Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
File:                     GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft (raw, json)
Hash identifier:          jNzbVx2XBTJId/DJWpPkfypy6fYQaF6YnQfZWOfm+Pw=
Subject key identifier:   FD:3A:8D:F3:01:98:64:FB:7D:D5:22:70:2B:79:46:0D:EF:B6:79:A0
Authority key identifier: 19:66:28:61:7C:00:E8:DF:F2:0C:A6:69:93:13:AF:79:FA:D0:AF:C6
Certificate issuer:       /CN=196628617c00e8dff20ca6699313af79fad0afc6
Certificate serial:       0193568A204131E7C08A6F5F2E71BED73E77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
Manifest number:          0C36
Signing time:             Sat 23 Nov 2024 01:01:53 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:53 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:53 +0000
Files and hashes:         1: GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl (hash: 6JU9850T3YfHjM9RDHbFPah55UGlBZljL2PmCB0e3ck=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:20:41:31:e7:c0:8a:6f:5f:2e:71:be:d7:3e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196628617c00e8dff20ca6699313af79fad0afc6
        Validity
            Not Before: Nov 23 01:01:53 2024 GMT
            Not After : Nov 24 01:01:53 2024 GMT
        Subject: CN=fd3a8df3019864fb7dd522702b79460defb679a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:3c:87:3d:5c:be:97:7e:b0:b8:ef:14:77:0a:
                    cd:c4:4e:9b:96:97:8b:4a:51:24:bd:9a:80:5b:54:
                    2a:39:b0:6f:28:f6:0e:8f:6e:a0:ff:97:17:63:8d:
                    ff:b4:f3:05:07:a2:44:d2:cd:79:fd:4c:74:e2:64:
                    d0:8b:71:55:76:df:74:21:97:5f:e4:d9:4e:d1:1b:
                    8a:27:81:6d:c7:f1:ff:eb:39:95:6e:a4:fc:12:b2:
                    93:b7:57:c7:6a:3f:d9:4a:47:1c:da:14:02:88:c4:
                    4c:9b:44:cd:3b:e5:e7:e8:74:2f:9c:77:74:a9:10:
                    a1:78:0a:09:da:7a:b9:e7:0e:3e:b4:88:db:fc:f5:
                    d5:0d:db:74:69:dd:87:d1:51:dc:4d:d1:3a:8f:3c:
                    cb:ce:13:76:09:01:85:94:aa:8d:2e:7b:e5:96:53:
                    41:3c:39:76:13:a6:da:d3:f5:15:4f:e8:01:8b:34:
                    95:bd:fd:b8:b6:26:65:8f:89:8a:e8:4e:ab:08:a0:
                    f5:be:d7:ac:39:84:96:c4:37:a0:02:e0:e4:c8:24:
                    bd:14:53:cf:48:e8:e9:db:ca:7e:7d:a3:42:b2:3a:
                    fb:df:0a:cb:d8:c4:9a:62:73:75:a1:63:02:33:2a:
                    81:07:34:b0:ec:51:b8:c5:d5:a2:1b:16:b6:4c:3e:
                    9b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3A:8D:F3:01:98:64:FB:7D:D5:22:70:2B:79:46:0D:EF:B6:79:A0
            X509v3 Authority Key Identifier:
                keyid:19:66:28:61:7C:00:E8:DF:F2:0C:A6:69:93:13:AF:79:FA:D0:AF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:0b:41:d4:fd:65:5e:77:26:88:f5:d1:17:b0:f1:4b:ea:0d:
         26:5b:4a:30:af:98:67:94:32:46:69:e8:f1:60:b0:2e:07:ca:
         03:86:a7:5a:88:af:96:6d:5a:27:37:1d:61:78:61:d6:30:eb:
         ff:72:54:ec:79:04:89:1c:34:be:0b:0a:be:d2:c0:ce:23:01:
         1b:a2:5a:61:f9:c8:44:9b:05:f6:03:dc:ab:d0:e3:d8:ea:1b:
         70:d0:29:ed:2f:f1:df:58:8d:11:ab:cf:93:54:7a:59:cd:3f:
         15:a7:31:9a:c8:c1:d6:2c:aa:8f:71:e0:03:39:38:ed:ae:bd:
         ee:ce:21:a4:8a:c7:99:c0:92:59:cd:6a:bc:15:22:59:2e:cb:
         bf:46:09:bb:8c:4e:51:04:ac:48:c7:f7:27:3b:ff:3c:ec:73:
         b6:8e:65:db:15:2b:d6:29:53:ae:da:4e:9b:49:59:47:97:0b:
         3b:1c:17:d7:ca:00:a8:9b:28:bc:25:6a:51:9f:90:0d:a8:5c:
         d9:7e:40:e1:3b:8f:4d:1d:7d:11:43:7d:59:5b:dc:7b:1e:72:
         ef:13:e7:ab:fd:48:f7:88:0c:5c:e2:52:6f:c2:58:bf:fd:c6:
         89:09:a5:34:2a:11:94:e5:7a:f3:13:80:c3:93:21:8c:43:46:
         5b:7a:50:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----