Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
File:                     yVJqou_HA-knkAcfgubuUpuV6x4.mft (raw, json)
Hash identifier:          zvqbRiDN5V8sph+QGA3Tc4sdj74l/DqjJHmtYT6v7Kk=
Subject key identifier:   8A:B7:D6:ED:28:52:30:12:7C:D5:8A:1E:0E:E6:A2:93:A5:52:9A:F0
Authority key identifier: C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E
Certificate issuer:       /CN=c9526aa2efc703e92790071f82e6ee529b95eb1e
Certificate serial:       018F98AAE69A372D1F41CFABE05694845601
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
Manifest number:          0687
Signing time:             Tue 21 May 2024 01:01:27 +0000
Manifest this update:     Tue 21 May 2024 01:01:27 +0000
Manifest next update:     Wed 22 May 2024 01:01:27 +0000
Files and hashes:         1: yVJqou_HA-knkAcfgubuUpuV6x4.crl (hash: TcMhPapWUGidK9AntbkerzqOmB5jTycwS2LJbjZROx0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:aa:e6:9a:37:2d:1f:41:cf:ab:e0:56:94:84:56:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9526aa2efc703e92790071f82e6ee529b95eb1e
        Validity
            Not Before: May 21 01:01:27 2024 GMT
            Not After : May 22 01:01:27 2024 GMT
        Subject: CN=8ab7d6ed285230127cd58a1e0ee6a293a5529af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:12:91:14:5f:3d:04:e5:db:b4:67:ec:8f:fa:
                    f2:39:21:60:36:95:18:5c:a4:f7:fc:67:7a:d8:d8:
                    65:0f:14:21:57:38:46:07:f9:2a:0d:2a:94:1c:4d:
                    42:cf:57:8d:6a:73:e5:f8:66:df:d6:14:2c:6f:00:
                    ce:10:e7:ca:8a:13:d0:68:c2:d7:2f:6d:64:06:a8:
                    a0:1b:92:49:b1:e1:7d:25:19:1c:18:1b:77:1c:29:
                    20:71:9e:d9:12:77:14:e4:45:05:4d:e5:24:33:f9:
                    ec:ef:4f:e3:bb:76:11:fa:ed:ef:3e:e5:7c:ea:f8:
                    35:27:0c:79:c5:ed:db:6c:28:0a:67:24:67:1a:fb:
                    0a:96:c5:72:d4:0e:1e:7e:cd:f4:8f:c9:be:a8:09:
                    08:51:08:7e:b6:cd:2a:aa:be:ef:c2:44:c2:b6:e9:
                    43:ab:62:5e:14:34:20:f8:a2:8d:91:de:d5:49:d7:
                    cf:18:d3:22:aa:8c:b5:e3:44:19:26:86:5e:a8:93:
                    5d:eb:3d:d8:0a:47:84:9d:b6:21:f5:32:fe:09:0c:
                    c1:59:77:71:53:0a:72:10:94:0a:2f:cb:d6:ef:94:
                    02:91:a6:b9:60:bb:aa:f7:30:54:aa:c5:02:3a:71:
                    e6:e4:60:13:e9:25:42:ef:eb:5b:4e:08:28:95:41:
                    9e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B7:D6:ED:28:52:30:12:7C:D5:8A:1E:0E:E6:A2:93:A5:52:9A:F0
            X509v3 Authority Key Identifier:
                keyid:C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:13:36:06:10:e1:aa:41:9b:cb:18:64:1d:f0:24:ba:14:f9:
         f5:b0:93:19:85:27:59:33:c8:d7:95:80:83:e1:34:aa:d6:d5:
         9d:35:1f:b9:b2:cd:bd:3c:31:68:39:04:ef:b8:b8:d1:3e:6a:
         b4:74:fe:95:d0:b5:d1:9a:db:c8:4c:3c:18:3d:dd:18:2f:5b:
         e8:5f:32:21:38:69:e5:1f:b2:06:03:ea:03:d5:15:63:f3:e4:
         79:f4:60:86:f0:5d:3e:ed:64:d1:77:1c:ea:4f:c4:36:16:c6:
         37:22:68:fc:b8:2b:c8:ee:d0:0d:7a:33:1e:4e:62:22:70:bf:
         6a:91:d7:21:7d:b4:2f:36:a4:73:69:a6:fa:39:8c:30:7a:7d:
         fa:2c:8d:27:8d:44:8a:4b:bf:fc:9d:90:db:d6:c8:48:41:ab:
         90:11:5e:25:30:19:32:11:c1:31:4a:19:1c:18:6b:85:7f:13:
         58:33:77:05:17:92:27:9e:f0:24:fa:5f:0f:0f:ca:b8:5d:fa:
         05:5e:9d:75:fa:09:f6:9a:ca:17:d1:8d:86:52:be:da:9d:94:
         db:42:16:14:ef:28:e7:37:5e:41:ba:ed:b3:21:e5:ed:d4:a2:
         01:55:f8:13:69:5e:5d:01:27:55:d2:ed:19:26:e4:c6:b9:92:
         20:19:48:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----