Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/abb3ad-5805-42c2-af2f-c576c5e717c8/1/WM9XZktBa-WySLcdBD7xt4RT4F4.mft
File:                     WM9XZktBa-WySLcdBD7xt4RT4F4.mft (raw, json)
Hash identifier:          F4RpLxE28+njOVvJgfogLGLVSOCdFIw51yG6Eg5Yyf8=
Subject key identifier:   7D:A9:B6:DA:ED:B9:9D:FA:7B:F2:59:76:C5:C5:F1:26:41:60:2C:8D
Authority key identifier: 58:CF:57:66:4B:41:6B:E5:B2:48:B7:1D:04:3E:F1:B7:84:53:E0:5E
Certificate issuer:       /CN=58cf57664b416be5b248b71d043ef1b78453e05e
Certificate serial:       0194BB96F6CBD2A9E430895AE4D3018F1A95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WM9XZktBa-WySLcdBD7xt4RT4F4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/abb3ad-5805-42c2-af2f-c576c5e717c8/1/WM9XZktBa-WySLcdBD7xt4RT4F4.mft
Manifest number:          025E
Signing time:             Fri 31 Jan 2025 09:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:20 +0000
Files and hashes:         1: WM9XZktBa-WySLcdBD7xt4RT4F4.crl (hash: N/BI0ZUdrGdpIb0SuRYPPd3qSdrLJU8x8cfyVNhNOMI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/abb3ad-5805-42c2-af2f-c576c5e717c8/1/WM9XZktBa-WySLcdBD7xt4RT4F4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/abb3ad-5805-42c2-af2f-c576c5e717c8/1/WM9XZktBa-WySLcdBD7xt4RT4F4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WM9XZktBa-WySLcdBD7xt4RT4F4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:96:f6:cb:d2:a9:e4:30:89:5a:e4:d3:01:8f:1a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58cf57664b416be5b248b71d043ef1b78453e05e
        Validity
            Not Before: Jan 31 09:00:20 2025 GMT
            Not After : Feb  1 09:00:20 2025 GMT
        Subject: CN=7da9b6daedb99dfa7bf25976c5c5f12641602c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7e:ff:71:ea:38:ab:36:e7:99:fa:76:f1:60:
                    50:14:0d:b4:54:a4:b4:c7:57:94:e1:28:ae:3a:e1:
                    55:69:d1:a3:95:e7:6f:f9:1a:6c:4e:c9:41:17:49:
                    44:a5:50:8a:f2:e7:1e:2d:b2:d1:75:6a:4e:98:04:
                    88:e9:6f:b2:35:0e:2c:5f:6b:97:60:21:14:a7:c8:
                    3b:db:38:22:03:6d:32:08:c5:d5:66:3d:74:10:0a:
                    a3:d2:45:f3:56:bd:7f:6e:89:86:bc:7b:6f:4d:e9:
                    55:5f:b7:ac:13:c2:a6:58:a8:34:76:7b:09:90:9d:
                    c3:ed:e5:42:27:06:b4:06:cc:5d:8c:58:d5:55:ad:
                    12:c1:c9:cf:f4:0d:46:48:55:95:1f:15:7d:bd:da:
                    47:fc:b2:70:b0:7b:3b:78:90:5d:25:73:cc:03:b3:
                    61:5a:d7:57:1f:18:51:d7:46:51:97:19:f2:e0:dd:
                    64:aa:0f:0a:eb:88:92:6b:b9:46:9d:cb:8e:e2:35:
                    1b:f4:f0:1c:bf:80:b1:60:fc:d9:f9:a0:b3:4e:61:
                    e0:26:6a:22:32:20:44:f5:2a:a5:56:96:c5:94:59:
                    cf:59:0d:69:5e:d0:0e:db:f4:e0:53:fe:3b:f7:52:
                    07:00:3c:78:a0:b7:15:72:9e:61:66:56:89:2f:25:
                    59:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A9:B6:DA:ED:B9:9D:FA:7B:F2:59:76:C5:C5:F1:26:41:60:2C:8D
            X509v3 Authority Key Identifier:
                keyid:58:CF:57:66:4B:41:6B:E5:B2:48:B7:1D:04:3E:F1:B7:84:53:E0:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM9XZktBa-WySLcdBD7xt4RT4F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/abb3ad-5805-42c2-af2f-c576c5e717c8/1/WM9XZktBa-WySLcdBD7xt4RT4F4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/abb3ad-5805-42c2-af2f-c576c5e717c8/1/WM9XZktBa-WySLcdBD7xt4RT4F4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:53:41:90:96:d9:55:22:6d:13:42:14:d3:87:31:3e:02:a1:
         f1:94:02:87:02:53:8b:ec:9f:36:b2:85:c4:1b:dc:8d:b9:86:
         03:b9:bd:27:6c:f0:b3:6b:84:94:39:0e:2e:c0:53:cd:91:2c:
         93:44:c3:2f:5e:f1:e2:e6:c3:88:f7:61:0a:a6:6a:5b:87:50:
         41:66:4d:cd:57:e8:1a:da:11:47:e0:3a:e6:5e:e8:4a:e4:f8:
         a4:16:a3:8c:48:d3:5b:03:c1:93:97:ae:d2:25:bd:00:56:a8:
         d9:09:ca:30:af:86:54:57:ea:4c:46:a8:e8:85:87:71:b5:1e:
         75:d5:0e:c1:b3:db:2c:f6:49:e7:bd:14:5f:ea:69:82:f1:27:
         db:b7:c3:3e:bd:f2:08:e0:86:92:14:b3:7f:37:cd:53:c5:5d:
         64:b3:57:e5:8d:18:ff:51:74:90:a0:51:bf:2c:a1:11:8b:32:
         88:b2:66:60:c6:91:ac:8f:b8:d5:08:ae:30:d7:02:29:ce:29:
         b7:bd:55:5c:2a:a5:86:1d:a0:7c:fa:a4:44:c8:3a:4b:34:91:
         ed:41:12:fa:ec:03:84:68:08:62:e1:e3:1f:37:aa:58:7f:b8:
         e9:bf:63:ab:60:61:c6:cc:3e:28:83:1c:60:e8:50:21:37:a5:
         44:4f:ca:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----