Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
File:                     NsyAK-a0xAEMds6OSE5N5_VUey8.mft (raw, json)
Hash identifier:          nwHnDjaC+oUx1A4pMCIrBYWCknViWo2J9L+yz1SfnvM=
Subject key identifier:   7A:9C:69:11:BC:B3:75:1B:EE:BB:22:63:21:82:FC:E9:2D:1A:42:E8
Authority key identifier: 36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
Certificate issuer:       /CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Certificate serial:       01935689BE461BE98124E4B260949D019E85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
Manifest number:          09B2
Signing time:             Sat 23 Nov 2024 01:01:27 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:27 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:27 +0000
Files and hashes:         1: NsyAK-a0xAEMds6OSE5N5_VUey8.crl (hash: /i5Set2bH9liCU+EsWohkQjxBcM17EqSQi9K5vwWKZU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:be:46:1b:e9:81:24:e4:b2:60:94:9d:01:9e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
        Validity
            Not Before: Nov 23 01:01:27 2024 GMT
            Not After : Nov 24 01:01:27 2024 GMT
        Subject: CN=7a9c6911bcb3751beebb22632182fce92d1a42e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:11:2a:9f:c9:13:c5:08:58:ef:99:95:74:05:
                    ae:6d:b5:73:b8:93:be:95:8a:27:e9:6a:b5:ed:d0:
                    15:fb:ca:b2:37:fb:96:7b:87:3e:d6:ea:a4:1f:3a:
                    19:fc:15:a9:8c:51:a0:07:84:c6:72:b0:3e:f7:50:
                    e6:74:c8:96:19:59:52:2c:a0:f8:43:4c:3e:94:fc:
                    6c:62:2f:42:ff:32:56:0b:ae:a9:5f:f0:ea:c2:99:
                    61:8f:ff:cf:47:65:2d:49:cc:24:56:51:9e:d6:a4:
                    ab:c0:c6:9c:db:a4:30:8b:54:c4:d9:63:a0:c5:6e:
                    e6:80:f1:84:20:2a:4b:1b:4d:da:de:8c:06:a8:c8:
                    1a:87:49:6f:04:20:2c:61:da:6b:85:e7:f7:2b:cd:
                    fa:3d:81:5c:c9:d3:d3:76:4d:d5:0b:8c:bd:45:f3:
                    51:5c:24:95:a0:d2:8c:1c:12:40:cb:cc:f0:cd:0b:
                    11:be:ab:3e:40:9a:dd:25:02:df:d9:7a:1f:af:19:
                    a7:22:ba:85:a2:ec:7c:ab:70:71:2f:b7:2d:cd:aa:
                    cf:69:07:db:ee:ad:bc:0b:11:8e:ad:02:3c:4c:36:
                    fe:4a:6a:68:0f:cb:75:68:68:30:0e:56:1e:47:2d:
                    2a:06:0f:ff:ed:9c:c2:1a:a4:cc:14:0e:5b:40:46:
                    d3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9C:69:11:BC:B3:75:1B:EE:BB:22:63:21:82:FC:E9:2D:1A:42:E8
            X509v3 Authority Key Identifier:
                keyid:36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:3a:20:be:db:2d:05:f5:1d:34:de:eb:47:b4:ae:d9:28:84:
         ef:c1:59:72:79:d6:67:ea:1e:2c:35:8d:53:61:1d:c9:a2:45:
         fb:2e:a4:ce:c2:ff:e9:40:84:92:6b:50:cf:2e:a2:df:f7:36:
         6d:a9:cd:a3:bd:67:b8:9e:68:c7:fb:9f:90:b4:a8:00:6d:0d:
         69:77:de:cb:bc:27:ca:1e:ca:38:14:df:11:6b:d3:0a:61:69:
         b8:b3:dd:6a:c6:e6:77:8d:01:14:86:b4:ec:44:5b:07:41:d6:
         2d:a0:12:5c:42:07:b0:3a:ae:67:b5:dd:d0:65:85:9a:25:ca:
         7e:9c:dc:ac:51:c0:3b:40:ca:b0:60:b4:8f:39:a8:ff:e3:5c:
         4b:80:e9:aa:ae:ee:dd:73:b3:5b:dc:f7:8c:ba:23:f4:68:00:
         98:94:c7:8a:04:a8:d3:6f:d4:f8:b2:9a:6d:89:1f:b0:2d:58:
         d1:b3:46:ea:49:c5:7c:be:4a:02:8c:8b:a9:80:15:0c:44:19:
         9b:dc:ec:9f:c0:ab:be:31:a3:fe:b6:8e:cb:7b:4e:93:e9:81:
         54:00:94:4d:55:f7:47:7e:0e:a9:be:02:62:fb:d7:bf:cf:22:
         27:ac:51:3b:27:a9:aa:1f:b8:9d:63:64:ec:aa:d1:00:b8:23:
         78:3e:ef:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----