Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
File:                     yYlmC_FH9ij7fPiycYc3_qhimNA.mft (raw, json)
Hash identifier:          7MdlTOaxRkbwDsJWdxEJ4+uizNkjnI7YPQf3KA1Gonw=
Subject key identifier:   2A:D7:10:7C:78:53:2C:CB:19:23:6D:91:E1:01:A0:5D:BC:96:E6:44
Authority key identifier: C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
Certificate issuer:       /CN=c989660bf147f628fb7cf8b2718737fea86298d0
Certificate serial:       019369D8E924BB08623B67EDB6D554C4DDB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
Manifest number:          0682
Signing time:             Tue 26 Nov 2024 19:00:43 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:43 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:43 +0000
Files and hashes:         1: yYlmC_FH9ij7fPiycYc3_qhimNA.crl (hash: Y9jEAK+wtXojGhdnCLLuyjVVISwvJGI23AmyexvLKzs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:e9:24:bb:08:62:3b:67:ed:b6:d5:54:c4:dd:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c989660bf147f628fb7cf8b2718737fea86298d0
        Validity
            Not Before: Nov 26 19:00:43 2024 GMT
            Not After : Nov 27 19:00:43 2024 GMT
        Subject: CN=2ad7107c78532ccb19236d91e101a05dbc96e644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:67:36:fa:b8:7e:e1:39:28:e5:af:39:75:60:
                    51:54:61:f5:63:42:6f:23:9d:82:0a:13:b4:e9:fa:
                    de:f0:e6:02:2c:49:3e:d2:e6:4c:9c:4f:ae:61:a3:
                    91:a2:e8:37:28:e8:c1:bc:5b:64:ef:bc:5f:05:93:
                    07:20:20:20:f6:85:26:4a:a1:c2:ac:a1:13:10:90:
                    6c:87:bd:e1:1b:fc:50:28:03:d0:77:ef:e3:ff:b6:
                    47:fe:b3:67:70:79:70:94:20:f2:85:91:c8:9a:79:
                    13:dd:2a:f5:08:22:46:89:2b:26:fd:d6:a3:b8:f8:
                    a1:98:e3:31:5b:5c:a2:58:52:6c:8f:36:a9:fc:5c:
                    c4:e4:e9:12:83:97:ee:73:b9:af:b4:6c:46:9f:73:
                    81:38:e0:92:7c:e0:2b:74:49:99:f1:90:70:21:48:
                    80:c7:4b:ad:6e:ec:4a:3e:fe:7e:6d:2f:77:f7:f6:
                    59:73:98:aa:a4:21:f1:6a:90:0f:e2:b4:15:ed:a4:
                    5c:89:76:0e:2b:58:04:53:e8:8d:ba:63:6f:56:98:
                    a5:44:61:ad:01:b4:6a:a7:21:f7:13:f8:54:60:f3:
                    fa:40:f9:c5:8b:00:85:84:8c:c9:14:ba:fe:7b:03:
                    2c:6a:de:bb:f3:9f:bc:7b:d5:57:e6:12:c1:5a:a9:
                    9b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D7:10:7C:78:53:2C:CB:19:23:6D:91:E1:01:A0:5D:BC:96:E6:44
            X509v3 Authority Key Identifier:
                keyid:C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:a5:ec:2b:7e:e8:3e:4c:ab:5f:49:09:b1:ba:5a:57:d4:b7:
         f2:d9:ec:f8:f1:82:f4:4c:7b:06:9f:cc:b3:b3:1a:f6:bd:99:
         63:f7:82:68:ff:dc:fe:e5:89:62:d5:55:85:c1:e0:90:de:62:
         24:1e:ba:00:63:ea:09:af:48:35:31:8a:d1:30:60:b6:3a:44:
         be:ce:13:ef:cb:f9:5b:a4:ba:74:7f:fc:cc:4d:69:24:24:75:
         f0:c8:6b:95:f6:45:bb:34:63:25:17:4d:cc:d3:f7:73:55:9c:
         c2:82:ca:13:74:ca:40:cf:90:87:41:35:ad:c1:9d:60:b5:9b:
         60:5c:f6:da:3d:c6:48:f4:f3:04:4c:cb:a8:4e:94:92:ba:da:
         66:20:42:93:bd:8a:14:b1:1f:96:84:10:79:94:f2:2c:2c:9a:
         67:e2:a7:b4:de:fd:63:90:3f:67:1e:25:5e:76:57:88:01:3a:
         3f:78:9f:39:c7:e2:20:52:45:b5:73:05:d8:de:ef:4a:c5:c0:
         c3:f5:a5:9a:22:4d:7e:c3:a2:79:35:46:c0:37:6a:c1:c6:2b:
         fe:76:16:70:c6:71:47:b1:66:e0:7d:38:98:04:6b:b2:f9:f6:
         ff:af:62:9b:56:36:b0:0e:96:f1:7e:1a:3e:35:6b:e4:8c:9a:
         38:92:10:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----