Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
File:                     GjHcqIfYvmBgGdChWToW_9Of1pI.mft (raw, json)
Hash identifier:          yBZKDXABvN2BWkOqSkxgr/8PkB5rnDAebDklGeaZWqU=
Subject key identifier:   BA:39:1F:36:33:4F:1D:7A:2A:9B:17:A7:28:09:72:EA:36:98:3D:E7
Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
Certificate issuer:       /CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Certificate serial:       01935A65E9FEE4070426743005D0FA15BC84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
Manifest number:          0557
Signing time:             Sat 23 Nov 2024 19:00:48 +0000
Manifest this update:     Sat 23 Nov 2024 19:00:48 +0000
Manifest next update:     Sun 24 Nov 2024 19:00:48 +0000
Files and hashes:         1: GjHcqIfYvmBgGdChWToW_9Of1pI.crl (hash: tPNklRQPxYEBZ0JI9wzvSfilKboy8xWH1E7l7tE/FXo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:65:e9:fe:e4:07:04:26:74:30:05:d0:fa:15:bc:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692
        Validity
            Not Before: Nov 23 19:00:48 2024 GMT
            Not After : Nov 24 19:00:48 2024 GMT
        Subject: CN=ba391f36334f1d7a2a9b17a7280972ea36983de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8c:10:99:3f:55:34:ec:d8:ba:94:79:64:d9:
                    1a:1d:8a:5c:f5:f9:27:00:c2:b9:b6:5c:2b:1b:46:
                    5f:b4:c1:7f:d9:02:16:68:72:5a:a7:e0:24:90:a3:
                    2b:c7:ca:39:52:2d:94:83:2a:dc:c4:a8:02:76:a2:
                    03:26:c9:14:0c:06:d2:fc:a4:54:3b:ff:93:c0:c9:
                    95:63:eb:a1:48:f1:e6:0e:8a:3d:fa:38:69:2a:49:
                    e3:62:59:07:27:e4:e8:d4:ce:b4:e7:98:75:c0:89:
                    5b:0a:20:f2:74:2e:96:93:65:1a:d7:8b:27:f5:d9:
                    c8:8f:56:b5:44:3d:21:12:01:81:c5:42:4c:72:0e:
                    c7:0c:4e:4f:29:6d:e0:30:5b:8d:a8:8c:d0:06:83:
                    82:8b:9c:e5:a2:fc:08:10:73:23:36:5a:8f:de:24:
                    dc:63:75:2a:0c:6b:f8:98:52:55:3a:87:fb:eb:89:
                    a1:52:a4:a7:60:ca:f1:7e:33:95:3b:ef:68:14:a8:
                    af:94:72:05:e2:bd:d1:93:de:d6:c6:1b:0d:ac:b5:
                    b1:cd:c4:17:6a:00:78:7f:2c:29:d0:dc:76:0c:c0:
                    02:f8:14:ac:c4:81:ec:3e:bc:e0:88:fc:30:0d:d4:
                    ca:6f:c5:34:37:b4:cf:5a:3b:ba:74:fc:a6:1a:8c:
                    28:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:39:1F:36:33:4F:1D:7A:2A:9B:17:A7:28:09:72:EA:36:98:3D:E7
            X509v3 Authority Key Identifier:
                keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:9c:8a:b1:f2:cf:2c:c9:94:35:22:95:e2:b5:d0:6f:14:53:
         c6:97:dc:3c:59:be:5d:fe:88:e1:dd:fe:ed:76:86:c4:ed:79:
         fc:71:9f:25:76:a9:18:c7:91:12:ed:33:d9:1a:e0:bb:87:87:
         90:b5:6c:e0:73:f6:ed:85:74:f8:36:29:42:78:8c:6d:e9:b2:
         a2:94:eb:3d:1e:b0:5c:a9:be:38:32:43:8a:80:c4:34:05:b1:
         f5:46:fb:85:4a:8f:2b:d6:5c:91:83:e0:55:24:1a:32:7d:56:
         b4:fa:d9:16:66:d5:c0:70:74:df:51:a5:5c:7d:6a:c1:6c:11:
         e9:89:54:4d:d4:6a:7f:85:80:d7:ca:9c:67:d4:af:69:5f:bf:
         c3:3a:c8:15:8f:7b:06:e2:68:3d:a0:dd:dd:29:66:b7:54:15:
         38:29:d3:b9:af:02:d1:fa:60:5c:84:0d:a4:d9:18:a1:e8:26:
         e2:db:31:b0:f9:a8:c1:47:4d:85:49:16:b1:fb:dd:a6:9f:ad:
         c9:56:7c:ea:60:b6:cf:3e:6c:7e:24:7a:77:c7:79:9c:7b:2e:
         c5:b8:73:75:c6:a5:64:36:b8:8b:63:ef:75:3b:71:1f:b6:85:
         09:0d:86:67:e0:77:31:ee:db:b4:4e:1b:74:8e:d8:9d:77:bb:
         ef:00:6d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----