Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.mft
File:                     V9mi-itxfqefxbJ5LV9VvW7qKQY.mft (raw, json)
Hash identifier:          UjXUr31VkPK+fXaEbTWgOaFcfkvxBbL7rATlaaSsuwE=
Subject key identifier:   3F:DE:3C:BE:20:89:34:DB:F0:0C:CB:A5:C4:85:9B:56:77:9A:E0:F2
Authority key identifier: 57:D9:A2:FA:2B:71:7E:A7:9F:C5:B2:79:2D:5F:55:BD:6E:EA:29:06
Certificate issuer:       /CN=57d9a2fa2b717ea79fc5b2792d5f55bd6eea2906
Certificate serial:       0193696AC0CC9AAD4393D91AB54224320445
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9mi-itxfqefxbJ5LV9VvW7qKQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.mft
Manifest number:          0221
Signing time:             Tue 26 Nov 2024 17:00:23 +0000
Manifest this update:     Tue 26 Nov 2024 17:00:23 +0000
Manifest next update:     Wed 27 Nov 2024 17:00:23 +0000
Files and hashes:         1: V9mi-itxfqefxbJ5LV9VvW7qKQY.crl (hash: D2K1CAPdtEzkAmlYGoOilVBjhRhf/ljAFCOlocJQRIM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9mi-itxfqefxbJ5LV9VvW7qKQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 17:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:6a:c0:cc:9a:ad:43:93:d9:1a:b5:42:24:32:04:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d9a2fa2b717ea79fc5b2792d5f55bd6eea2906
        Validity
            Not Before: Nov 26 17:00:23 2024 GMT
            Not After : Nov 27 17:00:23 2024 GMT
        Subject: CN=3fde3cbe208934dbf00ccba5c4859b56779ae0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:25:00:de:a7:8c:be:7c:c4:96:f8:ea:8e:
                    aa:4a:90:2f:84:e6:17:dd:5f:9c:4f:0d:75:55:06:
                    5b:1e:4d:6c:c1:68:83:4b:f0:10:f1:17:bb:ba:fb:
                    d5:ad:2b:b1:58:3f:cf:81:75:fb:bb:7a:50:cc:25:
                    54:a7:13:d6:b1:ee:05:e2:a9:38:9b:d1:84:62:04:
                    74:23:93:40:7a:70:5b:ed:0b:81:dc:83:82:4f:73:
                    d3:b1:5f:fa:ea:0c:23:9c:54:dd:be:5e:fe:87:2c:
                    df:c6:e2:57:fb:c7:89:09:ab:16:87:15:44:02:8a:
                    50:e7:2a:ce:22:b6:33:59:45:26:ca:57:99:ac:c4:
                    80:72:fb:c8:de:f9:d4:a7:b9:6f:1a:bf:7c:6f:9b:
                    64:2d:31:bf:8f:e7:1c:ed:b3:5e:c2:cd:c5:1e:a0:
                    b8:15:37:e4:ff:ee:bf:c9:0e:3f:d2:bc:6f:15:eb:
                    63:50:d3:8b:fc:3b:e9:45:aa:eb:bb:65:d6:3b:25:
                    98:c0:ba:4f:14:d4:08:e7:da:99:2e:76:25:04:c3:
                    03:ed:55:20:50:4c:34:0e:0a:a8:f4:5c:a9:7c:5c:
                    ee:fb:a4:f8:6f:ca:3f:9e:55:d1:0d:58:b9:15:64:
                    8a:e1:ba:1f:68:84:b5:1b:75:df:1f:d0:69:45:9d:
                    ee:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DE:3C:BE:20:89:34:DB:F0:0C:CB:A5:C4:85:9B:56:77:9A:E0:F2
            X509v3 Authority Key Identifier:
                keyid:57:D9:A2:FA:2B:71:7E:A7:9F:C5:B2:79:2D:5F:55:BD:6E:EA:29:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9mi-itxfqefxbJ5LV9VvW7qKQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:46:d6:75:28:30:09:3f:9e:3d:40:5a:45:b5:ed:45:ba:08:
         a9:34:ff:44:28:24:f9:53:e3:8d:9b:25:f7:77:e5:f7:5a:bd:
         e0:1e:f4:48:9b:09:7c:bf:89:d7:1b:92:26:a0:6d:c0:5c:68:
         f6:ef:1b:28:55:d5:23:63:00:1c:d0:29:23:c3:b9:da:3f:96:
         13:c3:86:35:04:15:c1:de:eb:a4:73:7a:1e:fb:fc:57:9f:8c:
         d9:79:30:0b:aa:5a:a4:fa:0c:65:00:e6:2f:1b:ca:1c:18:cd:
         c8:d4:b6:c3:c1:45:e9:3e:a2:c6:30:e4:cb:e3:af:2f:d9:1b:
         40:b7:c5:04:1a:b1:5c:9c:04:90:a5:71:5b:03:da:92:e6:05:
         4c:cf:97:f4:10:59:c9:5b:38:24:11:78:50:fb:30:b1:88:57:
         30:e8:75:8e:4a:b7:8d:a6:02:88:8b:65:0a:07:dc:54:d4:f2:
         db:b2:af:08:86:2c:df:d5:d1:6b:c8:6b:34:dc:b8:04:4c:26:
         a6:ad:ce:ef:c5:bb:88:34:35:4c:b3:4b:f1:a8:7f:d4:52:f2:
         fb:4f:a6:3d:27:03:65:95:e1:99:4b:7f:c9:20:2a:ff:d4:58:
         9a:a8:4f:95:fd:85:44:cd:b8:91:67:9d:80:e1:0f:df:46:78:
         f9:b8:bb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----