Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
File:                     9j_pwTQEHOvaVoufkI4q7zirf3U.mft (raw, json)
Hash identifier:          adOTgViIA9QXW1DrGkUNh+eVCnwTTX70RthIG7iWlOg=
Subject key identifier:   FA:FF:A5:F8:98:FD:0A:E3:C0:CA:4D:31:A6:3C:39:2B:53:3B:60:4E
Authority key identifier: F6:3F:E9:C1:34:04:1C:EB:DA:56:8B:9F:90:8E:2A:EF:38:AB:7F:75
Certificate issuer:       /CN=f63fe9c134041cebda568b9f908e2aef38ab7f75
Certificate serial:       01901DED861A4FB95DD260A45A528D9101D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9j_pwTQEHOvaVoufkI4q7zirf3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
Manifest number:          081A
Signing time:             Sat 15 Jun 2024 22:03:43 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:43 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:43 +0000
Files and hashes:         1: 9j_pwTQEHOvaVoufkI4q7zirf3U.crl (hash: g9RAvSJ6xpS6yFhjHK1gzVORLCB+oXLjivmrmVXjk1A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9j_pwTQEHOvaVoufkI4q7zirf3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:86:1a:4f:b9:5d:d2:60:a4:5a:52:8d:91:01:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f63fe9c134041cebda568b9f908e2aef38ab7f75
        Validity
            Not Before: Jun 15 22:03:43 2024 GMT
            Not After : Jun 16 22:03:43 2024 GMT
        Subject: CN=faffa5f898fd0ae3c0ca4d31a63c392b533b604e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:91:63:6d:db:77:54:1f:d9:cb:60:d1:b9:
                    50:42:1a:e4:55:50:ce:d9:68:ee:a1:a3:75:a4:4b:
                    f5:6b:c1:bf:60:44:89:95:e2:cc:55:45:d1:dd:34:
                    08:62:55:24:ce:41:de:b7:61:7d:ba:c8:ac:4f:8a:
                    82:26:19:83:4a:6a:04:71:c8:9c:d5:c3:14:36:0a:
                    58:aa:d0:57:b6:3a:37:33:e9:e1:28:89:ca:c6:c1:
                    9f:1e:f6:dc:fc:08:f8:93:57:8a:81:41:53:b9:6a:
                    6e:dc:f2:13:c4:6e:ff:b1:3d:ef:9c:b1:20:e6:e6:
                    00:46:33:b1:11:61:04:78:36:80:09:92:01:65:a1:
                    b5:95:0e:73:cb:af:2e:09:db:ab:71:26:db:48:43:
                    88:e6:c7:e1:80:e2:75:bd:c4:5b:1f:57:08:aa:f8:
                    39:2e:6c:0b:cb:10:20:c9:b9:2b:e3:54:ab:76:de:
                    2b:63:b7:89:a9:56:40:81:e0:42:f1:2b:d5:ed:f2:
                    2a:1c:ba:58:8c:61:18:12:c1:8d:d4:a4:c4:5e:30:
                    8c:d9:06:41:6d:ed:03:e7:8f:3f:d9:1b:98:e2:9b:
                    8b:84:c5:39:a3:f7:cb:14:3c:d0:b5:eb:4b:40:a7:
                    a9:24:62:69:b3:9c:d9:ab:e2:03:78:9e:23:a7:b4:
                    8f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FF:A5:F8:98:FD:0A:E3:C0:CA:4D:31:A6:3C:39:2B:53:3B:60:4E
            X509v3 Authority Key Identifier:
                keyid:F6:3F:E9:C1:34:04:1C:EB:DA:56:8B:9F:90:8E:2A:EF:38:AB:7F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9j_pwTQEHOvaVoufkI4q7zirf3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:6b:f5:75:bd:b0:ad:c9:2a:c0:dd:be:c3:f6:99:08:56:30:
         b6:8d:a1:cd:5f:31:10:41:6c:b7:a5:2d:91:1a:3a:71:b1:f9:
         35:f5:7d:59:36:d2:06:79:62:b1:8d:6e:c6:59:7f:5f:3c:fc:
         7c:ae:7c:da:93:58:2a:ba:0d:2a:bc:07:e3:9a:21:f8:12:78:
         f0:8e:6b:69:9a:9c:eb:d1:e7:dd:08:4c:07:19:b2:17:61:6e:
         27:ca:41:1f:fd:ec:a5:c0:84:95:42:d9:1e:fa:54:18:53:c0:
         e2:ea:59:fe:aa:ab:03:a8:10:9f:e6:78:ff:70:a9:2c:a2:57:
         af:bd:57:a2:69:76:7d:33:74:a7:8f:4a:e5:87:79:ef:c1:18:
         7c:e8:5f:e3:11:e4:6a:9c:2d:5d:31:5a:ce:f9:c0:44:72:99:
         c9:04:26:17:a2:da:dc:e5:67:91:a2:fc:e1:68:3a:59:50:a0:
         2b:59:b1:66:ef:60:5b:2c:54:d3:46:8e:90:47:fa:b3:fb:24:
         f8:f6:7b:93:e7:45:f5:1d:14:bc:da:00:fc:9c:53:f4:f4:34:
         d1:3a:14:35:68:b4:13:cd:f5:93:ab:49:a7:bc:32:21:22:f3:
         02:f0:af:34:96:e0:82:88:df:b4:75:d0:ac:89:bd:e9:2c:ca:
         0f:5d:17:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----