Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.mft
File:                     PpeXKwFXszTha_kfKifuDi3BOag.mft (raw, json)
Hash identifier:          H9BGCxPrHiu9PSlsJRrooiOjAF+Jev2fKAjfDmpWrrY=
Subject key identifier:   0C:AC:74:6A:B8:F3:91:E6:87:83:00:18:0A:C9:D4:13:8E:2A:A0:9B
Authority key identifier: 3E:97:97:2B:01:57:B3:34:E1:6B:F9:1F:2A:27:EE:0E:2D:C1:39:A8
Certificate issuer:       /CN=3e97972b0157b334e16bf91f2a27ee0e2dc139a8
Certificate serial:       0194BAF243DA1E7E996FEE0F174DA347C588
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PpeXKwFXszTha_kfKifuDi3BOag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.mft
Manifest number:          97
Signing time:             Fri 31 Jan 2025 06:00:26 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:26 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:26 +0000
Files and hashes:         1: PpeXKwFXszTha_kfKifuDi3BOag.crl (hash: 15FTIZEx+MNty6SUgbkO9oXbuBWlDziO4QXNAq9OOhQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PpeXKwFXszTha_kfKifuDi3BOag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:43:da:1e:7e:99:6f:ee:0f:17:4d:a3:47:c5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e97972b0157b334e16bf91f2a27ee0e2dc139a8
        Validity
            Not Before: Jan 31 06:00:26 2025 GMT
            Not After : Feb  1 06:00:26 2025 GMT
        Subject: CN=0cac746ab8f391e6878300180ac9d4138e2aa09b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:59:06:e3:f7:d6:b5:97:37:cf:5f:f8:d3:fc:
                    f5:2a:5a:39:91:d0:69:55:ce:21:b2:23:b6:76:f3:
                    80:22:03:a0:de:ed:d7:3f:04:ec:46:48:30:3b:f4:
                    7d:d7:36:1e:b4:b4:0d:5e:f9:58:03:c1:58:26:c5:
                    14:0a:18:21:64:27:f2:a0:f8:45:6d:02:a0:63:4f:
                    e9:0a:e6:95:38:89:6a:73:8d:36:e4:d7:ee:81:6f:
                    c2:d6:d4:9a:ff:a4:1a:9f:a6:43:af:0b:fa:62:63:
                    8f:ce:3f:95:08:b7:0e:ed:6c:13:e0:09:f4:f8:9e:
                    c3:6b:76:d0:8e:c0:6c:af:2a:76:44:90:1b:cf:05:
                    a3:17:42:59:2e:d6:33:30:bb:f0:78:1a:17:12:79:
                    9b:f6:f3:0b:41:21:7e:9b:b0:79:14:19:5f:bf:a7:
                    5a:78:c0:3e:5b:53:70:62:98:b0:7b:2b:89:ca:8c:
                    12:4a:e0:1b:a9:e1:a8:30:9f:dd:16:62:eb:aa:b8:
                    50:89:31:17:9e:0d:57:74:e7:3e:59:39:48:f7:02:
                    d0:03:39:ce:18:9f:0c:77:b0:59:13:31:42:af:4a:
                    93:3f:d1:3d:ed:89:3d:3e:1d:a0:2b:71:ed:62:e8:
                    46:d3:be:93:04:84:e7:64:8b:8e:75:88:d5:a1:79:
                    d2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AC:74:6A:B8:F3:91:E6:87:83:00:18:0A:C9:D4:13:8E:2A:A0:9B
            X509v3 Authority Key Identifier:
                keyid:3E:97:97:2B:01:57:B3:34:E1:6B:F9:1F:2A:27:EE:0E:2D:C1:39:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpeXKwFXszTha_kfKifuDi3BOag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ab:72:28:3b:26:bc:a9:60:25:36:c7:49:58:53:39:c8:5e:
         d7:eb:be:06:18:11:6b:9a:f6:7a:73:30:44:01:17:da:d3:12:
         d6:ab:28:52:12:43:a7:73:96:90:55:12:ee:ba:d2:b7:93:b2:
         b9:f6:09:eb:8e:ab:f9:66:93:4f:ed:18:f3:c3:cd:4e:be:36:
         fb:8c:eb:f4:df:1d:17:b7:ee:e0:de:c5:03:3f:9b:8b:20:53:
         0e:3c:f2:57:fe:5d:e6:57:fe:cd:ed:7d:70:87:4e:0b:98:93:
         50:83:c1:1f:3d:9a:08:6f:7e:2f:4e:c4:60:78:3b:9e:fc:0e:
         a3:c4:0b:31:fe:8e:f7:a4:13:d5:a4:29:ae:bd:1e:c9:1c:60:
         f3:85:2d:83:bd:e5:a9:d0:45:17:39:76:bc:36:c9:08:30:bd:
         94:c4:5f:ac:77:d0:76:50:ca:e3:0d:94:49:50:58:94:14:9f:
         b2:b2:71:68:a6:b7:92:9f:77:3a:b5:e6:53:ad:05:81:97:d9:
         15:ad:26:8f:d5:9e:12:84:fb:fc:e4:af:2e:e4:e0:78:ef:03:
         16:fb:58:38:b8:ba:56:26:bf:2e:e0:0c:0f:30:04:b1:43:c6:
         df:7e:3b:8c:08:e4:68:21:16:a1:f4:40:a4:40:a1:fa:9d:b9:
         b2:9f:8d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----