Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
File:                     G9JpBH0C_otaKsnrjV_sB7GH7aE.mft (raw, json)
Hash identifier:          vdA0YGjF59nMcaU4CA3eixxfLQVHtc1fGfuYjmpAa2k=
Subject key identifier:   2E:4B:36:93:8C:67:E5:4B:B1:2B:39:6E:B1:A7:95:1F:65:6B:EA:7F
Authority key identifier: 1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
Certificate issuer:       /CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
Certificate serial:       01940721E5D3A95F134EB2319C70C4130469
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
Manifest number:          FC
Signing time:             Fri 27 Dec 2024 08:00:49 +0000
Manifest this update:     Fri 27 Dec 2024 08:00:49 +0000
Manifest next update:     Sat 28 Dec 2024 08:00:49 +0000
Files and hashes:         1: G9JpBH0C_otaKsnrjV_sB7GH7aE.crl (hash: n+7j83PxWLieS9ebDz/60mCULb8gmKcSZkaL/cUtRgo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:21:e5:d3:a9:5f:13:4e:b2:31:9c:70:c4:13:04:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
        Validity
            Not Before: Dec 27 08:00:49 2024 GMT
            Not After : Dec 28 08:00:49 2024 GMT
        Subject: CN=2e4b36938c67e54bb12b396eb1a7951f656bea7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c5:f4:53:ed:a7:56:64:92:97:e1:c8:f6:48:
                    23:f3:b8:cb:bc:32:86:c7:ee:1c:af:c7:98:50:92:
                    25:72:d9:8e:76:d4:2d:c8:62:8f:7e:13:a0:30:e1:
                    36:76:0c:b4:25:ca:09:8d:d8:a3:e9:1a:c2:77:b2:
                    47:7d:8f:61:1f:5e:b7:c8:f1:19:00:cb:48:3a:cb:
                    05:74:a5:11:1f:1c:d6:6f:e9:ef:26:e5:fd:3b:25:
                    96:5d:58:40:c5:f6:c1:82:32:49:42:95:c7:94:07:
                    b7:92:00:60:79:72:00:ec:79:62:1b:e5:2d:99:7a:
                    98:ff:ea:9e:4a:68:e4:b7:0a:26:6f:83:19:5d:d0:
                    29:40:29:51:46:bf:91:1f:5f:7b:fe:f1:c2:ac:b4:
                    af:78:80:81:82:6a:8d:3e:cd:df:27:02:90:b6:a5:
                    89:a6:8c:52:a3:ca:e8:07:62:3f:a6:5e:8b:eb:47:
                    6f:ae:bd:67:f6:79:fa:bb:db:da:7e:9a:aa:f8:e7:
                    2a:14:62:54:3b:34:ac:96:0a:a6:b1:70:c3:d7:d8:
                    9b:54:b9:c6:19:fb:89:d2:e1:92:70:81:47:38:c3:
                    8f:51:bc:9e:11:7d:00:d0:9d:fa:37:f4:aa:db:4d:
                    75:a2:b7:12:a0:33:e9:6b:32:b0:8e:ea:87:9a:5f:
                    a1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4B:36:93:8C:67:E5:4B:B1:2B:39:6E:B1:A7:95:1F:65:6B:EA:7F
            X509v3 Authority Key Identifier:
                keyid:1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:1b:54:a8:f9:22:5b:05:3f:33:f5:d0:2f:61:f4:b3:cb:42:
         fa:a0:fa:2f:84:a0:84:39:9a:5e:03:d5:1a:50:f6:03:24:25:
         bc:cd:e8:b7:5e:0d:71:81:15:81:59:ea:bb:6c:d1:e5:b6:a9:
         ec:b4:50:48:29:83:c6:f3:86:8f:12:4c:db:7f:bf:04:c9:6f:
         5d:03:42:a3:d4:9f:54:88:0b:9e:36:f4:64:d0:9e:41:f3:b6:
         85:ec:45:1a:43:4f:8f:b7:c4:b5:1e:0a:f8:a8:1e:95:44:41:
         0a:87:1f:34:6d:33:58:67:d6:54:dd:87:b0:1e:af:3c:e0:8b:
         5a:ed:cb:11:8e:24:8e:7b:40:1d:58:bd:36:78:64:80:ef:0c:
         e2:e6:4f:2a:73:11:83:c8:7d:4b:10:ff:43:77:3d:41:77:e3:
         39:e8:8c:30:ab:4a:5f:f7:8b:fa:07:54:07:fe:fc:83:da:69:
         8e:90:bc:a0:11:68:7e:90:f6:0b:4d:70:74:d2:80:9b:e1:1a:
         f0:01:43:6c:d7:a2:6f:96:2a:9d:d0:f2:8c:34:ee:0b:da:07:
         7b:15:0b:a2:a3:00:1d:e4:5b:b8:71:4b:31:26:54:68:01:5b:
         e9:0e:87:a1:34:d2:e1:b5:32:ed:f6:7c:2a:91:d8:e9:26:75:
         82:fd:ac:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----