Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
File:                     Mk73breQdOacczAs5MLgr0f0Uwc.mft (raw, json)
Hash identifier:          SYCu81e49cyV0hL6v0yvMo+4CbGlQHArzkVB//u07Wc=
Subject key identifier:   D1:00:D9:2B:20:EA:0A:8A:B9:32:B0:ED:43:B9:98:7E:75:BE:EB:9E
Authority key identifier: 32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
Certificate issuer:       /CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Certificate serial:       0191FA7E35AE47298BD6E0A682883DF163D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
Manifest number:          0104
Signing time:             Mon 16 Sep 2024 11:01:00 +0000
Manifest this update:     Mon 16 Sep 2024 11:01:00 +0000
Manifest next update:     Tue 17 Sep 2024 11:01:00 +0000
Files and hashes:         1: Mk73breQdOacczAs5MLgr0f0Uwc.crl (hash: RmOLMD6tAoRl8IGkLc/f5PbQlUkWfTK8IiGV4ZQBUW8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 11:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:7e:35:ae:47:29:8b:d6:e0:a6:82:88:3d:f1:63:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324ef76eb79074e69c73302ce4c2e0af47f45307
        Validity
            Not Before: Sep 16 11:01:00 2024 GMT
            Not After : Sep 17 11:01:00 2024 GMT
        Subject: CN=d100d92b20ea0a8ab932b0ed43b9987e75beeb9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:77:ed:6a:ff:dc:74:85:ed:51:52:e1:b7:72:
                    03:1e:2a:10:17:72:91:8a:d5:ba:92:e7:cb:c1:ab:
                    48:96:4f:be:1b:1c:43:ba:00:e0:b7:7d:7f:ee:ff:
                    1b:3e:6b:1c:cc:c3:90:0b:10:65:39:69:d2:82:9e:
                    f7:e2:ac:ca:36:73:a0:9b:7b:b9:89:9b:0f:1c:44:
                    96:34:cc:b0:1c:c4:0d:3a:98:a8:78:7f:da:75:c8:
                    47:6d:70:db:2c:35:c2:4f:39:7d:f4:f8:34:bb:28:
                    fe:0f:3a:a8:a6:07:13:ef:9f:e6:5c:22:d9:4b:c1:
                    5d:04:3f:c1:98:c0:70:1f:c0:e2:d3:b9:3f:bc:75:
                    f1:b2:7a:29:f1:84:46:32:b1:f7:0b:3c:b7:d9:e9:
                    a3:c3:29:07:88:f5:2a:4e:f2:ee:07:26:33:96:70:
                    ac:a8:95:c9:20:15:9b:d8:55:ce:46:53:14:89:97:
                    d5:8d:ba:12:76:65:5a:c9:a1:1d:19:1b:0d:76:c3:
                    ab:fa:af:f8:94:a0:ae:b3:05:fb:bf:2e:33:26:96:
                    59:45:29:54:be:73:01:04:b8:fc:a5:6f:82:31:20:
                    3d:87:c6:db:ce:9d:1c:d8:4e:ef:6b:2e:31:68:38:
                    61:17:b2:5b:6f:fa:44:ad:7e:9f:84:f7:0c:76:9e:
                    58:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:00:D9:2B:20:EA:0A:8A:B9:32:B0:ED:43:B9:98:7E:75:BE:EB:9E
            X509v3 Authority Key Identifier:
                keyid:32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:5f:61:0c:c7:09:2c:2a:ac:d0:f3:75:50:3b:68:88:1c:a1:
         f4:8b:9b:64:58:c7:c9:fd:a1:37:90:97:90:ef:b0:fe:80:f7:
         73:aa:de:f0:6f:c0:9e:48:d6:13:f6:3f:aa:12:4e:17:54:32:
         8e:02:36:c4:57:da:49:df:90:b8:d1:f6:d1:3f:1b:73:07:a1:
         6f:74:e6:77:d0:5c:ac:9a:a2:11:c6:87:68:62:16:75:e3:43:
         4d:50:f4:1c:ee:8e:90:26:cc:53:7e:25:8f:66:95:a9:64:d6:
         0d:2b:fc:66:cc:46:2e:04:61:ce:19:78:32:61:d3:bd:8c:a1:
         ea:f1:0f:06:d2:77:c0:0e:ce:88:9e:5f:4b:ea:35:cb:ec:89:
         c4:51:00:08:e4:ab:c5:33:6a:50:97:42:3c:42:4a:9a:66:d6:
         3e:4e:a5:be:c0:03:d2:91:d2:cd:73:9a:7b:6a:ed:37:0a:d9:
         13:85:33:c1:73:51:5f:29:4c:1d:18:3b:ac:04:fb:35:d5:e2:
         40:90:6d:59:16:16:f5:df:45:f7:98:ee:fa:f9:72:92:05:56:
         19:bb:21:a3:17:a3:d0:ea:44:1d:9c:e7:0f:e4:18:ba:4d:8a:
         f2:55:48:50:dc:dc:15:3e:e7:61:98:ca:d2:ab:22:d2:c8:45:
         91:37:92:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----