Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
File:                     Gwm9TWooxfH75oPPKs1ei_K65MQ.mft (raw, json)
Hash identifier:          CphpjVXvZ1UlIMbw1lM9Kjq4+kuVotWMa6o9qzI6FjM=
Subject key identifier:   04:87:82:13:B3:FE:2C:4F:61:F9:FE:9C:D6:8F:ED:5E:5D:6D:5A:6A
Authority key identifier: 1B:09:BD:4D:6A:28:C5:F1:FB:E6:83:CF:2A:CD:5E:8B:F2:BA:E4:C4
Certificate issuer:       /CN=1b09bd4d6a28c5f1fbe683cf2acd5e8bf2bae4c4
Certificate serial:       01940647BADB3D8A5D476D43D8C01917D228
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gwm9TWooxfH75oPPKs1ei_K65MQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
Manifest number:          0195
Signing time:             Fri 27 Dec 2024 04:02:31 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:31 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:31 +0000
Files and hashes:         1: Gwm9TWooxfH75oPPKs1ei_K65MQ.crl (hash: UjOZlcrrR/yNrHR0SH81VmSKicAAmfoP6ec4ICd1j9g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gwm9TWooxfH75oPPKs1ei_K65MQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:ba:db:3d:8a:5d:47:6d:43:d8:c0:19:17:d2:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b09bd4d6a28c5f1fbe683cf2acd5e8bf2bae4c4
        Validity
            Not Before: Dec 27 04:02:31 2024 GMT
            Not After : Dec 28 04:02:31 2024 GMT
        Subject: CN=04878213b3fe2c4f61f9fe9cd68fed5e5d6d5a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:87:0f:82:18:2f:0c:28:73:62:37:4c:c5:78:
                    4b:68:aa:9d:fe:b5:76:e6:b0:50:5e:46:71:ef:2d:
                    fe:56:29:de:05:01:52:45:56:33:8c:56:dc:42:10:
                    ef:94:46:8f:c8:67:8b:9c:0f:18:79:2e:76:ca:91:
                    aa:82:50:47:21:c2:e6:18:f6:f5:e0:fe:7e:d5:3b:
                    54:f7:12:50:1c:c3:2a:32:62:7b:7c:e1:ba:50:3e:
                    25:f1:12:4b:dc:ee:7f:de:31:e8:14:fb:76:96:e6:
                    62:c5:4f:04:3a:72:5c:2e:0e:24:0a:bc:12:20:06:
                    0a:d5:0a:6c:5c:af:92:f5:84:e8:fb:81:97:64:18:
                    50:97:e4:82:40:4b:46:e1:42:9a:80:1f:60:02:58:
                    73:6d:f3:56:eb:14:83:35:11:6a:06:0d:ec:fb:14:
                    f4:f6:d5:73:01:61:56:aa:97:84:62:0a:fd:c1:0d:
                    5a:9a:e2:5e:c3:6a:19:4d:7c:35:50:d5:4b:4b:7d:
                    64:61:74:3f:25:3c:fc:28:34:cb:fd:7d:8e:0e:34:
                    ac:2e:f9:48:ad:91:e3:c6:40:59:88:f2:28:8f:5b:
                    d0:05:fe:b6:73:1f:0d:fc:98:dd:c5:65:3c:33:55:
                    cd:6e:85:cc:2e:6c:91:aa:f2:38:46:5b:11:4c:6a:
                    04:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:87:82:13:B3:FE:2C:4F:61:F9:FE:9C:D6:8F:ED:5E:5D:6D:5A:6A
            X509v3 Authority Key Identifier:
                keyid:1B:09:BD:4D:6A:28:C5:F1:FB:E6:83:CF:2A:CD:5E:8B:F2:BA:E4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gwm9TWooxfH75oPPKs1ei_K65MQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:5c:7b:c4:b3:d6:81:66:c3:2f:24:75:66:7a:7f:9d:41:30:
         13:8c:7e:f7:3b:c5:8a:f9:12:71:58:21:8b:51:d0:70:46:3f:
         0c:a1:2b:a3:57:84:58:ee:ba:ec:bf:2b:fb:52:bd:29:30:c4:
         e0:c3:57:4e:1e:18:92:de:81:bd:78:a2:2e:3b:77:c8:ce:da:
         83:df:a8:83:63:a9:cf:2e:45:cc:32:b2:72:d0:31:bb:40:62:
         fe:21:e9:04:bd:c9:79:de:db:37:1b:c7:81:05:0f:cb:95:06:
         ea:dd:4d:be:dd:26:c9:8a:50:0b:a3:54:2b:3a:16:eb:8f:98:
         ed:22:ed:d8:89:a1:17:b5:83:33:7e:a7:86:19:65:3e:32:10:
         8a:5b:01:99:f5:02:c0:85:28:c0:a6:e0:8e:32:fb:a1:fc:28:
         1d:87:7d:84:f3:a6:01:08:a2:3f:ce:17:5d:bb:8c:a2:26:4e:
         73:6a:5d:8a:5a:2b:00:8e:32:7c:9a:55:f2:59:4c:d0:23:ce:
         07:2f:64:c7:5d:02:73:4d:eb:c9:0b:a5:ec:17:51:de:e0:37:
         09:3f:55:8e:c5:a2:4e:d4:bb:e7:d1:c8:88:e4:6b:83:35:39:
         36:e5:32:db:35:e9:bd:a0:e8:ec:df:2d:4f:52:92:40:91:88:
         61:95:79:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----