Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.mft
File:                     ycbGTWd6yWSqxmbrrLnRf6jIq80.mft (raw, json)
Hash identifier:          XbTiC9QhBZ6xD5RskYO5wZo2SaIw9xuXpRsjkZ+7TzI=
Subject key identifier:   1F:6F:F5:F8:1C:E1:E6:46:3A:04:96:E9:8A:5C:FB:6D:C7:E6:71:AF
Authority key identifier: C9:C6:C6:4D:67:7A:C9:64:AA:C6:66:EB:AC:B9:D1:7F:A8:C8:AB:CD
Certificate issuer:       /CN=c9c6c64d677ac964aac666ebacb9d17fa8c8abcd
Certificate serial:       0193549B88E0EA757580E1966433604E091B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ycbGTWd6yWSqxmbrrLnRf6jIq80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.mft
Manifest number:          0677
Signing time:             Fri 22 Nov 2024 16:01:39 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:39 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:39 +0000
Files and hashes:         1: ycbGTWd6yWSqxmbrrLnRf6jIq80.crl (hash: 2P1MDfAKFXoEeUivWetekBLCrBcsFfmrTCubu7Bj+2Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ycbGTWd6yWSqxmbrrLnRf6jIq80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:88:e0:ea:75:75:80:e1:96:64:33:60:4e:09:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9c6c64d677ac964aac666ebacb9d17fa8c8abcd
        Validity
            Not Before: Nov 22 16:01:39 2024 GMT
            Not After : Nov 23 16:01:39 2024 GMT
        Subject: CN=1f6ff5f81ce1e6463a0496e98a5cfb6dc7e671af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3f:63:f6:2c:14:51:78:c4:9f:e8:58:5a:8f:
                    de:4d:19:84:8f:82:bc:c1:17:70:49:7b:45:eb:7b:
                    ce:58:7e:5d:81:e1:4c:b4:3e:17:e8:bc:39:13:ea:
                    84:81:2c:9d:9f:e6:94:07:f9:95:a2:83:66:2c:b7:
                    0d:ec:32:e9:5b:c6:f6:a9:fb:20:03:8c:e2:d8:22:
                    24:9a:ba:80:15:18:49:0f:0f:ff:53:7f:db:fc:d6:
                    25:a5:cd:46:51:80:a0:bc:3e:5a:43:24:89:5d:7b:
                    b1:b7:de:4f:67:10:77:0d:91:2c:fa:20:4f:98:fe:
                    51:c6:0e:d1:a8:c8:86:fd:a2:fb:5e:7d:70:de:de:
                    18:d4:3d:e1:4a:04:42:6b:f7:b5:04:81:b4:86:45:
                    27:23:4a:34:11:a0:92:65:98:88:c2:9c:c3:38:cc:
                    1a:45:7d:8c:33:2a:58:d1:6c:49:42:04:6f:56:57:
                    5a:2a:47:b9:5c:40:50:95:63:73:83:c9:95:22:60:
                    a3:22:2f:e3:97:c7:88:ad:a7:ab:75:31:51:fc:1f:
                    fc:98:25:dc:8b:80:66:90:9a:93:53:80:72:d1:28:
                    47:65:d8:af:94:e8:73:b9:32:f2:bc:b1:c2:e2:1e:
                    35:31:26:b3:4f:1d:11:d5:2f:fb:f0:f1:9f:9e:65:
                    0c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6F:F5:F8:1C:E1:E6:46:3A:04:96:E9:8A:5C:FB:6D:C7:E6:71:AF
            X509v3 Authority Key Identifier:
                keyid:C9:C6:C6:4D:67:7A:C9:64:AA:C6:66:EB:AC:B9:D1:7F:A8:C8:AB:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycbGTWd6yWSqxmbrrLnRf6jIq80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5d2481-3a22-4aa0-8bfb-6867ba1a173a/1/ycbGTWd6yWSqxmbrrLnRf6jIq80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:87:17:67:db:48:ba:e4:7d:b4:de:1e:72:6d:84:49:6e:ab:
         a7:62:09:ac:d8:5e:a0:cd:2c:71:52:96:10:61:c3:79:42:71:
         08:c8:90:19:4c:a1:36:c2:e9:53:d4:9d:4c:70:26:57:d7:f1:
         d7:c6:e0:f4:42:2b:9e:6b:9f:ad:46:ff:7a:eb:59:c5:4e:03:
         12:84:a5:9d:5d:b2:03:dd:30:e0:ee:91:fe:48:86:89:c6:ee:
         6b:93:f5:de:37:33:d2:ec:3b:8e:17:7e:65:00:c9:af:54:bf:
         0a:da:c8:77:09:ba:4d:4b:b7:5c:b5:fa:f3:bb:6a:b6:8a:83:
         ef:a2:71:47:97:2e:28:41:ae:5d:18:94:fe:29:32:ce:62:4b:
         94:94:02:68:a3:0a:cf:94:dc:34:78:5e:be:2f:25:a7:10:a1:
         e6:07:08:66:75:45:9f:ad:4a:83:1e:a2:eb:25:b5:de:60:c0:
         08:0f:7e:14:23:b1:7b:1a:d4:16:8e:91:d7:4c:e0:c1:6d:2e:
         df:43:a1:c3:11:09:ea:3f:a6:a5:08:95:94:00:5f:1a:fc:63:
         db:f5:fb:39:bd:77:e0:8a:f2:4b:66:ae:5e:db:92:20:e6:3c:
         e0:87:a6:ea:43:7a:a9:b7:a5:b9:52:03:df:f7:ec:0b:38:e7:
         89:59:68:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----