Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
File:                     0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft (raw, json)
Hash identifier:          mWMYMW3b1+M00W1x176VN9LucYTZjs8yA6ezcxUGL74=
Subject key identifier:   0A:8C:19:5C:F0:88:E8:5A:C9:3D:91:D2:36:31:2A:18:C2:D8:80:31
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Certificate issuer:       /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial:       01940721842F7D0747D913B151950E6DBB7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
Manifest number:          13C9
Signing time:             Fri 27 Dec 2024 08:00:24 +0000
Manifest this update:     Fri 27 Dec 2024 08:00:24 +0000
Manifest next update:     Sat 28 Dec 2024 08:00:24 +0000
Files and hashes:         1: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl (hash: aKf/obk5yfDwu+AGtchYs7qiKfhRL6DSMMya7SlMw+o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:21:84:2f:7d:07:47:d9:13:b1:51:95:0e:6d:bb:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
        Validity
            Not Before: Dec 27 08:00:24 2024 GMT
            Not After : Dec 28 08:00:24 2024 GMT
        Subject: CN=0a8c195cf088e85ac93d91d236312a18c2d88031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:12:2e:dd:a0:be:45:e6:7f:e5:61:a5:44:f9:
                    de:49:c7:23:0e:79:d0:85:3c:cf:5a:8f:81:7f:41:
                    4d:38:69:70:33:69:75:ce:db:0f:8b:55:0b:e1:9e:
                    f9:e1:22:fe:7c:f1:23:26:8e:f4:8b:2e:09:eb:12:
                    45:cc:4c:4e:b0:dc:54:a0:5c:25:e8:70:86:55:8d:
                    21:9d:ad:c2:34:b3:ae:19:20:a2:96:0b:5b:bc:6e:
                    88:53:4f:99:e6:3c:47:08:cd:88:67:51:8b:90:4b:
                    13:35:e2:d9:f8:45:a7:5a:dd:f6:99:81:c3:fd:ff:
                    c1:13:dd:c9:bb:4c:7b:52:73:0d:02:50:a2:78:8b:
                    86:86:94:3e:e4:a3:60:7c:ac:c9:9f:64:08:fc:17:
                    39:40:bb:51:7f:17:99:d5:9e:a2:ac:91:19:b4:f5:
                    21:1b:18:92:eb:83:47:cb:fa:2a:84:78:a2:3c:9c:
                    12:da:07:2d:e3:94:ca:c1:5e:68:e6:c4:2b:59:56:
                    cf:39:f2:d2:6b:8b:c8:3c:4b:c0:c1:96:fd:f5:f9:
                    bd:2f:53:9d:f8:f2:eb:99:df:6f:a7:d2:4c:5c:23:
                    fa:bb:d0:9c:e5:b6:dc:f8:f1:e2:0b:20:71:c4:84:
                    22:00:9a:c2:61:57:a0:9f:f8:ca:89:ee:3a:a5:ed:
                    f1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8C:19:5C:F0:88:E8:5A:C9:3D:91:D2:36:31:2A:18:C2:D8:80:31
            X509v3 Authority Key Identifier:
                keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:25:4b:cc:a6:38:a8:b6:68:fb:81:62:c5:be:07:de:64:1f:
         6e:4f:92:73:88:94:dd:a0:3a:da:6f:5a:46:cf:79:76:b9:af:
         6d:91:0f:ed:f8:30:9a:af:75:f8:45:af:b0:6a:77:c6:db:b4:
         d8:80:f2:4d:72:a7:5f:24:78:8d:60:85:d0:10:86:b5:0c:ff:
         60:55:ef:d0:57:13:4a:44:23:a6:59:4f:04:8f:64:cd:07:21:
         0c:80:d2:37:5f:79:b2:d9:fa:d8:2b:fe:2d:d2:ff:61:6b:0f:
         69:58:1e:40:2f:3b:7d:13:27:61:9c:4d:36:c1:56:0a:66:41:
         5d:1e:c7:e2:2c:bd:2b:39:83:e7:0e:b0:4d:17:45:fa:bd:b7:
         29:0f:f1:33:46:2d:d0:33:b3:48:02:55:69:40:dd:c3:8b:cd:
         d4:da:f0:a1:9d:41:fd:7c:88:28:15:46:b9:d7:2b:d1:92:ba:
         54:5f:a9:0f:e6:fa:da:53:63:3d:c4:7d:7f:2d:40:b8:b9:00:
         d8:54:41:01:38:cf:e3:14:e4:a9:d5:4d:b3:e9:00:02:5a:e4:
         dd:65:a0:42:12:4f:dd:2d:01:39:82:7b:6f:36:8e:97:58:db:
         06:21:46:c5:c2:ea:a8:0a:d7:f0:fd:f2:1a:ce:8b:99:f3:55:
         fe:6f:81:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----