Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
File:                     GGDjbiWx26EXgHXIA8KaBEzs_eE.mft (raw, json)
Hash identifier:          Nw9HepnsPJ9ZkPgF4Q+/meg7oI8Bvxpd0+8TIjNAxBo=
Subject key identifier:   DA:3E:DC:D4:E8:D2:BD:EA:E4:A1:69:A0:B2:E0:0D:76:8B:15:21:FB
Authority key identifier: 18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1
Certificate issuer:       /CN=1860e36e25b1dba1178075c803c29a044cecfde1
Certificate serial:       018F22DF1A3A8AD3022AB28E222E5C7FD13A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
Manifest number:          0465
Signing time:             Sun 28 Apr 2024 04:03:17 +0000
Manifest this update:     Sun 28 Apr 2024 04:03:17 +0000
Manifest next update:     Mon 29 Apr 2024 04:03:17 +0000
Files and hashes:         1: GGDjbiWx26EXgHXIA8KaBEzs_eE.crl (hash: m/MzF8yuYRADz0dDSJEjpHzcjDYuDWXIpQGBdsf5oM4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 04:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:df:1a:3a:8a:d3:02:2a:b2:8e:22:2e:5c:7f:d1:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1860e36e25b1dba1178075c803c29a044cecfde1
        Validity
            Not Before: Apr 28 04:03:17 2024 GMT
            Not After : Apr 29 04:03:17 2024 GMT
        Subject: CN=da3edcd4e8d2bdeae4a169a0b2e00d768b1521fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:35:ef:ce:7f:b0:e4:c9:0f:01:b1:2c:8e:16:
                    5e:1f:6a:61:42:58:d5:af:dd:c7:c0:53:ba:25:05:
                    5b:dd:93:ab:7b:3f:15:74:4e:93:a5:07:58:8e:b6:
                    3c:ea:69:cb:bd:0c:e6:42:92:4b:6b:1f:85:c3:0b:
                    0a:07:bc:eb:de:1c:78:f9:e0:a5:12:11:26:53:ac:
                    35:90:5d:82:5a:37:ad:5e:92:f9:9a:a7:9f:83:11:
                    9e:fa:43:dc:1c:5b:b6:8d:ba:ab:f2:0a:a2:cf:79:
                    1f:86:96:28:7c:7a:9e:c7:89:d7:4f:78:12:bf:74:
                    85:61:cd:27:d4:34:92:a2:36:f2:28:47:8d:63:61:
                    50:b9:80:5f:97:a2:cf:89:93:39:4c:54:2d:a1:f0:
                    fc:c9:d9:1d:74:18:88:3b:54:79:08:a3:b5:31:a6:
                    75:0a:6c:84:3e:e8:d2:d4:a7:c2:2f:db:82:5f:2d:
                    36:49:aa:ae:c1:31:5a:05:f8:3b:89:cd:63:3a:e7:
                    09:d2:df:aa:16:bf:d3:7a:91:0f:3a:ff:9c:57:9b:
                    8b:fe:21:83:54:fc:52:e9:b7:00:bc:24:55:d3:22:
                    29:07:0e:8a:3a:82:b1:4e:c5:9e:95:42:61:ee:87:
                    1b:cd:7c:d8:4d:99:0b:e4:72:45:59:b3:01:71:5d:
                    5f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3E:DC:D4:E8:D2:BD:EA:E4:A1:69:A0:B2:E0:0D:76:8B:15:21:FB
            X509v3 Authority Key Identifier:
                keyid:18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:8f:49:4e:87:a4:d4:26:d2:ff:c7:84:b2:0f:35:15:0b:b4:
         44:e2:52:8c:56:ff:58:57:12:c1:a3:86:0b:08:2c:39:02:4e:
         4b:04:3a:0a:4c:fc:d2:2c:4f:10:3f:89:98:97:2d:a2:fb:d4:
         d0:6d:dc:0f:10:cf:7c:78:01:60:61:fe:55:79:1d:4d:85:58:
         82:56:cb:3c:0f:54:32:85:2d:dc:a0:94:6c:ac:84:ab:cb:08:
         51:84:54:72:07:5d:c6:1d:55:c0:b2:7b:79:a9:5f:a5:67:13:
         19:d6:38:51:8a:c8:7c:53:8e:dc:d1:d9:d6:e9:c8:6a:a6:ed:
         53:b0:a9:11:74:fb:84:60:66:33:f4:57:c6:5b:69:30:7c:c5:
         1e:f4:4b:a8:2d:87:9e:f0:f5:f4:c5:e0:84:dc:21:e2:9f:5f:
         d7:00:87:76:10:a4:5a:db:68:7a:00:b2:b0:52:5a:8e:5b:72:
         31:ae:08:6a:b5:c2:ce:49:90:2b:d0:be:2b:91:0d:d4:09:1c:
         19:d9:53:97:ef:c1:7f:77:9d:91:68:46:be:b6:f5:c9:c8:62:
         5b:d4:4e:11:79:79:f9:d2:a3:ca:1a:59:57:9a:9a:39:2e:82:
         4b:6a:66:7f:74:60:db:a7:c9:f7:d6:33:38:f2:af:52:d7:07:
         0a:a2:51:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----