Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
File:                     y92Il7O48S4yaeHZHBXqtLNHkHA.mft (raw, json)
Hash identifier:          9OFzhJhxE4E6wsWzg0n7qZ5IaauVSynnyZmkw7puzc4=
Subject key identifier:   E2:85:A3:49:3D:B2:57:0A:73:98:C8:A0:E1:64:37:83:F2:A4:FA:0B
Authority key identifier: CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70
Certificate issuer:       /CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
Certificate serial:       018F87494F95B07D4B0B1A5614EF0E2C9389
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
Manifest number:          087D
Signing time:             Fri 17 May 2024 16:01:19 +0000
Manifest this update:     Fri 17 May 2024 16:01:19 +0000
Manifest next update:     Sat 18 May 2024 16:01:19 +0000
Files and hashes:         1: y92Il7O48S4yaeHZHBXqtLNHkHA.crl (hash: MD7a3Jfjkf5tnRh6piceYhD0kF4U/k2+BXBi6hpYWyo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:4f:95:b0:7d:4b:0b:1a:56:14:ef:0e:2c:93:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
        Validity
            Not Before: May 17 16:01:19 2024 GMT
            Not After : May 18 16:01:19 2024 GMT
        Subject: CN=e285a3493db2570a7398c8a0e1643783f2a4fa0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8c:ec:22:f3:07:1c:5e:25:0c:2c:ea:65:21:
                    67:94:88:92:58:e2:2e:15:93:52:e2:a8:48:8d:38:
                    04:94:fd:11:cf:c6:c0:5e:36:26:fc:4a:9f:4b:37:
                    bc:75:fd:1c:fd:d8:67:cd:ad:39:d7:ad:f1:ba:b1:
                    41:e6:88:85:57:2e:e1:cf:d8:8c:21:14:49:83:95:
                    0a:e6:f5:e2:da:cb:4a:d3:f8:88:27:9b:b2:b1:b0:
                    40:3f:11:d8:d0:e2:d5:20:1b:02:5c:6e:77:2c:00:
                    0b:67:9e:25:b3:ad:d1:68:56:71:0f:67:6b:01:f6:
                    8f:0c:ce:e1:2d:dc:40:f4:60:a3:3e:16:b4:f1:a7:
                    40:54:ca:d5:dc:91:18:ca:1a:ff:58:59:c2:ef:61:
                    94:a9:f7:aa:19:6d:af:2f:61:fb:b9:c0:85:a1:b8:
                    bb:8b:f7:64:15:de:f8:d3:58:e2:05:17:c0:4a:57:
                    e1:df:3c:50:3e:00:69:ea:06:8e:21:f9:d5:61:dc:
                    90:2e:9d:8c:36:18:70:e0:fe:b1:4e:ef:9d:98:a3:
                    86:af:ff:13:fc:5d:7b:96:7c:15:64:0b:7b:01:3a:
                    2d:62:3d:c1:fe:e9:6d:4d:6a:4f:82:01:f3:9e:fb:
                    3e:00:6d:f3:c2:1f:1b:01:1f:89:6f:24:b9:f9:ee:
                    0e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:85:A3:49:3D:B2:57:0A:73:98:C8:A0:E1:64:37:83:F2:A4:FA:0B
            X509v3 Authority Key Identifier:
                keyid:CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:0e:07:18:40:44:28:32:10:04:da:98:44:6f:f8:06:ba:69:
         f6:7a:3e:63:ae:90:da:29:42:29:7f:de:fc:4d:5e:3d:b3:ad:
         a9:1e:47:b2:66:64:9a:f0:48:90:4c:a0:67:d0:74:e8:41:b1:
         fc:51:e6:fc:12:58:8b:54:3e:96:8f:dc:3e:52:ae:cc:dc:1e:
         d7:58:ec:e3:cd:c9:a2:96:c8:04:8a:24:ba:5f:c4:dc:bc:46:
         e9:1d:ce:9e:5e:ae:5a:4e:0e:58:54:1d:c4:32:0c:f0:3a:2c:
         6f:e9:09:c5:fd:be:98:3e:bf:ea:a5:bb:5b:4a:03:d4:59:7b:
         1e:f3:d7:2e:a6:14:fa:53:38:14:63:cf:81:ff:e3:66:24:a1:
         fd:c3:30:bf:a6:da:e3:a3:5e:16:20:a1:ad:5a:2f:6d:60:59:
         c2:72:b5:a0:15:04:4c:b9:57:df:29:75:b9:fc:12:e7:7a:00:
         ff:ce:5d:c2:9e:8e:98:7f:da:9b:3a:ae:16:ce:22:04:15:8f:
         51:b5:83:34:04:f7:7b:c4:d2:dc:f5:0a:5d:23:fc:f7:8e:9a:
         ef:c3:f5:53:fb:e2:9d:40:fb:29:83:48:f5:34:8c:90:2e:6c:
         48:57:75:96:f2:fd:3f:89:3e:3e:ba:7c:c6:e9:a0:80:6f:17:
         82:90:5e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----