Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft
File:                     USzy1zi8akeL64yogkEB_w_IGmE.mft (raw, json)
Hash identifier:          eUVN8Q5eow7bY77z+BHfewSPHtJ77sPYbZStbDDCqnw=
Subject key identifier:   99:A5:31:DA:76:BA:3B:78:A7:DC:84:BF:EC:2A:3F:97:F2:65:D6:C8
Authority key identifier: 51:2C:F2:D7:38:BC:6A:47:8B:EB:8C:A8:82:41:01:FF:0F:C8:1A:61
Certificate issuer:       /CN=512cf2d738bc6a478beb8ca8824101ff0fc81a61
Certificate serial:       0196789F2448FCB6E795490F4FA929A8E69C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/USzy1zi8akeL64yogkEB_w_IGmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft
Manifest number:          02F2
Signing time:             Sun 27 Apr 2025 19:00:17 +0000
Manifest this update:     Sun 27 Apr 2025 19:00:17 +0000
Manifest next update:     Mon 28 Apr 2025 19:00:17 +0000
Files and hashes:         1: USzy1zi8akeL64yogkEB_w_IGmE.crl (hash: JPL3lIWBVJ/JG/3DerGujCQNeck52VALK7m60+WuCqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/USzy1zi8akeL64yogkEB_w_IGmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:9f:24:48:fc:b6:e7:95:49:0f:4f:a9:29:a8:e6:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512cf2d738bc6a478beb8ca8824101ff0fc81a61
        Validity
            Not Before: Apr 27 19:00:17 2025 GMT
            Not After : Apr 28 19:00:17 2025 GMT
        Subject: CN=99a531da76ba3b78a7dc84bfec2a3f97f265d6c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:60:8d:e5:22:b4:b7:e6:cf:92:d8:d7:05:70:
                    0f:a9:ca:3f:b1:e4:de:7d:32:a4:e7:26:51:e9:44:
                    a2:b4:b5:3f:0a:e0:72:b9:91:dd:99:ea:48:ed:d1:
                    78:7d:6d:93:3c:27:38:af:9b:c0:f2:e3:b0:41:bd:
                    e8:74:fe:37:76:65:a7:37:ed:26:56:a7:48:dd:e0:
                    9d:52:21:d4:1c:52:11:db:f5:50:02:ce:a7:16:47:
                    a1:e6:93:dc:c4:77:88:60:97:ba:2e:e5:92:eb:33:
                    af:d8:1f:fa:da:a6:ab:19:ca:ff:ed:da:b3:d6:c0:
                    f3:3c:c2:b4:fb:b9:68:c6:77:f9:29:aa:2b:76:a3:
                    47:cb:61:71:35:16:df:31:3b:d5:25:c6:76:b4:6b:
                    dc:dc:39:5c:fc:34:2e:a8:6b:48:78:f9:54:34:c7:
                    9f:4a:e0:75:8f:5b:98:f7:19:f1:c6:11:f3:fc:ad:
                    68:29:7a:1d:7e:b8:16:d3:4e:8c:87:fb:26:38:7a:
                    c0:dd:fb:be:cc:07:db:d7:a4:31:b6:a0:1c:ca:6e:
                    a7:a1:74:a9:52:f6:cf:6d:2d:65:e7:a6:5e:3d:56:
                    9b:dc:cd:2e:34:f0:a3:5e:5f:7d:a1:8d:77:04:42:
                    d5:b3:4a:df:e0:8c:dd:1b:13:ba:f0:f0:dc:6f:e6:
                    84:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A5:31:DA:76:BA:3B:78:A7:DC:84:BF:EC:2A:3F:97:F2:65:D6:C8
            X509v3 Authority Key Identifier:
                keyid:51:2C:F2:D7:38:BC:6A:47:8B:EB:8C:A8:82:41:01:FF:0F:C8:1A:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USzy1zi8akeL64yogkEB_w_IGmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:eb:99:4a:74:ec:6a:cd:96:b9:76:67:33:5c:07:1f:b0:25:
         23:ff:db:95:f6:e0:6c:19:af:9d:d5:c7:43:93:71:88:f7:9c:
         37:29:35:e9:2c:40:d2:09:d6:e2:9c:ca:23:8c:de:b9:cc:0e:
         02:e7:b4:25:47:cb:38:a1:0a:00:dc:1b:2b:52:f3:8a:4c:ef:
         9f:fa:13:ba:c0:e9:99:bb:fa:fe:ba:84:b1:0e:d5:f9:b6:fd:
         47:fe:8b:1d:cc:53:6d:eb:58:82:bb:e0:89:0c:a0:86:90:04:
         cb:4c:c2:97:94:bd:fe:b8:bc:cb:7f:c4:95:6d:24:74:3d:9b:
         3b:39:e5:49:e3:e1:47:59:a6:98:d9:0a:90:0c:7c:4a:a5:da:
         48:03:76:76:0d:a4:71:32:ad:99:62:07:26:44:91:0f:73:98:
         0f:b4:d0:90:34:7a:ef:87:82:c1:83:83:88:33:6f:27:c0:76:
         3e:49:12:58:b1:f6:37:bd:40:a0:8f:a9:bf:1a:f0:6f:a7:d5:
         3f:8e:cf:c8:4a:75:35:6b:c7:20:b0:53:42:dd:c1:b5:89:55:
         e0:5d:03:cc:dd:3d:40:75:26:16:ec:a1:59:0f:db:ff:af:e8:
         5e:d2:d4:73:e3:4c:03:d7:2d:ab:5a:e8:fb:de:ee:bf:a7:2f:
         bb:71:27:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----