Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
File:                     y_sCefzSOo5YPzRauQRyjm0OTGI.mft (raw, json)
Hash identifier:          /R6HG9AkGZCzEDzBVtyqjZf5HAX973SUV51DNYYJzVU=
Subject key identifier:   6B:2B:B5:2C:E2:1B:8E:1D:AD:E9:51:7D:BA:AB:17:80:D0:8A:F9:7A
Authority key identifier: CB:FB:02:79:FC:D2:3A:8E:58:3F:34:5A:B9:04:72:8E:6D:0E:4C:62
Certificate issuer:       /CN=cbfb0279fcd23a8e583f345ab904728e6d0e4c62
Certificate serial:       0193576466FF2A57AC5B3F3D842A08C6CF1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
Manifest number:          039B
Signing time:             Sat 23 Nov 2024 05:00:17 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:17 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:17 +0000
Files and hashes:         1: y_sCefzSOo5YPzRauQRyjm0OTGI.crl (hash: 6v7jY4xRczacsOFdt/KQm2xaL/C8GytQ2UDi4ZHYjhg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:66:ff:2a:57:ac:5b:3f:3d:84:2a:08:c6:cf:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbfb0279fcd23a8e583f345ab904728e6d0e4c62
        Validity
            Not Before: Nov 23 05:00:17 2024 GMT
            Not After : Nov 24 05:00:17 2024 GMT
        Subject: CN=6b2bb52ce21b8e1dade9517dbaab1780d08af97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:15:a5:a8:05:95:5b:54:1d:83:b3:98:cf:
                    9b:59:3a:00:40:65:e3:85:c8:fa:8e:a8:fa:b5:ae:
                    04:ec:6f:de:43:3b:af:05:c3:d2:14:20:7d:55:e8:
                    de:53:53:e4:c0:98:63:26:77:52:c0:d2:5b:b5:f3:
                    63:b9:1b:b8:9a:0a:dc:89:a5:d2:39:f3:20:77:a7:
                    2e:3b:09:d3:30:3b:c0:7a:09:b8:63:1e:8e:12:5c:
                    e8:8a:9a:63:c3:2f:a2:d1:57:68:32:f8:0a:55:67:
                    46:e5:f2:a6:29:d2:df:95:df:3f:fb:d0:cf:9e:48:
                    ac:32:d0:0e:e9:68:43:0a:b7:bc:5f:fc:7d:7e:cc:
                    09:11:32:ce:95:91:d4:0d:89:92:0c:9e:ed:f0:ae:
                    15:51:91:e6:96:c0:11:6c:a7:2f:b4:b6:22:c1:cf:
                    5b:0a:2e:10:b8:13:0c:a7:ef:d1:05:de:ea:e8:19:
                    e2:56:1b:dd:3e:14:19:a4:2d:b0:42:3d:3d:c1:bd:
                    fe:8d:7c:bf:f6:d4:a9:ed:5e:58:56:7d:5e:cb:64:
                    8f:bb:7e:38:f9:af:aa:2a:bf:1e:f6:68:01:e9:0f:
                    e3:ec:0b:81:93:b0:21:fa:2f:47:d0:14:b8:56:0e:
                    a2:a5:6d:c2:e2:5a:ba:49:c1:fa:27:75:c1:72:e1:
                    3d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2B:B5:2C:E2:1B:8E:1D:AD:E9:51:7D:BA:AB:17:80:D0:8A:F9:7A
            X509v3 Authority Key Identifier:
                keyid:CB:FB:02:79:FC:D2:3A:8E:58:3F:34:5A:B9:04:72:8E:6D:0E:4C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:4a:e6:0d:9d:ad:fe:7c:68:9b:8e:cb:22:7d:a4:82:88:57:
         c9:f3:20:9c:b9:2f:95:27:b6:0f:05:38:5a:2d:9d:0b:37:ba:
         a8:bd:92:69:e7:0a:30:d9:57:cc:86:b1:6e:d0:06:15:cb:71:
         1b:e6:64:a6:8f:01:b1:b6:dd:e2:da:af:1f:28:b4:9e:5e:ed:
         ab:98:88:93:87:11:64:2d:89:3f:27:ef:88:79:da:c7:3f:91:
         5b:b0:f0:da:46:2d:f2:e1:d3:87:cc:d3:e8:73:49:58:11:ce:
         25:2c:36:61:1c:52:be:ba:68:82:f7:6d:33:b3:c9:91:7b:7e:
         02:e9:cb:de:00:47:91:e7:ca:72:7c:cc:c8:22:a8:af:3a:ea:
         da:71:44:8f:eb:1b:70:73:18:b8:91:1b:64:13:de:ab:47:a1:
         ed:94:a1:c2:85:09:07:00:43:d8:14:80:3b:5f:c9:5d:00:ff:
         3c:f2:d0:88:14:df:42:01:ab:4d:fd:8a:32:9f:b7:60:6e:68:
         30:88:71:66:d3:0a:de:45:4c:e0:e3:5e:6f:8f:cd:b3:cd:81:
         92:27:a4:be:ad:e2:1a:17:6f:9c:13:5c:a3:28:60:97:d9:bb:
         24:f4:28:e2:16:4a:94:eb:1f:38:04:3c:a9:b6:0d:36:92:ad:
         ce:f2:a6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----