Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
File:                     0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft (raw, json)
Hash identifier:          KOz8zVGjEef7ZYP+AsiLps7/83SekaxiyVhRGqRW7BQ=
Subject key identifier:   EA:37:97:77:97:39:14:96:35:38:2B:1B:2D:B9:3C:26:85:BB:CD:02
Authority key identifier: D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54
Certificate issuer:       /CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054
Certificate serial:       018F88240E878FF0F3978C75AA75B2A30F4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
Manifest number:          025D
Signing time:             Fri 17 May 2024 20:00:15 +0000
Manifest this update:     Fri 17 May 2024 20:00:15 +0000
Manifest next update:     Sat 18 May 2024 20:00:15 +0000
Files and hashes:         1: 0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl (hash: Ge1zbdzo5gPxjX54+4Jdb0Qkp4BSpYzGwBcq4mv9F60=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:0e:87:8f:f0:f3:97:8c:75:aa:75:b2:a3:0f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054
        Validity
            Not Before: May 17 20:00:15 2024 GMT
            Not After : May 18 20:00:15 2024 GMT
        Subject: CN=ea3797779739149635382b1b2db93c2685bbcd02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:16:c9:a8:d5:75:5f:13:53:2c:df:29:57:6a:
                    c0:a2:0a:28:b1:55:c5:8b:81:c9:73:6e:13:8c:cb:
                    35:c4:99:51:7f:0c:73:ac:85:c5:80:b0:2e:9b:65:
                    fe:13:7e:30:3f:ae:fc:70:12:eb:d9:8e:92:06:29:
                    27:79:9e:05:5c:60:7e:2b:8d:11:7b:2c:e2:de:60:
                    36:8d:5d:49:44:ef:77:4c:ae:46:b8:17:31:8c:32:
                    64:42:a2:6b:13:7a:ad:b8:9d:12:c8:9a:b4:c4:e2:
                    e9:ed:15:03:b9:c9:9e:7a:23:e1:64:d2:30:9b:a1:
                    bd:d7:1d:58:35:85:da:a6:73:af:92:2b:28:e1:48:
                    42:a9:85:f3:b4:f8:db:c5:b9:7a:56:b4:85:39:07:
                    87:d4:58:ab:1f:38:6f:9a:58:61:8f:d3:76:25:1d:
                    2e:10:3e:70:0e:45:f2:b5:b5:47:78:1a:11:7d:7d:
                    cb:3b:9a:73:82:e6:b1:de:6e:df:d6:0b:6a:28:e7:
                    47:f5:29:43:59:12:22:32:eb:ed:af:df:97:8d:4b:
                    74:74:fb:59:f6:fd:08:f7:36:3e:30:16:51:ab:53:
                    25:5c:71:78:4a:39:fc:66:44:58:60:b1:74:bd:bf:
                    7a:32:20:56:b0:c4:c5:0f:f8:79:0c:10:39:91:e9:
                    ca:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:37:97:77:97:39:14:96:35:38:2B:1B:2D:B9:3C:26:85:BB:CD:02
            X509v3 Authority Key Identifier:
                keyid:D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:26:40:92:8d:90:78:09:b5:4d:ee:67:34:1d:6b:a9:77:ae:
         98:24:b3:b4:5d:1e:4d:b9:0c:77:55:a3:2f:d3:7d:c2:91:95:
         61:55:d2:33:b1:ed:4a:bd:15:0a:58:cc:8c:25:15:9c:a3:bb:
         e1:18:6a:2f:07:52:41:b3:7d:f2:a0:c3:74:d1:5f:ea:51:18:
         1e:3d:82:7d:d2:2f:60:5a:b2:36:e9:5a:c3:ea:51:d6:7d:bc:
         98:7b:f1:21:8a:1e:d9:68:1a:32:31:9c:29:73:45:2d:88:0a:
         57:60:65:6d:fd:52:91:d2:5b:f9:59:1c:b1:a3:90:21:b1:5d:
         10:b2:21:9c:3c:da:be:6b:3a:7e:f1:a2:9c:7e:13:dd:25:05:
         a0:4c:26:0e:33:3a:24:8b:79:e9:19:d5:2f:2c:e8:c2:79:30:
         7f:ba:db:ab:97:f1:a0:fb:d6:31:bd:c9:f0:e8:8b:d5:6c:c3:
         96:55:e8:91:53:3c:e3:64:12:1e:1b:6b:02:ff:9e:de:0c:2c:
         80:cf:57:18:e9:79:18:f1:c9:11:36:ba:9e:f3:ad:5d:ad:cf:
         eb:43:05:3c:a1:74:81:66:dc:dc:29:73:49:4b:de:b5:74:e4:
         5b:ee:55:71:b0:d2:1b:91:f7:4c:62:19:33:7a:f8:49:28:cb:
         ab:8b:3f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----