Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.mft
File:                     e6g1J3sxmmnH9usa1IsJ1mMv090.mft (raw, json)
Hash identifier:          4Pb95X6ud4+GwTogEz6slCFiuOYX36ntFazhp0B5CwY=
Subject key identifier:   BE:66:42:09:44:8B:12:16:C7:64:AD:13:0F:2C:55:09:01:F7:9A:66
Authority key identifier: 7B:A8:35:27:7B:31:9A:69:C7:F6:EB:1A:D4:8B:09:D6:63:2F:D3:DD
Certificate issuer:       /CN=7ba835277b319a69c7f6eb1ad48b09d6632fd3dd
Certificate serial:       0191FAEDFF76AD4162ED7C93583BFB02BC66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6g1J3sxmmnH9usa1IsJ1mMv090.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.mft
Manifest number:          016E
Signing time:             Mon 16 Sep 2024 13:03:06 +0000
Manifest this update:     Mon 16 Sep 2024 13:03:06 +0000
Manifest next update:     Tue 17 Sep 2024 13:03:06 +0000
Files and hashes:         1: e6g1J3sxmmnH9usa1IsJ1mMv090.crl (hash: P5YpTfn0k2ywKthjKCAQ5Da50D8XC9lq/ebW5cf5AYE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6g1J3sxmmnH9usa1IsJ1mMv090.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ed:ff:76:ad:41:62:ed:7c:93:58:3b:fb:02:bc:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba835277b319a69c7f6eb1ad48b09d6632fd3dd
        Validity
            Not Before: Sep 16 13:03:06 2024 GMT
            Not After : Sep 17 13:03:06 2024 GMT
        Subject: CN=be664209448b1216c764ad130f2c550901f79a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fc:57:f3:65:48:bc:51:b1:98:17:01:78:56:
                    d1:03:44:4c:39:66:9e:d0:2e:22:f0:b2:37:0c:97:
                    d6:ff:97:29:c2:3d:72:80:c2:42:d9:72:81:a8:c2:
                    b2:af:f8:d0:dc:31:11:ab:9e:1e:62:5f:f4:02:0f:
                    66:dd:97:a7:be:c8:73:ff:13:ee:8e:00:b1:47:73:
                    8c:8e:fa:44:00:a9:b2:3d:ad:dd:d4:bc:2a:a9:4b:
                    93:52:2b:73:79:61:18:99:30:a3:de:10:e6:ce:13:
                    52:76:f5:98:77:33:00:b3:08:01:26:22:43:2e:a4:
                    9f:c4:60:46:3e:41:28:dc:17:be:ac:49:f2:5d:ec:
                    76:80:aa:c4:af:db:14:3c:5a:87:bc:18:a5:0d:da:
                    fb:d3:78:17:eb:02:7e:f6:a8:c8:8c:d0:0a:82:8d:
                    e5:bd:33:21:3a:95:35:b3:37:ec:fe:08:ef:58:84:
                    85:2e:dd:c6:8d:c0:cf:54:bc:b1:1f:21:82:ba:c7:
                    0a:0c:dc:92:df:2e:6c:73:fb:a5:a9:b8:e3:2b:30:
                    8f:87:3b:9f:0f:03:c0:bc:81:6a:ef:79:4d:30:3f:
                    b3:3d:2e:53:21:5b:c9:1a:db:9c:95:ec:6c:fd:4f:
                    bd:e3:74:6f:04:e1:91:d1:6b:b4:a2:90:9f:e5:0f:
                    97:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:66:42:09:44:8B:12:16:C7:64:AD:13:0F:2C:55:09:01:F7:9A:66
            X509v3 Authority Key Identifier:
                keyid:7B:A8:35:27:7B:31:9A:69:C7:F6:EB:1A:D4:8B:09:D6:63:2F:D3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6g1J3sxmmnH9usa1IsJ1mMv090.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ee:6f:9f:3c:e5:f3:f5:6a:44:62:af:86:ae:eb:20:20:9f:
         e2:e4:ab:ba:72:2f:62:04:99:20:0f:b1:79:75:90:fc:02:46:
         58:73:12:0a:81:68:b6:45:ca:ce:b5:f9:b6:9b:bc:e6:12:c1:
         9c:d7:63:3f:95:fc:f1:79:ea:d1:6b:6d:09:0b:33:6f:2d:b4:
         80:00:bc:ce:65:d7:dc:23:34:ca:31:15:fb:fc:24:06:a5:6b:
         70:55:66:97:fd:44:c7:23:89:96:4f:4b:e6:f7:2f:99:5b:1a:
         c4:da:60:be:99:de:aa:73:5f:4e:66:ce:d0:56:34:de:09:53:
         da:d4:b8:ad:32:8c:64:ae:51:bc:0d:6d:ff:f7:7f:11:ae:e5:
         c9:7d:a3:c3:da:20:45:d6:49:0b:c4:b6:a4:14:48:b9:fc:2d:
         ae:c4:ab:e4:63:3c:c2:c0:5b:a6:c2:89:9d:83:33:28:77:84:
         97:19:ee:78:de:79:61:9d:21:d9:00:cd:dd:e0:17:2c:69:e6:
         ef:c0:04:ab:30:a5:ae:ee:b3:ee:13:08:94:c5:fe:1d:43:3a:
         84:41:90:ab:68:f5:9d:af:b7:30:59:7f:17:7d:07:bd:fc:5a:
         30:ea:ee:2a:3b:6e:e0:3e:1c:4a:96:fe:a4:d0:a4:a8:9d:5e:
         03:ec:d1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----