Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft
File:                     uzYogf_jYlMUAGCLYyi7Et-hYIE.mft (raw, json)
Hash identifier:          fHAEOE/WEkwzpsXmY9lfw6dwQs4AgkKC91Wue8n2CZM=
Subject key identifier:   AC:0C:01:16:51:4F:03:F2:8F:BE:4E:23:F1:79:AB:DB:29:5E:A0:7C
Authority key identifier: BB:36:28:81:FF:E3:62:53:14:00:60:8B:63:28:BB:12:DF:A1:60:81
Certificate issuer:       /CN=bb362881ffe362531400608b6328bb12dfa16081
Certificate serial:       019369D94FEAF6A9511107708A0405FB0083
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uzYogf_jYlMUAGCLYyi7Et-hYIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft
Manifest number:          0A80
Signing time:             Tue 26 Nov 2024 19:01:09 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:09 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:09 +0000
Files and hashes:         1: uzYogf_jYlMUAGCLYyi7Et-hYIE.crl (hash: 4f9bCpsxt0auO4etuHWS51p9tm+8T2ghb6c9MewpnBE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uzYogf_jYlMUAGCLYyi7Et-hYIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:4f:ea:f6:a9:51:11:07:70:8a:04:05:fb:00:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb362881ffe362531400608b6328bb12dfa16081
        Validity
            Not Before: Nov 26 19:01:09 2024 GMT
            Not After : Nov 27 19:01:09 2024 GMT
        Subject: CN=ac0c0116514f03f28fbe4e23f179abdb295ea07c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:89:62:74:d3:c4:e2:84:ff:fe:30:44:ce:1c:
                    b6:87:70:b6:19:68:56:d3:eb:7f:4c:92:24:72:11:
                    53:b6:9a:43:4d:b4:77:ca:32:84:3d:72:de:7e:c4:
                    f5:f5:6c:ae:60:aa:fc:5f:aa:94:14:90:bd:d4:ac:
                    47:d0:f6:ad:f9:3f:4c:c9:7d:81:c2:3b:a3:81:ad:
                    61:2b:35:f7:fc:ec:02:13:9c:21:c7:a4:bb:27:c7:
                    48:e0:ea:8b:b4:8a:8e:84:61:b4:8b:66:83:bb:1a:
                    f1:67:c2:d3:a2:d6:d0:2f:4b:83:13:cb:48:cc:57:
                    ca:b5:97:13:61:d0:a6:4f:2a:49:46:30:50:a5:fa:
                    40:7c:fd:bc:d0:a5:e6:29:32:e4:3e:ce:57:5e:b6:
                    d0:0c:a4:e7:6b:84:8f:6b:4f:aa:46:f5:f6:72:0d:
                    c1:06:f2:72:9e:0a:0a:51:c4:d6:17:15:bf:9a:0a:
                    ba:87:4c:29:69:90:0c:8a:44:c1:d5:a1:20:58:c5:
                    48:45:b6:81:8b:6a:ce:94:c4:27:d9:3b:53:40:34:
                    9c:e2:4b:b7:cb:ab:32:15:59:c1:a9:d3:ed:e9:52:
                    7c:37:65:d9:67:6a:48:d3:43:c3:9f:17:b3:5a:8c:
                    40:a4:ed:06:3b:54:44:b8:0d:d3:6e:90:af:ea:02:
                    15:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0C:01:16:51:4F:03:F2:8F:BE:4E:23:F1:79:AB:DB:29:5E:A0:7C
            X509v3 Authority Key Identifier:
                keyid:BB:36:28:81:FF:E3:62:53:14:00:60:8B:63:28:BB:12:DF:A1:60:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzYogf_jYlMUAGCLYyi7Et-hYIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:26:8d:d1:87:55:52:84:7d:bb:ad:c5:29:1c:83:53:2f:1d:
         37:91:ca:94:3e:4b:39:76:9c:69:30:36:d3:4b:98:e7:f5:bf:
         a3:5f:8d:f5:b1:13:2f:bb:73:7f:fe:ac:3e:1c:51:56:6b:7c:
         0a:37:31:ad:9c:9d:ab:68:1c:87:41:20:38:1d:63:73:3a:65:
         00:43:b5:30:4a:52:18:03:ac:d4:31:6e:64:0a:fc:6f:27:0a:
         c0:b1:25:d2:01:ea:6c:7e:cc:c7:c5:71:7c:46:40:ff:a5:a9:
         17:da:3f:0b:ed:47:24:40:97:c9:06:6c:5d:4d:d0:a3:7c:60:
         73:24:d2:7a:de:25:b6:bc:a4:b0:07:12:25:74:8e:14:f0:7c:
         e0:66:0b:9d:d1:5c:f7:70:a0:4d:b7:5c:d2:2d:f4:64:a8:50:
         7b:58:cb:3f:0a:27:23:01:c0:f1:44:fb:7c:5e:fe:ba:6b:a0:
         0a:36:c1:07:48:b6:bd:0b:b7:70:41:e4:02:4a:a0:4c:b4:50:
         cf:46:87:43:07:0f:11:da:59:4f:4a:ca:c5:24:7a:52:38:6f:
         b6:7a:c2:f7:ac:39:6a:49:c2:cc:2e:42:b1:f0:dc:62:32:dd:
         b7:9a:1a:6d:10:23:5c:b4:eb:bd:7d:de:31:6a:65:7a:ca:41:
         26:c8:e8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----