Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
File:                     YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft (raw, json)
Hash identifier:          kI3w7n6cm6BqkfulTOSdVEOakEh8FQ+qODCceUiCLrw=
Subject key identifier:   C9:F0:BB:DD:DA:29:15:7F:31:0F:A5:10:8D:17:BF:07:9F:EB:C0:62
Authority key identifier: 61:9A:79:41:E0:C2:C8:61:32:2F:83:1E:D0:6F:07:FB:70:85:A3:BB
Certificate issuer:       /CN=619a7941e0c2c861322f831ed06f07fb7085a3bb
Certificate serial:       01901D461B7CCA21EB5959DE12ACA045EC0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
Manifest number:          0DE0
Signing time:             Sat 15 Jun 2024 19:00:52 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:52 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:52 +0000
Files and hashes:         1: YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl (hash: gXWuDDmIN6d9BtIhn9Z/v2JDIGt+ZN26atZBIx8PWzk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:1b:7c:ca:21:eb:59:59:de:12:ac:a0:45:ec:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=619a7941e0c2c861322f831ed06f07fb7085a3bb
        Validity
            Not Before: Jun 15 19:00:52 2024 GMT
            Not After : Jun 16 19:00:52 2024 GMT
        Subject: CN=c9f0bbddda29157f310fa5108d17bf079febc062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:98:b5:2e:50:4b:da:af:dd:33:62:71:c4:63:
                    ee:b9:12:71:0b:29:ae:c7:09:9d:a0:ec:5c:77:db:
                    17:4c:d0:16:f1:d8:17:2d:1e:63:39:4c:a7:97:34:
                    fb:9e:7c:d8:f1:31:83:5b:8e:15:25:be:79:93:eb:
                    ba:e0:21:59:f7:8d:fc:82:50:14:2e:83:c5:53:2d:
                    b5:58:6a:2a:83:7a:57:cb:99:33:cf:5e:0a:93:7a:
                    5f:d2:31:bc:ad:74:9f:0c:14:1c:a6:e2:f7:e2:3e:
                    76:c8:9f:39:46:7b:52:43:be:2f:72:f5:4e:58:37:
                    be:b1:d4:a5:8a:1c:ba:90:57:2c:34:f8:5d:61:82:
                    a2:39:31:e2:29:92:98:f4:8d:44:55:bb:dd:a3:29:
                    b4:2c:68:d6:ee:29:a7:c9:21:ec:9c:e3:0d:a3:8d:
                    f9:50:56:30:55:fc:ec:89:bd:3a:a8:53:6d:4d:e1:
                    24:78:df:69:95:c6:d5:30:4a:38:f7:2e:d4:fd:d1:
                    8c:f7:75:88:88:92:3e:f0:e6:9c:be:16:98:62:bb:
                    6e:4b:de:a5:3b:84:8a:98:85:ed:22:35:6b:44:c6:
                    01:b1:aa:df:25:39:03:d0:52:f1:17:f9:99:6a:bd:
                    a0:63:da:8a:59:2b:11:e8:7b:ac:a0:d6:08:df:70:
                    06:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F0:BB:DD:DA:29:15:7F:31:0F:A5:10:8D:17:BF:07:9F:EB:C0:62
            X509v3 Authority Key Identifier:
                keyid:61:9A:79:41:E0:C2:C8:61:32:2F:83:1E:D0:6F:07:FB:70:85:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:49:9e:de:c9:bc:1a:ce:7a:d4:65:7c:0f:13:c8:87:5f:da:
         cc:2d:63:6c:c2:d9:32:ac:d9:24:94:5d:3d:c9:9e:c1:20:1e:
         1d:54:5d:c0:c8:ad:8e:17:42:32:3f:fa:05:07:14:9c:72:a8:
         06:79:0c:0b:e1:6f:b3:96:9f:fb:26:7c:b3:06:85:2b:67:62:
         66:61:c3:96:17:9b:23:94:66:d1:2f:7f:fc:5d:86:ee:dc:cf:
         72:4f:5c:5e:a8:b8:92:e4:20:53:2f:a3:63:3b:8d:3d:b3:c2:
         7d:3b:a5:6b:42:43:8f:e8:d0:4f:92:1e:ae:61:0a:b6:d3:6a:
         06:f7:cd:2d:d5:d3:88:98:f1:b5:5a:aa:33:d6:26:f6:f8:65:
         e3:fd:64:f0:07:02:ac:74:4c:fa:6c:9e:af:ce:e1:7d:99:24:
         9b:7f:97:21:9c:e7:61:e4:29:33:a3:72:7f:67:86:d8:a2:f7:
         c5:fb:d1:0d:7a:af:68:18:ba:23:dc:d5:6e:3c:fb:b3:a4:95:
         7b:bd:1e:f6:c3:97:ed:ed:0f:62:8d:1d:6e:de:a0:98:e5:a3:
         67:b0:38:8f:79:42:67:43:e5:63:d3:bf:05:76:c7:61:2b:fb:
         f9:69:4f:c3:36:af:ad:5f:f8:1d:4f:7b:6f:2a:72:21:df:11:
         de:c5:61:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----