Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
File:                     3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft (raw, json)
Hash identifier:          ffACw92ii+EKMiUz59MbNcz6pwSCgtZS87BdbGumgrs=
Subject key identifier:   9F:6D:34:6A:7F:BD:2A:1C:E5:80:67:BD:01:B4:F7:65:1E:24:FC:61
Authority key identifier: DD:39:9E:49:41:89:F6:91:A5:ED:64:F3:BE:3A:6A:3B:50:22:50:91
Certificate issuer:       /CN=dd399e494189f691a5ed64f3be3a6a3b50225091
Certificate serial:       0190490C40149816843E24A3CD5BC20CFD8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
Manifest number:          0149
Signing time:             Mon 24 Jun 2024 07:00:57 +0000
Manifest this update:     Mon 24 Jun 2024 07:00:57 +0000
Manifest next update:     Tue 25 Jun 2024 07:00:57 +0000
Files and hashes:         1: 3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl (hash: w86kCw9kzovZdZMIb2jHp8Wh+QLpVby2QRNztR5TFyE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 07:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:0c:40:14:98:16:84:3e:24:a3:cd:5b:c2:0c:fd:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd399e494189f691a5ed64f3be3a6a3b50225091
        Validity
            Not Before: Jun 24 07:00:57 2024 GMT
            Not After : Jun 25 07:00:57 2024 GMT
        Subject: CN=9f6d346a7fbd2a1ce58067bd01b4f7651e24fc61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:40:f8:61:2c:ef:6d:03:11:f3:48:87:05:a1:
                    24:f8:bc:08:f5:59:c6:32:38:5c:8e:af:41:5c:3f:
                    d0:84:4e:56:b7:84:12:64:98:00:ed:ae:08:e1:25:
                    3a:f2:eb:0d:fc:32:17:f0:46:e9:9b:04:c6:31:df:
                    c0:d8:4c:f9:3e:8b:ba:c4:3b:07:88:7c:67:5b:cb:
                    03:e4:7e:12:81:57:87:c7:47:91:2c:a8:7e:df:3a:
                    c5:3d:34:c1:80:14:e2:1e:45:df:95:38:9f:0a:a5:
                    62:6c:f6:b0:f1:eb:e2:4d:2b:bd:5c:70:9b:a4:99:
                    e9:da:df:cf:03:fb:74:df:b3:50:b5:69:10:e6:57:
                    31:7f:db:ab:2a:2f:b2:ac:6d:43:e7:d4:de:01:0c:
                    45:a3:0c:6a:ba:98:b8:74:45:2b:64:c1:43:cf:dc:
                    68:5e:d2:9f:01:d8:0d:18:e8:d5:b8:ca:b8:80:93:
                    88:c8:d9:8d:b5:33:ed:08:c9:73:d2:b3:bd:49:47:
                    9e:5e:6c:62:5a:20:55:e1:45:3f:af:1f:6d:d2:b5:
                    d5:f2:96:8e:df:26:59:af:d6:51:cf:10:cb:32:7b:
                    9f:a6:f8:af:26:d7:4d:eb:96:b3:b7:39:c2:88:f6:
                    51:36:bc:ae:3d:91:bf:9d:7f:59:7d:f7:0e:c9:e7:
                    a8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6D:34:6A:7F:BD:2A:1C:E5:80:67:BD:01:B4:F7:65:1E:24:FC:61
            X509v3 Authority Key Identifier:
                keyid:DD:39:9E:49:41:89:F6:91:A5:ED:64:F3:BE:3A:6A:3B:50:22:50:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:93:c9:5b:57:e6:90:8c:6c:49:82:4e:1d:44:d8:30:83:ac:
         78:1c:b7:8f:9b:28:d4:72:e5:53:dd:ed:90:01:36:b4:4a:86:
         75:17:de:19:f8:8d:e1:14:7f:b1:26:e6:6c:76:2d:a4:06:0e:
         a8:94:26:47:6d:94:35:0b:07:da:5e:5e:06:de:2d:e0:5f:d4:
         cc:91:e3:92:1a:49:0e:0d:e2:63:39:15:cd:fe:10:4d:f1:b7:
         5c:fa:12:95:6a:11:da:53:29:e3:bc:48:76:16:42:42:02:5f:
         03:8b:2f:01:04:46:9f:88:64:31:9e:20:03:57:4a:db:6f:8f:
         57:66:b0:59:d9:7b:e6:a1:87:9f:64:01:c8:94:30:29:10:4f:
         ac:66:0f:5d:71:05:19:b7:61:51:45:42:bd:81:9e:6e:99:98:
         ae:79:82:e1:69:34:4c:18:62:cd:e0:8c:eb:ba:f5:9d:4d:01:
         41:19:95:b5:f2:41:f0:4f:ed:24:c1:d3:30:02:4f:15:33:4c:
         d0:fc:09:96:96:ad:87:0d:5a:d0:89:f4:2e:fa:80:ec:dc:82:
         fa:c9:8a:8c:04:77:46:53:47:4b:7e:98:95:a1:50:8a:bf:8a:
         2d:e3:7f:99:33:b4:5e:58:e8:dc:8a:6e:95:39:d5:ab:f3:f3:
         64:3a:ab:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----