Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.mft
File:                     Un0m8LBCyUz2f2JeXY5i4qKudVI.mft (raw, json)
Hash identifier:          ncPqRNkAGFEFv5o0D8i2txc2hy+MPLrlZdJ6bpnYLS4=
Subject key identifier:   5C:23:84:56:E9:1A:48:F8:FA:DD:09:CB:28:84:6B:DF:63:AD:ED:1F
Authority key identifier: 52:7D:26:F0:B0:42:C9:4C:F6:7F:62:5E:5D:8E:62:E2:A2:AE:75:52
Certificate issuer:       /CN=527d26f0b042c94cf67f625e5d8e62e2a2ae7552
Certificate serial:       019510FDADC0BCAD18DBAB837F153273BE5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Un0m8LBCyUz2f2JeXY5i4qKudVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.mft
Manifest number:          0420
Signing time:             Sun 16 Feb 2025 23:00:15 +0000
Manifest this update:     Sun 16 Feb 2025 23:00:15 +0000
Manifest next update:     Mon 17 Feb 2025 23:00:15 +0000
Files and hashes:         1: Un0m8LBCyUz2f2JeXY5i4qKudVI.crl (hash: 0a1m/c7I/IBUiEYy73r1QLR49zXI2tx+wLKD4l7sKMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Un0m8LBCyUz2f2JeXY5i4qKudVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:fd:ad:c0:bc:ad:18:db:ab:83:7f:15:32:73:be:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=527d26f0b042c94cf67f625e5d8e62e2a2ae7552
        Validity
            Not Before: Feb 16 23:00:15 2025 GMT
            Not After : Feb 17 23:00:15 2025 GMT
        Subject: CN=5c238456e91a48f8fadd09cb28846bdf63aded1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:09:bd:48:d0:2f:33:e9:55:21:af:fd:38:ab:
                    49:79:6b:18:9e:0f:11:d2:d2:d9:1d:eb:4d:c6:4f:
                    7a:71:4f:53:1b:2b:f8:29:b7:3a:4d:0b:37:08:a4:
                    53:dd:e1:03:cf:85:cf:a5:9f:38:ac:78:1e:84:34:
                    5b:91:b3:2c:67:a9:a7:24:9d:86:38:aa:cb:16:68:
                    dd:6a:cf:dc:94:1c:7d:0e:07:18:6d:43:41:38:d0:
                    91:cf:ab:36:29:8f:1e:80:e3:d3:fd:19:00:1e:30:
                    ce:06:50:60:4a:df:9e:42:1f:97:f2:01:4c:d4:5a:
                    60:7d:64:e1:6b:cd:58:4f:34:7e:0d:46:e7:b3:22:
                    f1:52:c1:13:a5:11:fa:db:fa:f4:2f:7e:09:e2:11:
                    90:97:d8:81:d8:18:91:7f:50:90:e7:fd:de:29:b7:
                    aa:b5:31:3d:e7:3d:c6:a2:5f:3e:07:6c:dd:72:65:
                    6c:94:f1:23:08:b3:4d:cb:73:2e:9c:a2:6b:31:ea:
                    c9:a8:dd:35:10:ae:26:c5:8e:1f:25:27:c0:6d:0d:
                    4d:1d:67:b9:a6:54:c2:c4:a2:cb:04:a9:19:42:73:
                    3f:cb:27:00:b8:15:0c:3b:6a:75:7a:eb:5b:cb:9c:
                    9a:45:0f:df:68:c4:64:3f:1a:7a:b7:1f:05:c5:85:
                    8d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:23:84:56:E9:1A:48:F8:FA:DD:09:CB:28:84:6B:DF:63:AD:ED:1F
            X509v3 Authority Key Identifier:
                keyid:52:7D:26:F0:B0:42:C9:4C:F6:7F:62:5E:5D:8E:62:E2:A2:AE:75:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Un0m8LBCyUz2f2JeXY5i4qKudVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:6d:62:85:b8:cb:da:97:04:e7:e0:4d:6b:3b:26:30:87:5e:
         fa:54:4d:5a:18:1c:d3:3a:df:e2:68:75:bc:e1:d3:c5:37:f4:
         b5:d8:8b:5f:d2:40:37:53:23:11:94:76:31:6e:9d:42:56:0c:
         8d:d2:dc:fe:9a:67:42:74:cc:f2:a9:b2:b3:f3:c5:63:08:67:
         cd:07:52:66:bb:81:83:49:87:8b:a8:1f:a1:a2:32:97:87:23:
         c0:a1:09:1c:15:de:4f:4a:d5:72:f1:6b:24:01:81:08:a2:95:
         40:3c:f9:b5:ac:32:d8:2a:94:bf:e9:62:bd:f1:30:b4:75:30:
         6b:07:46:2f:33:b0:ab:53:84:e3:6d:4d:63:6a:96:ef:fd:73:
         f9:98:78:c1:4c:9f:47:f2:93:9e:a5:e1:0a:07:a7:e1:05:5a:
         40:54:18:90:13:c7:ac:1e:b2:9d:8a:d2:2e:60:50:15:44:7f:
         c7:d8:38:91:01:83:51:d1:a6:1f:21:fc:33:d0:76:61:2e:ca:
         2a:f0:e2:02:2e:67:9f:08:42:c2:04:ad:90:f4:08:dc:12:e4:
         7f:20:29:eb:2d:6b:60:16:30:ee:71:79:99:53:71:1c:e0:85:
         a0:87:52:8e:2a:f2:70:ee:6d:5a:ab:cb:3b:fd:39:39:ed:6a:
         3f:42:7e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----