Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/1d2c58-a07b-449d-84ad-2a20a608f631/1/yEg4FrQ75KdvYGCDK-xJkvpamM4.mft
File:                     yEg4FrQ75KdvYGCDK-xJkvpamM4.mft (raw, json)
Hash identifier:          jddMG7w62H31+hs3DBKi5yCLipYgSRwAvRcfjtN3Np8=
Subject key identifier:   62:B2:7C:97:F4:13:27:86:17:AA:91:84:9D:F3:9D:55:47:16:CE:88
Authority key identifier: C8:48:38:16:B4:3B:E4:A7:6F:60:60:83:2B:EC:49:92:FA:5A:98:CE
Certificate issuer:       /CN=c8483816b43be4a76f6060832bec4992fa5a98ce
Certificate serial:       018F87B67B1F521A21FFB00CF997CE959284
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yEg4FrQ75KdvYGCDK-xJkvpamM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/1d2c58-a07b-449d-84ad-2a20a608f631/1/yEg4FrQ75KdvYGCDK-xJkvpamM4.mft
Manifest number:          019C
Signing time:             Fri 17 May 2024 18:00:34 +0000
Manifest this update:     Fri 17 May 2024 18:00:34 +0000
Manifest next update:     Sat 18 May 2024 18:00:34 +0000
Files and hashes:         1: yEg4FrQ75KdvYGCDK-xJkvpamM4.crl (hash: x9JTsqEkwM0IyWYeSnHPqcWUgQ9QkDpEtvgzeFbi1EY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/1d2c58-a07b-449d-84ad-2a20a608f631/1/yEg4FrQ75KdvYGCDK-xJkvpamM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/1d2c58-a07b-449d-84ad-2a20a608f631/1/yEg4FrQ75KdvYGCDK-xJkvpamM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yEg4FrQ75KdvYGCDK-xJkvpamM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:7b:1f:52:1a:21:ff:b0:0c:f9:97:ce:95:92:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8483816b43be4a76f6060832bec4992fa5a98ce
        Validity
            Not Before: May 17 18:00:34 2024 GMT
            Not After : May 18 18:00:34 2024 GMT
        Subject: CN=62b27c97f413278617aa91849df39d554716ce88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:84:e5:0b:1e:af:d8:c9:b1:34:bb:38:a2:29:
                    5d:a8:39:bd:4a:42:06:0e:5d:56:e7:ca:4a:1a:80:
                    5f:4e:15:52:8d:8d:c6:82:50:24:35:95:ba:9a:85:
                    99:eb:9d:29:72:b8:f1:33:90:fe:bf:8c:4a:73:d0:
                    6a:07:e0:f6:0d:45:3d:5a:a9:3d:52:d8:45:82:f0:
                    5f:84:8b:51:aa:93:e3:3b:35:e1:d0:70:4d:8e:0c:
                    13:49:23:9b:c9:40:ec:2e:9b:12:6e:4b:b6:fc:5c:
                    ca:d7:9f:77:f6:d2:57:e6:7d:0a:8c:8c:4e:0d:a6:
                    ce:f7:6e:38:1f:37:c5:ed:98:ec:b3:b8:f6:88:6e:
                    9b:71:94:28:3a:09:98:4e:05:a3:82:c7:7e:6c:e6:
                    23:b7:ff:8a:32:45:df:3e:c1:65:06:1c:70:d1:cc:
                    9c:0a:56:8d:5f:07:21:c8:4a:75:eb:9f:47:28:52:
                    8d:38:2d:c9:1a:1c:f6:d2:e6:d1:e5:fb:f6:00:82:
                    c6:05:d0:54:75:48:b3:36:77:8e:7f:cf:3d:76:c6:
                    ea:22:38:f7:bf:ca:fa:d7:60:4d:b1:2f:4c:63:9f:
                    1a:48:de:94:ba:ff:c5:72:c4:2f:52:c0:8a:d4:4b:
                    65:8d:6c:de:ee:fe:e5:0e:58:81:40:a2:c3:bf:7e:
                    0e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B2:7C:97:F4:13:27:86:17:AA:91:84:9D:F3:9D:55:47:16:CE:88
            X509v3 Authority Key Identifier:
                keyid:C8:48:38:16:B4:3B:E4:A7:6F:60:60:83:2B:EC:49:92:FA:5A:98:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEg4FrQ75KdvYGCDK-xJkvpamM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/1d2c58-a07b-449d-84ad-2a20a608f631/1/yEg4FrQ75KdvYGCDK-xJkvpamM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/1d2c58-a07b-449d-84ad-2a20a608f631/1/yEg4FrQ75KdvYGCDK-xJkvpamM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:61:93:df:2a:f0:e8:dc:92:ff:c9:9e:89:d6:37:2c:da:db:
         36:ba:25:c9:ed:f8:73:a8:7e:53:26:85:63:a4:da:60:88:73:
         21:4c:ea:bf:62:aa:ca:ee:01:7a:77:35:67:00:ec:f3:f1:ba:
         54:74:5e:db:a4:ea:f5:9b:0c:c2:3f:26:48:5a:df:34:9f:5b:
         6f:10:00:5b:39:d5:0a:58:75:4c:98:f9:62:91:ab:fe:dc:0d:
         3e:c8:6d:6f:8e:33:7a:23:22:4c:67:21:2d:f6:bd:98:13:72:
         21:61:1b:16:6e:57:eb:2b:c8:7e:eb:bc:52:de:96:c1:e1:36:
         91:52:25:83:44:32:1d:1d:ec:75:d2:eb:1e:ae:a1:32:38:0b:
         e5:47:b8:9e:6c:7b:16:1c:56:eb:85:05:4e:1e:e4:e1:5f:d2:
         17:ab:68:5d:73:9d:cd:69:5b:12:24:3f:ea:55:c8:5a:92:01:
         b1:3d:bc:0b:2f:52:71:75:b7:60:86:0f:6e:82:c1:29:a0:01:
         45:df:71:04:53:f5:a2:85:0c:84:5e:41:e0:90:9f:31:5e:c8:
         2b:da:6d:23:da:f4:c2:5b:81:68:b8:cb:21:76:89:9e:94:2e:
         0d:8f:dc:b0:c7:2d:97:a8:35:b9:b7:a0:91:d9:fb:96:8e:1d:
         84:59:18:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----