Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
File:                     c63mtioyesxAP-7D4asctt4tXgw.mft (raw, json)
Hash identifier:          nC1LA2aKHHFCMfKC8l+8Bw8rlNvbxeIWblZynXR7mpI=
Subject key identifier:   26:4D:FC:3C:32:F9:38:44:06:A1:3E:3C:74:B8:CB:93:1B:0A:79:A4
Authority key identifier: 73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C
Certificate issuer:       /CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c
Certificate serial:       019510C81E64CA67A35329F1D473CC08AE4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
Manifest number:          0E1D
Signing time:             Sun 16 Feb 2025 22:01:45 +0000
Manifest this update:     Sun 16 Feb 2025 22:01:45 +0000
Manifest next update:     Mon 17 Feb 2025 22:01:45 +0000
Files and hashes:         1: c63mtioyesxAP-7D4asctt4tXgw.crl (hash: IKfxWw8kzA9q4AHv1oCDC7lZ9JqRslMHVaImukTb7Jo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c8:1e:64:ca:67:a3:53:29:f1:d4:73:cc:08:ae:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c
        Validity
            Not Before: Feb 16 22:01:45 2025 GMT
            Not After : Feb 17 22:01:45 2025 GMT
        Subject: CN=264dfc3c32f9384406a13e3c74b8cb931b0a79a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fc:93:08:ee:62:d4:c4:b7:4a:56:ae:0d:0e:
                    e5:6d:9a:94:ae:75:3c:4a:4a:02:fc:fe:5a:eb:12:
                    7c:4f:9d:04:0c:8d:50:a3:92:5b:07:9c:14:df:b5:
                    5d:e2:72:bd:10:a4:c7:c4:04:a0:8e:5f:9d:45:5c:
                    48:e0:2d:fe:6e:c5:24:38:d0:c3:da:72:2c:36:6b:
                    ed:c8:34:fb:b1:fa:09:f9:e7:07:77:5d:df:73:34:
                    62:e9:d5:cd:b3:a8:df:ee:44:65:f8:ca:12:2f:41:
                    7d:b1:63:77:55:97:de:73:b3:e1:4f:c8:6d:a0:6e:
                    34:21:29:11:13:b2:46:75:28:d7:2a:42:aa:f5:d9:
                    81:bc:82:f6:c6:4e:db:a7:cd:dc:02:d8:94:61:b7:
                    d9:35:84:53:09:d2:a7:17:1d:9c:72:2a:37:45:13:
                    63:76:6c:16:e8:f5:3c:83:c2:ed:6c:26:b7:8f:c6:
                    91:07:46:8a:14:f8:53:75:db:08:aa:4a:6a:fb:34:
                    7c:b2:55:e0:a6:33:1a:bf:b1:41:11:18:7b:6d:29:
                    2a:59:3d:bf:7c:7c:b8:f5:3f:5c:bc:81:e7:8a:50:
                    0c:10:04:81:45:5e:04:87:ae:bc:d9:16:2f:a4:48:
                    be:65:41:8c:84:d8:8d:f3:9c:29:cf:71:fd:fc:5c:
                    3f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4D:FC:3C:32:F9:38:44:06:A1:3E:3C:74:B8:CB:93:1B:0A:79:A4
            X509v3 Authority Key Identifier:
                keyid:73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:6e:7f:6e:6e:9e:ca:8e:a2:ae:5d:a9:f1:42:20:af:45:d1:
         76:29:e2:17:a8:09:ac:b5:67:6d:ec:56:a9:a9:6e:83:f3:4f:
         b9:e0:30:75:6f:90:85:e3:8a:88:25:ed:4c:89:ef:41:1c:7e:
         26:c9:7a:e8:b8:cb:c4:cf:7b:84:f1:5a:ac:12:14:4d:45:df:
         12:b7:42:11:37:a8:02:c1:f7:8a:03:be:d8:f9:15:a3:dd:43:
         3c:89:3f:8b:db:8f:05:04:a3:b3:bf:9e:47:3b:34:f5:86:46:
         5c:a0:3c:a4:a2:9b:2a:2b:a1:65:75:5e:db:a4:50:6d:f0:1d:
         70:de:d3:84:8e:f8:ed:cc:cc:d4:bb:4a:1f:f2:08:29:10:58:
         0d:55:ce:e5:29:39:1f:d2:04:04:9a:b3:c4:98:25:d6:fa:be:
         81:6b:a9:02:5c:2a:c9:2f:76:a2:f4:4d:c7:6d:c3:a1:bf:8f:
         f4:ee:63:65:72:e6:1a:aa:f0:10:74:9a:bc:32:0d:cc:ce:34:
         5d:57:78:4b:92:93:26:c1:42:3b:92:79:28:4d:a9:92:fc:62:
         17:bb:33:ed:20:6f:f3:8f:c9:e0:4a:80:a7:ce:b3:88:af:a0:
         b4:cd:c1:50:a3:15:52:49:dd:d7:c2:f2:fd:38:18:c4:31:4c:
         fe:b2:7f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----