Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
File:                     4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft (raw, json)
Hash identifier:          CVhFV9Da5LYhUsOsfupYv+6FxXHer7D7QzWAUopClis=
Subject key identifier:   0B:91:E6:0A:72:04:A4:9B:03:C5:32:D4:67:65:5E:5C:6D:41:BE:F9
Authority key identifier: E3:26:81:CF:D9:7C:16:44:EF:F7:51:E0:F1:E0:AA:05:3C:05:C0:0F
Certificate issuer:       /CN=e32681cfd97c1644eff751e0f1e0aa053c05c00f
Certificate serial:       0194060F01FD6DA4C0E5E9BB310C285102B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
Manifest number:          012D
Signing time:             Fri 27 Dec 2024 03:00:34 +0000
Manifest this update:     Fri 27 Dec 2024 03:00:34 +0000
Manifest next update:     Sat 28 Dec 2024 03:00:34 +0000
Files and hashes:         1: 4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl (hash: Hw8hK+SzKW7EtHR7ya42Sn8FJrPQn51Wwd7uueWR91o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:0f:01:fd:6d:a4:c0:e5:e9:bb:31:0c:28:51:02:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e32681cfd97c1644eff751e0f1e0aa053c05c00f
        Validity
            Not Before: Dec 27 03:00:34 2024 GMT
            Not After : Dec 28 03:00:34 2024 GMT
        Subject: CN=0b91e60a7204a49b03c532d467655e5c6d41bef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e8:f0:c7:9c:e8:03:28:1b:8d:49:b8:19:eb:
                    8e:e6:d0:90:8a:32:60:d2:77:75:62:2f:a0:92:76:
                    3d:17:1a:8d:39:eb:0c:af:fd:3d:38:c0:a2:c7:8d:
                    ab:d8:7a:c0:7e:c1:cd:52:12:fb:73:c4:2b:f1:af:
                    bb:12:f9:2b:c6:f0:fd:40:56:cf:6c:b3:b0:5f:2c:
                    92:98:30:c9:c6:49:3a:83:57:6f:2d:88:9d:d6:6d:
                    9d:57:d8:10:aa:6b:dd:f5:51:d8:85:a5:d3:c6:73:
                    a0:b3:00:a3:59:cf:d3:7d:f7:45:53:17:c9:14:f2:
                    02:fc:4f:e3:1e:4f:4e:47:43:ef:3d:46:16:2b:e2:
                    27:fd:d6:45:36:9e:24:0e:12:b0:f1:6d:f1:e5:0c:
                    0f:7f:db:50:cf:69:ec:bc:2d:97:7e:cf:51:d6:20:
                    d3:d8:47:17:d5:be:2f:ac:0c:9c:70:f8:de:ed:35:
                    80:0c:e2:b2:82:fd:ae:14:d1:f9:35:e7:42:b0:cc:
                    35:da:3f:c4:bb:56:14:fa:df:af:f9:6e:fb:49:e6:
                    6b:65:94:b7:7f:3a:9a:eb:e0:fa:f0:19:a9:6d:37:
                    36:c4:e4:2d:06:1a:51:82:0f:0c:d0:21:1b:57:c9:
                    13:02:74:96:45:3d:4f:c8:0a:8b:de:bb:18:65:72:
                    8b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:91:E6:0A:72:04:A4:9B:03:C5:32:D4:67:65:5E:5C:6D:41:BE:F9
            X509v3 Authority Key Identifier:
                keyid:E3:26:81:CF:D9:7C:16:44:EF:F7:51:E0:F1:E0:AA:05:3C:05:C0:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:21:9e:f6:85:23:da:b2:b0:44:46:90:1b:43:0c:ab:71:a0:
         2b:8f:e6:23:8d:7a:30:6f:d4:6a:26:90:02:ae:a1:50:44:80:
         ca:81:80:3f:67:77:5d:62:03:d5:93:57:70:63:7a:0b:42:99:
         26:bd:08:d7:de:73:f1:2d:1b:53:b2:60:e9:26:38:57:93:a3:
         c5:63:05:db:43:47:a0:82:5c:ca:9a:7e:dd:68:44:ab:df:e7:
         83:ea:83:3b:21:f5:b3:98:af:ce:c5:67:c4:44:fd:7d:dd:b5:
         5a:91:f9:50:13:53:2d:44:72:90:ef:66:91:5b:5c:64:3a:0a:
         07:d7:ce:54:59:76:db:6f:37:58:2d:5d:bc:21:c3:2c:e2:43:
         c4:fb:2b:f8:a8:78:cd:73:e0:e5:ec:98:c5:51:94:07:79:7f:
         64:5e:47:86:4f:97:5e:bc:8a:46:c1:fe:eb:23:8c:0b:fb:da:
         a9:71:0e:b9:7e:fd:1a:ac:a1:a6:a4:1d:55:71:5a:20:a1:11:
         74:d5:56:85:6d:41:ad:1a:2f:05:7c:0b:60:fe:07:f6:23:71:
         2c:bc:5f:dd:fb:3f:f7:bd:77:ec:a8:45:21:1b:ad:96:12:47:
         35:e0:0d:60:3a:53:8f:cb:37:5e:1c:c8:ea:70:77:0f:9d:35:
         a8:76:4d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----