:61:80:bc:15:e0:c9:8d:4d:cc:2a:
                    7f:38:cb:71:e2:82:05:1d:de:43:eb:e2:2d:15:9e:
                    e7:ff:bf:c3:c8:62:5b:ad:d7:17:da:4d:3c:63:82:
                    39:c1:fd:86:ae:61:09:fa:79:23:85:66:61:53:f2:
                    06:e0:57:2a:d8:7c:24:1e:b3:64:ba:4f:cf:67:22:
                    3a:7a:91:dc:2f:8d:75:0f:2a:33:7a:77:dc:73:7d:
                    80:c5:28:33:cd:a3:b8:d8:3c:b5:af:d9:53:ac:af:
                    99:76:ab:0a:6a:62:78:62:ef:2a:7a:b3:37:3e:4c:
                    36:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:93:6A:16:C5:B8:24:AC:52:FD:52:AF:0B:B1:D0:B0:48:8E:8E:82
            X509v3 Authority Key Identifier:
                keyid:FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:58:00:b5:cd:f0:6c:73:63:03:88:8b:ea:28:4a:fb:61:af:
         4f:26:5e:c9:4d:b2:79:8c:8c:34:e1:40:fb:71:b1:14:9b:5b:
         28:12:4b:d9:b3:29:93:4e:3b:83:24:6e:80:1a:cd:5c:90:92:
         0d:ab:92:3e:89:72:33:1c:e2:22:ec:8d:ea:7c:78:3a:8a:ad:
         fb:b7:5c:8f:99:23:55:77:0e:c1:e4:c9:a5:a2:50:62:7f:1b:
         7c:82:da:e9:18:d0:72:11:b0:58:f8:2f:1a:ec:45:66:a3:29:
         5d:a8:4b:db:94:98:56:f8:81:e2:be:53:52:96:7a:e8:33:50:
         fc:87:c9:c8:56:b4:e5:7d:93:b1:19:67:92:e3:1f:a6:97:1b:
         27:85:38:39:00:d7:74:ef:5a:0f:be:ba:0d:2d:9d:f8:5b:8e:
         20:0e:c1:8b:34:a8:2b:81:d2:68:49:86:a1:11:ec:ea:48:9b:
         2b:e8:0a:c6:35:ae:5f:d9:70:46:6c:ca:d7:ff:3c:03:07:cc:
         15:2f:0b:8c:ca:25:21:69:45:7c:a6:e2:4a:9a:dc:05:f1:ef:
         fe:63:60:7a:f4:6f:e4:66:0b:96:eb:7c:51:a3:b9:ea:eb:a9:
         09:8e:07:0b:be:b9:71:56:cd:62:62:05:34:5f:b7:2c:7b:9a:
         07:66:f3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----