Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
File:                     mYf1lRU_EX4prIkHh2ZWpLin7GI.mft (raw, json)
Hash identifier:          RrqoOo8yJnaHIHH04TjijR0cz4RPico38MwuZIF/FZg=
Subject key identifier:   DC:87:E3:7D:1D:F9:B5:60:C7:B2:29:8D:94:A0:87:8D:CB:F7:3A:5D
Authority key identifier: 99:87:F5:95:15:3F:11:7E:29:AC:89:07:87:66:56:A4:B8:A7:EC:62
Certificate issuer:       /CN=9987f595153f117e29ac8907876656a4b8a7ec62
Certificate serial:       019365578F7D45886F3EFE4DD667019EDFB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
Manifest number:          0E60
Signing time:             Mon 25 Nov 2024 22:00:57 +0000
Manifest this update:     Mon 25 Nov 2024 22:00:57 +0000
Manifest next update:     Tue 26 Nov 2024 22:00:57 +0000
Files and hashes:         1: mYf1lRU_EX4prIkHh2ZWpLin7GI.crl (hash: 2Zai9I+cnqyb2Rik9eaMWbMC9WZTYRbjAJnGc5qVKRU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:57:8f:7d:45:88:6f:3e:fe:4d:d6:67:01:9e:df:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9987f595153f117e29ac8907876656a4b8a7ec62
        Validity
            Not Before: Nov 25 22:00:57 2024 GMT
            Not After : Nov 26 22:00:57 2024 GMT
        Subject: CN=dc87e37d1df9b560c7b2298d94a0878dcbf73a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b6:58:ae:ab:c7:8e:04:72:de:c0:9c:51:92:
                    db:8a:49:6b:a9:09:76:e3:dc:f2:47:81:9c:30:2a:
                    7c:ed:d7:24:72:47:a6:41:d4:f6:d2:25:fc:be:2c:
                    ed:61:41:2f:f7:2b:f1:96:3a:d0:76:13:ef:0a:95:
                    d7:e5:15:e0:43:36:15:bc:29:62:a9:6d:86:47:2b:
                    4d:1e:50:3f:f4:8d:39:b2:90:8b:cf:9d:62:ea:99:
                    fd:19:0f:18:e6:f3:24:69:c7:21:b2:d0:1d:8d:d3:
                    4c:1c:09:bb:d8:28:4e:fa:db:7f:d4:09:61:2e:69:
                    91:65:d3:29:db:81:29:a0:ac:b7:41:dc:77:0e:b5:
                    b8:fa:94:84:94:dc:0d:6e:94:10:ea:81:77:48:71:
                    72:9f:3b:59:bf:bd:1e:7e:fb:36:29:02:e2:88:bb:
                    9c:42:49:2d:5a:ba:07:ab:e5:38:bd:1d:7f:50:79:
                    44:71:8f:0e:79:27:9c:3a:66:85:f8:c1:1a:e4:e2:
                    7f:0e:a6:9e:7e:0b:8b:3e:ec:e6:82:28:30:3f:a4:
                    27:ed:68:1b:9c:89:b0:d9:73:43:82:20:ce:53:b6:
                    b4:f5:e7:ef:02:e0:97:30:93:ee:e6:9d:2d:7e:b7:
                    62:02:a9:fc:b6:2c:56:e7:26:0b:05:02:09:4a:fa:
                    0a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:87:E3:7D:1D:F9:B5:60:C7:B2:29:8D:94:A0:87:8D:CB:F7:3A:5D
            X509v3 Authority Key Identifier:
                keyid:99:87:F5:95:15:3F:11:7E:29:AC:89:07:87:66:56:A4:B8:A7:EC:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:7e:13:ec:3d:30:eb:69:0f:82:ba:20:74:35:72:df:27:23:
         fb:18:17:53:09:42:3d:35:cd:f8:d5:dd:ad:1b:6b:dc:70:08:
         21:28:e0:cf:16:05:fe:c0:da:98:61:2c:8e:3a:b5:d8:bb:93:
         69:73:45:8f:7a:e5:cf:f2:08:f6:6f:ce:c1:2f:1e:4c:87:fb:
         dd:47:86:5a:18:04:ad:06:93:51:0f:e6:67:e2:65:dd:c2:e6:
         02:bf:39:b1:ed:70:39:fc:d2:54:c4:af:b1:10:8c:b2:d3:89:
         27:c5:1f:a5:a6:66:77:3b:68:4c:7c:16:dc:74:45:11:f4:bd:
         32:45:4c:8d:23:16:ed:12:1f:22:50:9d:8e:ba:85:8a:b2:8c:
         1b:2b:7b:28:d1:ac:bf:e3:b7:67:f3:3d:15:e7:30:1a:75:15:
         03:cd:94:50:74:4e:3a:13:48:08:d0:46:44:a1:b9:08:cf:7c:
         df:43:2d:9e:5c:98:e9:fe:e2:6a:d5:83:56:75:c3:a5:b1:09:
         a0:7e:6f:b7:3b:db:7c:51:5c:ad:8c:71:a2:a5:43:67:b8:ef:
         6d:2c:f1:5f:91:f3:c5:df:43:49:6b:41:96:e2:ed:29:00:e0:
         1a:bb:c7:a3:2b:7d:e1:18:9c:b2:95:f9:73:b1:6b:ec:3b:de:
         fb:c6:9e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----