Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
File:                     GYe7aFnJOMi2PlqqVtkHvQRE484.mft (raw, json)
Hash identifier:          qUmg1WhTDjnCQH+aULTlRdMh1ZReY2K8v9+zdDhBRjs=
Subject key identifier:   AF:34:6F:2E:AC:F2:62:67:4E:A9:F4:3A:95:B8:9C:34:55:C0:CF:CE
Authority key identifier: 19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE
Certificate issuer:       /CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
Certificate serial:       01936B227D217566AD819E17105C8490E0B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
Manifest number:          12BA
Signing time:             Wed 27 Nov 2024 01:00:42 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:42 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:42 +0000
Files and hashes:         1: GYe7aFnJOMi2PlqqVtkHvQRE484.crl (hash: /moEiTHaozAAfNyvh63NrLE36ApXTnBWrvD0FwF13ig=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:7d:21:75:66:ad:81:9e:17:10:5c:84:90:e0:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
        Validity
            Not Before: Nov 27 01:00:42 2024 GMT
            Not After : Nov 28 01:00:42 2024 GMT
        Subject: CN=af346f2eacf262674ea9f43a95b89c3455c0cfce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d2:9d:a5:5b:f8:b9:82:72:60:0e:20:60:aa:
                    19:39:ad:4b:cb:95:8b:85:0f:39:92:d9:0b:05:9b:
                    65:ff:fe:0b:c1:eb:a0:ef:d8:99:99:69:2e:0d:87:
                    7a:35:e7:c9:17:63:d2:bc:97:46:a4:80:ff:e8:11:
                    73:08:5f:41:90:b0:23:a5:92:a3:af:dc:af:b3:ca:
                    19:cd:55:7c:9d:aa:18:6c:e2:d6:3b:3f:d5:b2:36:
                    d0:ed:67:8b:c1:31:f7:e9:e7:88:8e:06:42:c3:d3:
                    a8:d6:97:13:6c:06:a6:e1:2f:98:32:f8:f2:5b:34:
                    17:67:cf:c4:29:f0:cf:30:13:7e:12:b3:56:f2:1f:
                    ef:b8:4a:90:d5:43:33:f5:9d:9b:8d:fb:60:df:a4:
                    01:23:5d:ff:d2:86:c2:4e:39:d7:10:d6:ac:2a:d5:
                    23:fc:49:6d:0f:cc:39:9f:5d:b2:22:a8:5d:06:ce:
                    0d:06:e2:00:53:9e:3f:73:ec:87:54:98:8a:36:f7:
                    37:1c:85:8f:31:f9:ef:9e:1a:df:53:3b:6e:b1:e9:
                    6d:0e:68:ba:e7:09:2b:8d:b7:4a:a0:63:94:32:45:
                    50:88:82:09:1a:d7:81:56:72:cd:4f:5b:a7:7a:ba:
                    85:62:71:df:02:b2:70:b4:d3:e9:f0:02:a4:d9:e7:
                    bc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:34:6F:2E:AC:F2:62:67:4E:A9:F4:3A:95:B8:9C:34:55:C0:CF:CE
            X509v3 Authority Key Identifier:
                keyid:19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:36:a0:aa:c3:e9:16:50:4b:d7:4e:45:00:75:88:85:9f:3f:
         fb:4b:e9:36:45:03:bc:1e:0c:e5:5b:90:a1:92:bb:b0:ea:87:
         5e:f3:f6:bc:56:f3:41:30:05:01:5c:66:f0:ed:15:29:a0:c9:
         0e:8c:66:af:3e:32:33:b4:8e:84:65:f8:cf:a2:0b:ce:32:36:
         f9:35:f4:f4:13:65:7e:3a:4b:0f:b9:de:84:77:8c:1b:f7:d6:
         2f:4d:4b:86:0a:f3:97:fb:4b:6f:36:46:1f:fc:80:b3:33:9c:
         d5:c0:94:04:36:1c:65:e1:fc:2f:4e:e0:27:9b:7a:fb:14:fd:
         2d:51:bd:f2:b0:30:ca:6a:fc:cd:19:ac:57:bd:a9:20:e8:4d:
         55:a3:ff:0a:23:01:68:39:71:2b:8b:40:3b:4a:85:5b:8e:c0:
         d8:99:95:cf:34:73:44:c8:b4:94:1a:b6:e7:bb:69:30:f9:26:
         b9:a4:f8:e1:09:91:30:2a:6e:3d:8e:cd:c7:87:ab:18:31:33:
         78:cb:03:7a:77:a6:71:94:47:00:2f:47:22:1b:4a:e9:5d:3e:
         3b:92:e2:ef:00:d4:c2:7e:f7:a3:f1:73:8f:1d:26:cc:f2:00:
         85:4e:07:ba:0c:da:25:19:7a:16:7b:67:b0:80:8f:4f:a5:ae:
         07:1b:9f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----