Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
File:                     KAYV5gBqhh9mz3MH0w_JNQx2994.mft (raw, json)
Hash identifier:          URiyQ25y1pxaiOvP6F4yAHjKJAojzwV04PZeUP5woB4=
Subject key identifier:   25:73:ED:A8:D0:76:01:D1:40:95:D1:B7:B1:D7:AA:12:C8:04:97:19
Authority key identifier: 28:06:15:E6:00:6A:86:1F:66:CF:73:07:D3:0F:C9:35:0C:76:F7:DE
Certificate issuer:       /CN=280615e6006a861f66cf7307d30fc9350c76f7de
Certificate serial:       0196C9850F1590CF5A3C9CA2A3C79A4815E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KAYV5gBqhh9mz3MH0w_JNQx2994.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
Manifest number:          1537
Signing time:             Tue 13 May 2025 12:01:02 +0000
Manifest this update:     Tue 13 May 2025 12:01:02 +0000
Manifest next update:     Wed 14 May 2025 12:01:02 +0000
Files and hashes:         1: KAYV5gBqhh9mz3MH0w_JNQx2994.crl (hash: FDS9hSmIXdpOv6VIOD6sP4fkg4wtIHXPUtne/1nx3ro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KAYV5gBqhh9mz3MH0w_JNQx2994.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 12:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:85:0f:15:90:cf:5a:3c:9c:a2:a3:c7:9a:48:15:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=280615e6006a861f66cf7307d30fc9350c76f7de
        Validity
            Not Before: May 13 12:01:02 2025 GMT
            Not After : May 14 12:01:02 2025 GMT
        Subject: CN=2573eda8d07601d14095d1b7b1d7aa12c8049719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:85:56:16:e1:8a:ef:f1:7c:2f:2f:68:be:4f:
                    89:b6:e2:ee:26:b8:97:55:f4:e3:15:2f:10:34:94:
                    86:3e:8e:1b:5e:1e:c1:4e:52:aa:f7:3f:d8:9c:0b:
                    76:31:77:09:d6:b7:28:0a:b4:9d:1c:0e:fc:6b:4b:
                    18:61:9c:c2:1a:c1:ec:4c:6e:58:6b:52:73:c2:e6:
                    52:30:af:f1:d2:ce:98:e0:9b:30:d7:38:39:1b:05:
                    f4:99:f5:53:47:d4:4d:2e:e3:bb:6b:66:5f:cb:05:
                    33:31:b5:1f:8f:be:ec:42:5b:21:44:12:d9:aa:ac:
                    72:1c:9c:e9:0b:3c:1c:7f:07:0f:78:c4:69:4a:69:
                    6a:cf:66:1d:5b:3a:ac:07:ab:19:3c:21:50:f9:8f:
                    8e:4b:8c:b0:63:e4:a4:88:13:b2:2c:f1:3d:ec:76:
                    cd:6b:bb:4d:bd:64:e6:94:55:7b:f0:99:6d:da:fe:
                    9f:3c:8e:e5:fa:92:58:2f:70:1e:36:01:87:be:5a:
                    1e:9a:7b:40:80:6d:02:19:44:da:52:ca:da:a4:2b:
                    34:aa:2e:80:c5:4b:77:df:a7:13:54:e5:18:11:35:
                    5d:65:f4:bf:81:66:72:34:1a:a0:40:6d:c9:29:65:
                    06:dd:77:d9:fb:0e:fe:47:86:70:80:88:7b:ea:ab:
                    ab:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:73:ED:A8:D0:76:01:D1:40:95:D1:B7:B1:D7:AA:12:C8:04:97:19
            X509v3 Authority Key Identifier:
                keyid:28:06:15:E6:00:6A:86:1F:66:CF:73:07:D3:0F:C9:35:0C:76:F7:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAYV5gBqhh9mz3MH0w_JNQx2994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:3a:96:ec:a2:cb:d1:d5:c5:8d:94:7c:d4:f5:66:4a:31:95:
         f6:c5:96:96:48:c3:e7:f1:f9:0d:65:fc:df:de:88:63:8a:6e:
         5d:9b:1b:f5:94:6f:86:7f:3e:4c:d6:40:41:2b:24:23:82:36:
         31:95:b8:15:de:f7:ce:6f:cc:e9:d0:10:25:97:88:2d:4b:62:
         f3:52:41:3d:9b:24:8d:ea:c8:c4:1a:0a:9f:91:c6:dd:76:6d:
         95:d3:a1:cb:bd:80:df:36:79:94:8e:4d:77:8b:eb:88:18:a9:
         b7:7b:ab:7e:9c:44:2e:a0:77:36:ff:e8:e1:d4:19:79:17:7c:
         c4:1f:f8:c7:e6:f3:e9:41:3a:1c:9d:c4:60:3f:c7:5d:a2:5e:
         ec:16:42:24:c9:0e:3a:13:c0:da:ca:71:75:c1:23:04:32:04:
         80:49:be:76:bb:37:b0:2b:c4:fa:6f:c2:3d:21:ca:30:9f:86:
         bb:78:92:67:5b:ae:0d:a6:1b:18:3d:fe:34:58:71:9e:b3:8b:
         d8:5a:46:bb:de:80:0e:6f:c2:64:68:07:dd:60:0b:00:85:b9:
         62:69:52:ee:fb:90:7b:08:f3:64:12:08:21:26:2c:a8:80:18:
         a0:c7:a1:9e:38:74:c5:4e:4e:20:b6:95:dc:21:c4:3f:de:51:
         aa:d3:ca:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----