Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
File:                     GR0Irp2FEZYMPHuEweKmZiHiReE.mft (raw, json)
Hash identifier:          ge/SnUWiT3wp1v1lp5hXFAvJC7yWVeuyKCiy1vbm6GQ=
Subject key identifier:   95:1E:D4:98:CB:C7:08:99:16:79:29:E5:51:32:F7:B1:0A:F6:B6:6A
Authority key identifier: 19:1D:08:AE:9D:85:11:96:0C:3C:7B:84:C1:E2:A6:66:21:E2:45:E1
Certificate issuer:       /CN=191d08ae9d8511960c3c7b84c1e2a66621e245e1
Certificate serial:       01940722205FD43A467F499D54CE38985620
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
Manifest number:          13C8
Signing time:             Fri 27 Dec 2024 08:01:04 +0000
Manifest this update:     Fri 27 Dec 2024 08:01:04 +0000
Manifest next update:     Sat 28 Dec 2024 08:01:04 +0000
Files and hashes:         1: GR0Irp2FEZYMPHuEweKmZiHiReE.crl (hash: euXRk1E/cuN8UhbPgMGMUGRXQ/bmQ0QjpZremTShQFU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:22:20:5f:d4:3a:46:7f:49:9d:54:ce:38:98:56:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191d08ae9d8511960c3c7b84c1e2a66621e245e1
        Validity
            Not Before: Dec 27 08:01:04 2024 GMT
            Not After : Dec 28 08:01:04 2024 GMT
        Subject: CN=951ed498cbc70899167929e55132f7b10af6b66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:51:c1:ab:42:eb:12:d3:c7:de:02:06:40:55:
                    b7:10:7c:81:54:dd:10:bf:8d:82:c7:a1:c2:98:cb:
                    9d:22:d3:ad:f7:c4:f0:06:f1:4d:4d:eb:2b:29:ab:
                    7e:e3:cf:d9:c3:a2:04:49:9b:f1:a2:84:3e:72:cc:
                    a6:70:62:49:79:3a:d7:bc:f7:65:bc:39:f4:60:c1:
                    78:a7:4f:33:38:cf:68:3a:00:cb:ed:10:74:81:79:
                    d1:3a:e1:e7:2c:9e:ab:61:bb:41:f9:d7:aa:73:35:
                    0c:0c:e9:49:42:26:a1:f6:d9:2f:7d:64:59:6e:78:
                    be:5c:93:5c:1a:98:81:1f:13:4e:eb:45:1c:99:bd:
                    f2:f4:f0:8a:f4:39:62:f1:7b:07:ef:ca:5c:d5:52:
                    f2:0c:59:08:e5:81:07:3b:c5:f5:3f:a9:b1:c6:77:
                    5c:7b:c0:54:14:c4:e6:4f:50:c0:49:ef:2a:a6:1f:
                    ab:cd:27:dd:01:33:0c:f1:99:cc:e4:ed:d8:c0:0f:
                    ca:27:1e:b7:b7:cf:c5:2b:a9:28:da:e0:6c:7e:b8:
                    1c:17:f8:6d:3f:19:47:dc:5d:13:f0:dc:83:38:1e:
                    fc:ce:42:d1:1a:4d:4d:a4:8e:b1:03:6d:60:bc:fe:
                    c6:82:75:f6:93:e2:a4:82:74:80:e6:04:7a:d5:f7:
                    7a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1E:D4:98:CB:C7:08:99:16:79:29:E5:51:32:F7:B1:0A:F6:B6:6A
            X509v3 Authority Key Identifier:
                keyid:19:1D:08:AE:9D:85:11:96:0C:3C:7B:84:C1:E2:A6:66:21:E2:45:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:94:f8:2f:30:dd:ce:00:04:e9:f0:86:d8:d9:f9:89:0d:a1:
         d4:76:bb:90:57:59:5d:af:f9:d9:0d:22:ae:cc:71:74:ae:1c:
         b1:fb:a4:da:bd:1c:8d:4f:bd:c8:4c:19:f1:1f:ba:87:e2:88:
         1a:17:e6:92:ae:59:3a:4b:16:0e:c8:15:29:20:a7:0e:9b:62:
         d1:a5:6f:01:66:33:c3:dc:04:e5:99:ae:a7:2e:a3:92:21:28:
         fb:e4:fa:37:c4:dd:97:07:f4:11:8b:dd:d3:66:0b:b9:bb:6c:
         ac:52:a6:af:f1:5c:8d:9b:90:c9:02:6b:1d:4a:98:81:14:75:
         d8:40:34:b4:f8:a9:73:a3:9a:f7:b1:6e:da:19:50:f9:08:db:
         ee:de:b0:1b:5c:45:98:09:31:4d:7b:3a:9f:c8:f2:98:8d:1b:
         32:d7:0f:93:81:7f:38:f7:47:f6:1f:46:2b:ab:50:eb:a2:39:
         30:e5:e4:ce:aa:6e:2a:e6:9c:da:d2:e4:7c:ec:80:88:f4:d1:
         49:40:66:1b:1f:0c:57:ab:c3:1f:15:39:56:90:e9:e2:cb:00:
         b9:0b:2f:07:8e:9f:f4:ff:dc:64:c9:9c:9f:88:c0:65:c7:20:
         6b:d0:34:96:76:f2:1e:f9:71:58:25:ae:76:91:e0:a4:72:e3:
         86:69:d6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----