Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
File:                     gWiVcrIAukh5OByFdCdCZVkqFKs.mft (raw, json)
Hash identifier:          znhjzVxcHWiEiKtAsBFCH1JLBzfLqweopOsgtq7731s=
Subject key identifier:   A8:EC:42:C4:F4:3C:9D:6D:AE:C5:1F:9D:64:58:94:1B:5D:E7:80:34
Authority key identifier: 81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB
Certificate issuer:       /CN=81689572b200ba4879381c8574274265592a14ab
Certificate serial:       019655375B6C4DA15DA6EF6DAC228DD867C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
Manifest number:          14FA
Signing time:             Sun 20 Apr 2025 22:00:13 +0000
Manifest this update:     Sun 20 Apr 2025 22:00:13 +0000
Manifest next update:     Mon 21 Apr 2025 22:00:13 +0000
Files and hashes:         1: gWiVcrIAukh5OByFdCdCZVkqFKs.crl (hash: iH4k9aLBdDOPW3wZMe+qD1PgkXG2QWNbVe5bfwK4I0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:37:5b:6c:4d:a1:5d:a6:ef:6d:ac:22:8d:d8:67:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81689572b200ba4879381c8574274265592a14ab
        Validity
            Not Before: Apr 20 22:00:13 2025 GMT
            Not After : Apr 21 22:00:13 2025 GMT
        Subject: CN=a8ec42c4f43c9d6daec51f9d6458941b5de78034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e3:be:f5:18:40:e6:d4:cb:17:bf:16:37:38:
                    65:2b:1b:87:3f:52:ed:25:a1:7b:2d:c4:31:4f:e1:
                    73:8d:a7:9a:5b:d8:64:22:5b:9c:4b:fd:7a:e3:5c:
                    7d:1a:c5:c8:cd:28:24:28:a6:76:42:b4:4d:8d:e9:
                    f1:1a:c6:84:6e:ac:53:e8:5e:13:e8:31:b8:fa:6f:
                    9d:6d:69:ea:7d:8e:11:3e:25:8d:0d:81:d8:c2:aa:
                    fd:dc:67:bf:9e:ce:e8:a1:4f:cf:d8:6a:80:d8:e1:
                    58:f3:83:f2:a2:b6:f5:a9:17:0b:72:c7:aa:96:41:
                    8c:95:18:60:32:e0:9b:f2:65:f5:92:dc:7d:b3:92:
                    86:95:56:0d:64:fc:35:5f:f3:47:36:0d:21:8f:6e:
                    dc:ce:7b:fd:1e:d1:f1:a3:fd:06:9f:2d:f5:24:ff:
                    01:fb:97:9e:06:03:d9:2b:6a:c8:31:42:55:84:7d:
                    47:81:bf:7f:d0:1f:b8:7a:46:94:99:01:03:23:e6:
                    d3:55:07:e5:f3:d1:5f:a6:5a:c0:e9:d2:fd:25:68:
                    2e:2c:72:b7:5f:ae:bc:f7:17:f6:24:a7:d4:a2:c4:
                    b1:37:fe:2a:53:ee:02:84:57:e7:29:f6:04:d8:57:
                    92:60:ef:30:bd:5b:ff:df:34:32:50:9f:4c:1b:b1:
                    f1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EC:42:C4:F4:3C:9D:6D:AE:C5:1F:9D:64:58:94:1B:5D:E7:80:34
            X509v3 Authority Key Identifier:
                keyid:81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f2:65:ff:84:9f:9c:df:d3:97:26:e1:9e:65:38:33:b9:f7:
         1d:c4:76:ce:c7:bb:cc:d7:6c:fe:fe:fa:ce:bb:c4:7e:9c:b2:
         42:f8:45:a5:1b:86:71:b6:f7:a1:69:cc:fe:3c:8a:58:4d:da:
         93:71:ed:61:2d:97:93:66:3c:ba:3d:66:8a:f8:62:8b:02:c6:
         da:a1:dd:3c:30:50:5c:f3:73:eb:0a:b3:02:aa:09:67:20:5b:
         59:25:97:75:eb:b1:d0:1e:12:ed:b1:a6:c0:0a:0c:9c:80:2f:
         c1:92:ee:76:f4:dc:26:09:34:a9:9d:8c:ed:8a:e3:13:b9:9d:
         e2:d6:78:bd:10:a0:b8:11:8b:37:e2:17:3a:d4:2d:24:e7:99:
         c0:28:96:9b:b0:34:c9:46:d8:53:78:4b:ee:1b:95:b6:66:01:
         32:bc:58:14:21:30:24:bf:16:a3:e1:54:f6:0e:32:5f:86:bb:
         be:c1:2b:26:f1:97:de:ab:35:ad:c7:15:99:01:1d:1f:af:ca:
         a4:62:60:04:f6:75:5b:c9:3e:ba:2a:95:17:b2:b5:30:6f:01:
         38:ee:33:69:f6:f3:99:e6:ef:40:29:2b:d2:8b:10:bf:43:41:
         bd:da:19:15:b0:fa:3d:f1:d3:9a:52:ac:38:0e:c4:ae:34:0b:
         36:91:31:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----