Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
File:                     prEMlxD_hEDaQeVJvif-h38Uuwc.mft (raw, json)
Hash identifier:          ZCxbWfhbJxun+ouubmmKFQOcX/VAYfL9eghTxzB4fsE=
Subject key identifier:   83:C3:32:D6:7E:2B:89:E1:01:7F:D5:82:69:04:37:1D:1E:CC:A1:C3
Authority key identifier: A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07
Certificate issuer:       /CN=a6b10c9710ff8440da41e549be27fe877f14bb07
Certificate serial:       01958C60BB698EF10F27A686F3FC6C754F62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
Manifest number:          07F2
Signing time:             Wed 12 Mar 2025 22:01:44 +0000
Manifest this update:     Wed 12 Mar 2025 22:01:44 +0000
Manifest next update:     Thu 13 Mar 2025 22:01:44 +0000
Files and hashes:         1: prEMlxD_hEDaQeVJvif-h38Uuwc.crl (hash: PrE8fJ34J8/ErNW9mVmUz66eSeR8wU7eY3L/hee4oZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:60:bb:69:8e:f1:0f:27:a6:86:f3:fc:6c:75:4f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b10c9710ff8440da41e549be27fe877f14bb07
        Validity
            Not Before: Mar 12 22:01:44 2025 GMT
            Not After : Mar 13 22:01:44 2025 GMT
        Subject: CN=83c332d67e2b89e1017fd5826904371d1ecca1c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:50:67:6d:69:5a:5e:30:bf:13:85:19:c7:87:
                    a6:de:2f:81:fe:64:e8:80:4a:fc:19:a0:d2:d5:0b:
                    e3:49:24:1a:31:3b:42:10:54:c4:0a:71:f2:c3:ba:
                    b6:e0:81:1d:03:71:40:d0:b1:74:d2:c7:c1:4b:eb:
                    c0:da:df:ae:bc:37:35:cc:00:8e:2a:4e:ba:01:3f:
                    7c:51:8e:fe:43:00:ec:b6:13:f8:95:54:f2:85:5b:
                    ba:98:b6:c3:bb:74:1b:88:cf:ef:e5:89:70:ed:2c:
                    b9:c4:3a:4f:69:90:77:97:30:c2:d2:7b:fa:db:1b:
                    72:d3:d8:94:08:fb:9b:6a:56:c5:19:e3:a4:30:a9:
                    96:bd:f1:f1:a3:10:0b:4a:3d:11:d8:68:e0:d5:f0:
                    08:bd:68:bd:e4:23:eb:32:a7:dd:85:90:fc:64:ae:
                    1e:e3:1a:17:27:f3:5e:76:a4:0b:04:cd:fa:b7:e6:
                    ee:43:66:10:98:59:a5:92:59:be:14:39:14:3a:f4:
                    2d:fc:eb:01:99:37:be:d2:af:df:46:15:6b:f7:01:
                    d9:68:f2:11:01:de:37:42:9b:b5:99:94:23:df:1d:
                    f5:49:86:cf:a0:b9:4d:50:0d:24:50:20:c5:3b:d3:
                    08:fd:69:1d:2a:63:0a:7b:d8:d8:b5:54:34:46:3b:
                    14:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C3:32:D6:7E:2B:89:E1:01:7F:D5:82:69:04:37:1D:1E:CC:A1:C3
            X509v3 Authority Key Identifier:
                keyid:A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:9a:3f:0f:d7:8c:4c:3c:14:0f:ec:4f:6f:f2:44:8b:ef:7d:
         20:5d:61:73:e8:f2:ec:07:e5:a3:f8:7f:3d:9e:1a:3a:3f:31:
         24:22:c7:b7:0a:b0:a3:79:82:a4:18:30:92:df:f3:4c:ae:58:
         d2:e9:33:69:1e:99:af:d9:60:5d:6b:a0:cc:66:ae:53:8c:7f:
         4c:45:79:f5:12:ec:06:8d:67:5c:90:58:a4:32:fa:b6:84:27:
         31:59:14:71:66:9e:b4:98:2f:2f:31:92:c0:e2:13:b4:98:60:
         e7:73:b5:6b:d0:cb:8b:5e:8e:47:47:c6:a9:67:e9:43:53:65:
         6c:ed:6a:79:c9:cb:c9:6a:ab:0c:49:94:84:6c:e4:93:54:04:
         7d:c8:45:55:c5:95:42:82:93:67:14:ec:9c:1f:40:c4:dd:9a:
         6c:61:61:e6:61:4b:4d:23:af:63:fa:54:a2:74:26:1f:5d:4a:
         a3:0e:3c:ca:99:8f:55:39:3e:30:62:31:73:30:6b:da:50:57:
         5c:88:99:a5:0b:31:b5:ac:4a:c6:45:e0:ea:ae:b5:ef:da:8f:
         8c:fb:05:83:4b:7e:36:41:58:fa:86:dc:9d:f5:14:3d:54:78:
         7b:86:da:f0:28:ab:03:14:2c:e1:f3:c6:73:bf:17:ed:a7:57:
         38:c2:61:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----