Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
File:                     evOlFiiU19GsKvgy16vPHb4RCuE.mft (raw, json)
Hash identifier:          QHm/dMWMiHqx/CrRYwoz2/kO22O/yQrbM7PkPE4jw5o=
Subject key identifier:   AB:7D:07:A0:20:98:28:0B:8A:86:21:EB:2C:56:EE:7E:E9:2B:BF:8B
Authority key identifier: 7A:F3:A5:16:28:94:D7:D1:AC:2A:F8:32:D7:AB:CF:1D:BE:11:0A:E1
Certificate issuer:       /CN=7af3a5162894d7d1ac2af832d7abcf1dbe110ae1
Certificate serial:       019658020106379F3A9F6ACED17A10250C0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
Manifest number:          0363
Signing time:             Mon 21 Apr 2025 11:00:48 +0000
Manifest this update:     Mon 21 Apr 2025 11:00:48 +0000
Manifest next update:     Tue 22 Apr 2025 11:00:48 +0000
Files and hashes:         1: evOlFiiU19GsKvgy16vPHb4RCuE.crl (hash: BhpWPVztkYtWeDWgxZePxb+/146UHvgJw9W7lpgG6U8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:58:02:01:06:37:9f:3a:9f:6a:ce:d1:7a:10:25:0c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7af3a5162894d7d1ac2af832d7abcf1dbe110ae1
        Validity
            Not Before: Apr 21 11:00:48 2025 GMT
            Not After : Apr 22 11:00:48 2025 GMT
        Subject: CN=ab7d07a02098280b8a8621eb2c56ee7ee92bbf8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:35:07:95:dd:be:ba:e3:f0:d6:db:54:87:e3:
                    2d:e7:74:97:14:ab:4a:4c:96:0d:35:d8:b7:d0:06:
                    29:f5:d1:93:fe:b3:f2:20:e4:91:e1:15:78:64:39:
                    53:a1:1d:a6:0a:ba:34:97:65:2f:85:bd:16:d0:9e:
                    76:06:67:d5:4f:14:b8:b8:f6:31:37:32:1f:78:0d:
                    96:88:03:8f:30:7a:f7:46:69:13:36:f9:7d:13:88:
                    46:52:71:8e:56:ac:7d:c3:5b:dc:f2:75:52:f3:d1:
                    d7:17:8c:aa:b2:ea:b9:ca:c9:7d:0b:14:7b:18:d6:
                    b7:d0:9d:b5:89:90:bf:35:b1:b0:a1:e0:3e:8d:04:
                    95:5b:1a:61:28:7c:c1:67:23:aa:9e:ab:c0:8d:ea:
                    6a:7b:91:1c:1f:3b:82:6f:87:7f:ca:b8:57:51:96:
                    c9:5b:91:00:cf:a1:41:fe:4c:b0:bc:0c:ac:18:4d:
                    6a:e8:fc:40:3a:fe:ae:8b:5b:1b:12:54:f1:9f:f4:
                    fc:84:cd:fd:d9:d0:d0:d5:26:e2:9b:06:45:ab:ac:
                    88:c3:94:17:c8:11:53:38:4e:ec:0b:fb:d3:c4:4d:
                    20:fe:f2:94:8a:b6:eb:ab:43:5e:3b:83:2b:03:55:
                    87:13:f0:ea:d9:6a:14:b5:4c:b8:62:c3:f7:b2:dd:
                    16:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7D:07:A0:20:98:28:0B:8A:86:21:EB:2C:56:EE:7E:E9:2B:BF:8B
            X509v3 Authority Key Identifier:
                keyid:7A:F3:A5:16:28:94:D7:D1:AC:2A:F8:32:D7:AB:CF:1D:BE:11:0A:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c0:7f:0f:79:18:5b:35:23:16:cc:85:60:49:50:d7:2e:f4:
         34:f6:73:92:6a:ac:fa:18:ec:cd:5d:38:9d:5d:c2:61:23:75:
         94:67:1b:3c:f2:1d:79:ab:0e:6f:95:27:01:81:8a:be:39:34:
         a1:c1:f2:fa:25:23:2e:f2:6e:28:25:46:bf:0d:ad:e8:19:31:
         35:c7:b4:79:1f:27:09:8e:b6:e8:73:c7:a8:f1:cc:b3:c4:05:
         64:87:6e:18:4e:44:7b:1b:86:01:1e:d2:97:f7:bc:8e:48:e1:
         50:19:91:83:d8:a1:e3:53:c0:60:d1:ef:c6:72:7a:71:32:e3:
         1c:51:30:20:ef:1f:9c:84:a2:7f:e8:0d:38:55:4a:e8:de:59:
         d0:33:4b:95:85:bd:e5:10:64:62:74:e2:e3:dd:7e:3f:fb:de:
         d5:11:12:90:37:69:cd:79:04:37:5a:72:f9:6d:6b:68:56:e7:
         99:e5:f8:b7:25:83:7b:8c:4e:53:d5:3f:e9:07:89:14:ea:84:
         27:95:6f:2e:1e:ee:01:d7:81:2b:e6:e4:cc:77:ae:ee:20:04:
         c2:08:91:f7:ae:12:c7:bc:6e:c3:51:00:63:61:60:8e:d4:fb:
         07:17:ea:03:9a:41:56:58:63:8b:cc:21:d7:94:26:5e:c0:c2:
         70:15:bc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----