Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9d3500-7aba-4e66-bc50-291bd495bd9e/1/YCcdsz0j2d-kf8UMq1X7-mch_4o.mft
File:                     YCcdsz0j2d-kf8UMq1X7-mch_4o.mft (raw, json)
Hash identifier:          DNKLERwFr93QM1pMiS98qIdh7c0CcDotFhiRRiABfYw=
Subject key identifier:   20:57:EA:6C:FE:4C:ED:D8:67:7F:AF:BB:D6:F1:0E:50:A8:8E:9C:62
Authority key identifier: 60:27:1D:B3:3D:23:D9:DF:A4:7F:C5:0C:AB:55:FB:FA:67:21:FF:8A
Certificate issuer:       /CN=60271db33d23d9dfa47fc50cab55fbfa6721ff8a
Certificate serial:       018F8749D6D964EC65774C510424A5224B1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YCcdsz0j2d-kf8UMq1X7-mch_4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/9d3500-7aba-4e66-bc50-291bd495bd9e/1/YCcdsz0j2d-kf8UMq1X7-mch_4o.mft
Manifest number:          0966
Signing time:             Fri 17 May 2024 16:01:54 +0000
Manifest this update:     Fri 17 May 2024 16:01:54 +0000
Manifest next update:     Sat 18 May 2024 16:01:54 +0000
Files and hashes:         1: YCcdsz0j2d-kf8UMq1X7-mch_4o.crl (hash: bNccRbu1nA9Jp8RD7p1QV6W/Q9W4ZkanAoJauUe1qx8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/9d3500-7aba-4e66-bc50-291bd495bd9e/1/YCcdsz0j2d-kf8UMq1X7-mch_4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/9d3500-7aba-4e66-bc50-291bd495bd9e/1/YCcdsz0j2d-kf8UMq1X7-mch_4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YCcdsz0j2d-kf8UMq1X7-mch_4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:d6:d9:64:ec:65:77:4c:51:04:24:a5:22:4b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60271db33d23d9dfa47fc50cab55fbfa6721ff8a
        Validity
            Not Before: May 17 16:01:54 2024 GMT
            Not After : May 18 16:01:54 2024 GMT
        Subject: CN=2057ea6cfe4cedd8677fafbbd6f10e50a88e9c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:24:55:55:b9:3e:56:40:d5:b6:be:61:63:8a:
                    82:dc:0d:f7:06:f4:cd:63:d5:f2:0a:7d:6d:24:07:
                    21:7b:2b:ed:f2:7c:40:c8:cf:57:7a:c7:35:97:ac:
                    6d:c2:c8:76:a5:05:33:52:bd:f6:73:69:37:48:a0:
                    7e:01:50:b0:10:60:4f:bb:bb:ba:2f:93:46:d3:9c:
                    0a:7c:38:15:0f:df:2f:73:3b:57:ba:c5:91:b4:c6:
                    10:cf:cc:a6:03:12:d9:36:88:e6:ac:c7:f5:6a:78:
                    ff:1d:c2:f8:00:f1:e9:ec:08:82:9f:70:54:0b:b3:
                    4c:3c:f7:ac:ce:c4:ce:f1:e8:e7:4d:45:99:4d:80:
                    69:12:a1:78:eb:37:5e:7f:b0:aa:c5:bb:22:07:4e:
                    64:0e:4c:fe:52:84:72:4b:37:81:b7:e1:be:dd:f3:
                    9e:3d:4d:6b:f6:a5:95:c2:f3:50:80:c4:94:9b:59:
                    75:38:ca:10:ef:d9:09:5e:d8:77:c1:1f:2f:49:e6:
                    6d:08:9f:a9:94:10:61:b9:c5:d3:11:e0:be:fd:49:
                    17:dd:1d:f4:ee:f2:e6:2b:c3:24:bb:14:8d:e4:dd:
                    ce:db:f6:5f:b0:8b:b0:f0:fe:68:70:b6:b6:bc:13:
                    c0:af:a2:ee:c2:5b:d9:7d:5d:41:d1:46:36:fb:cd:
                    9d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:57:EA:6C:FE:4C:ED:D8:67:7F:AF:BB:D6:F1:0E:50:A8:8E:9C:62
            X509v3 Authority Key Identifier:
                keyid:60:27:1D:B3:3D:23:D9:DF:A4:7F:C5:0C:AB:55:FB:FA:67:21:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCcdsz0j2d-kf8UMq1X7-mch_4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9d3500-7aba-4e66-bc50-291bd495bd9e/1/YCcdsz0j2d-kf8UMq1X7-mch_4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9d3500-7aba-4e66-bc50-291bd495bd9e/1/YCcdsz0j2d-kf8UMq1X7-mch_4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:2d:fb:59:83:83:28:1d:16:7c:19:d7:f6:c5:a3:7a:44:95:
         1c:7e:4d:9e:a4:00:d6:28:b6:8e:eb:5a:6c:18:f6:9b:01:d3:
         0c:e6:75:a2:20:ab:ad:5a:8e:5d:86:75:53:3d:a1:c8:32:55:
         f8:3a:15:7c:54:f1:b5:ee:68:2a:84:fe:93:e7:bf:95:e5:fb:
         47:e5:a9:b3:cb:cb:88:0f:b1:0d:7a:e9:41:86:ae:2f:82:0e:
         26:78:c0:03:d7:b5:62:a5:18:96:f8:07:11:8d:7d:88:3f:4f:
         b3:41:d2:f6:11:13:3e:00:d0:67:62:19:5f:64:38:2e:e8:41:
         32:e4:da:76:91:dd:72:c4:6f:c6:e4:27:ea:d3:8a:76:f8:c8:
         2b:3a:27:77:f3:99:4f:1a:a7:3e:9d:de:91:c0:6e:15:0d:6e:
         45:cc:16:98:cd:cf:83:cd:40:c1:f5:c8:1a:c8:be:bd:c9:51:
         e3:58:c1:f0:45:cf:6c:8c:55:12:a4:c9:91:1f:52:96:82:6a:
         68:2b:15:df:a4:6b:58:0e:ab:13:eb:f4:45:ad:5a:f5:15:2d:
         ef:46:1d:3d:c7:11:da:b0:12:f8:f3:5b:d9:ea:2c:5a:67:0c:
         6f:cb:8b:c2:65:b8:7b:39:20:c6:b5:1d:54:ff:f7:bf:2c:e0:
         48:cd:65:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----