Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
File:                     mgdjMrvSgPCFLbafYVsPFJkUgxs.mft (raw, json)
Hash identifier:          OiBN9c/09DdpNb+qzq/DBkf2s8NRRLYLC9tR3LMWKaY=
Subject key identifier:   B9:0B:A8:07:CD:52:39:E5:01:94:9D:15:9E:70:6B:6E:40:4B:09:3B
Authority key identifier: 9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B
Certificate issuer:       /CN=9a076332bbd280f0852db69f615b0f149914831b
Certificate serial:       0193580949AAE826D9C815B79D72BF8CDE67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
Manifest number:          FE
Signing time:             Sat 23 Nov 2024 08:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:23 +0000
Files and hashes:         1: mgdjMrvSgPCFLbafYVsPFJkUgxs.crl (hash: rbnfCf4P6GA57i78iWMxcxqEGj/rtb5+qTeiO5VXwYY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:49:aa:e8:26:d9:c8:15:b7:9d:72:bf:8c:de:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a076332bbd280f0852db69f615b0f149914831b
        Validity
            Not Before: Nov 23 08:00:23 2024 GMT
            Not After : Nov 24 08:00:23 2024 GMT
        Subject: CN=b90ba807cd5239e501949d159e706b6e404b093b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:04:ca:15:d1:23:5a:ff:3f:73:7b:7d:02:8e:
                    88:f7:7f:aa:b0:60:68:3f:cb:ce:60:ce:16:57:0c:
                    0a:03:0c:97:00:c8:e2:73:b1:72:fd:77:46:7e:2c:
                    c5:8e:f7:53:5a:dd:aa:c0:68:1b:be:a0:ee:0b:a7:
                    17:de:6c:52:a0:7b:2a:08:3c:ff:60:fc:0d:a8:3a:
                    d2:ce:fb:e5:ad:7e:35:ab:2b:40:30:6d:bb:fd:43:
                    17:7c:33:74:47:89:42:94:cd:be:d8:9a:2c:d1:1a:
                    7b:11:b0:50:a4:b2:98:4e:87:9c:dc:96:55:87:da:
                    14:58:4a:71:f4:eb:5b:7d:92:fb:6e:8e:64:7a:b4:
                    52:b7:f2:90:d2:a7:04:53:b2:77:65:64:23:08:fb:
                    7c:ae:3d:da:6e:84:ff:ec:eb:48:18:11:e9:4c:c8:
                    96:31:34:62:c0:6f:23:d9:8c:62:66:61:8d:42:28:
                    04:cf:02:25:72:b7:6f:ac:cf:f5:db:32:ee:bc:40:
                    7f:f5:0e:3b:df:e2:c0:e2:c5:60:5b:6a:59:59:73:
                    a1:2e:71:f1:2c:e4:e5:60:9c:83:6c:2c:54:79:0e:
                    88:95:67:8d:5c:c9:51:da:cb:e9:31:dd:5e:4b:4d:
                    1a:d8:f0:17:d3:9a:7e:83:ee:2b:6b:b9:d3:f2:fb:
                    41:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0B:A8:07:CD:52:39:E5:01:94:9D:15:9E:70:6B:6E:40:4B:09:3B
            X509v3 Authority Key Identifier:
                keyid:9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:5c:43:bd:f4:98:bd:22:96:7f:07:84:09:a2:d5:14:9c:49:
         c7:19:4c:5c:9d:e6:36:2b:a3:86:f0:04:6e:04:25:12:c4:56:
         05:76:53:b5:11:93:72:fc:b9:db:47:9d:f2:19:81:7c:b4:b3:
         2d:be:99:80:0c:04:a9:07:3b:40:d2:cb:a0:19:17:87:ee:97:
         d5:a2:40:07:e3:9d:42:fe:f9:95:62:d2:e3:d1:58:c5:fc:87:
         b6:dd:4a:c7:43:9e:e2:62:38:34:8b:63:13:e4:12:64:9f:46:
         05:b2:7d:8e:36:9a:4e:08:e7:b4:db:f0:8b:55:ed:7b:5b:90:
         fb:88:17:30:0b:6a:06:b9:10:3c:47:45:8f:2d:1c:8e:13:86:
         1d:41:57:b3:ba:38:8f:51:06:13:1e:3a:1e:a2:98:a6:5c:41:
         ab:77:e0:77:d9:1a:3d:69:80:1d:1f:28:d8:b6:d0:50:3c:93:
         d1:57:52:c1:fa:5e:dc:31:b0:e7:7e:df:dd:ce:6e:f7:c5:d1:
         63:f4:b1:d6:45:06:79:7d:90:26:61:8b:95:36:9a:f1:65:0b:
         7e:0f:60:19:4d:f2:ad:71:c0:d4:37:83:82:78:cb:45:36:de:
         75:f0:41:55:4b:7f:cc:0d:65:25:12:fc:70:8f:11:fc:dd:24:
         1e:4f:60:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----