Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/39a133-f939-49e2-a17f-974c95a789b6/1/7F4esePUCDzQChwAfbeS9xRLTQQ.mft
File:                     7F4esePUCDzQChwAfbeS9xRLTQQ.mft (raw, json)
Hash identifier:          XoA996c8u842br9lU09bXxP2r3nGA4vokm/B37ci/mk=
Subject key identifier:   76:3E:88:2E:14:EE:BD:8A:09:D4:B6:11:18:3A:0E:BE:FF:07:58:BF
Authority key identifier: EC:5E:1E:B1:E3:D4:08:3C:D0:0A:1C:00:7D:B7:92:F7:14:4B:4D:04
Certificate issuer:       /CN=ec5e1eb1e3d4083cd00a1c007db792f7144b4d04
Certificate serial:       0191FAB500D84483108DCEE47DC99ED32843
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7F4esePUCDzQChwAfbeS9xRLTQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/39a133-f939-49e2-a17f-974c95a789b6/1/7F4esePUCDzQChwAfbeS9xRLTQQ.mft
Manifest number:          9E
Signing time:             Mon 16 Sep 2024 12:00:51 +0000
Manifest this update:     Mon 16 Sep 2024 12:00:51 +0000
Manifest next update:     Tue 17 Sep 2024 12:00:51 +0000
Files and hashes:         1: 7F4esePUCDzQChwAfbeS9xRLTQQ.crl (hash: Bs8LQCiLbvxd3x4i3C5NKLIFDWCbsZq0KD2UPS64zdg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/39a133-f939-49e2-a17f-974c95a789b6/1/7F4esePUCDzQChwAfbeS9xRLTQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/39a133-f939-49e2-a17f-974c95a789b6/1/7F4esePUCDzQChwAfbeS9xRLTQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7F4esePUCDzQChwAfbeS9xRLTQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 12:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:b5:00:d8:44:83:10:8d:ce:e4:7d:c9:9e:d3:28:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec5e1eb1e3d4083cd00a1c007db792f7144b4d04
        Validity
            Not Before: Sep 16 12:00:51 2024 GMT
            Not After : Sep 17 12:00:51 2024 GMT
        Subject: CN=763e882e14eebd8a09d4b611183a0ebeff0758bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:80:48:ad:2d:41:c7:67:65:91:28:70:3b:6c:
                    33:c8:ae:70:f1:43:56:8b:6f:f7:10:4a:a9:4c:3b:
                    5e:5b:f2:28:d5:57:26:c6:e4:62:12:19:4b:e5:0e:
                    32:a4:a6:13:57:f1:b4:ad:69:a7:75:64:f2:12:23:
                    06:99:92:8d:7d:90:ae:cd:26:2d:bc:61:4a:21:c3:
                    80:c2:d9:3c:8e:4a:be:d4:13:9a:ea:ad:ef:b1:b4:
                    a9:c0:b3:50:ea:a0:bf:c6:cc:69:cf:be:04:82:d2:
                    08:03:9a:15:f2:84:ec:43:ea:58:b7:87:91:a3:ef:
                    f6:40:f8:dc:9a:ad:2b:f8:7c:db:6d:4e:63:30:f4:
                    fe:dd:fd:4d:68:1a:48:6b:97:d0:d4:d3:06:37:2f:
                    63:f8:0a:71:a5:7d:66:e2:2f:60:3b:54:de:62:14:
                    99:75:65:03:82:5e:a3:b7:72:64:0d:18:e3:f8:fa:
                    7d:73:7a:04:a6:be:d7:23:7a:49:38:b6:fe:8a:35:
                    ac:fb:13:b6:bd:24:f8:a0:06:9e:77:f9:02:a5:26:
                    8f:5e:68:8e:b0:87:4f:6b:47:9f:41:43:df:32:d4:
                    5f:02:7b:db:a8:0d:da:56:70:3a:ce:e2:b7:5c:fc:
                    5f:9f:79:31:98:0a:23:12:2b:2d:6e:e6:0b:b1:e9:
                    0a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3E:88:2E:14:EE:BD:8A:09:D4:B6:11:18:3A:0E:BE:FF:07:58:BF
            X509v3 Authority Key Identifier:
                keyid:EC:5E:1E:B1:E3:D4:08:3C:D0:0A:1C:00:7D:B7:92:F7:14:4B:4D:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7F4esePUCDzQChwAfbeS9xRLTQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/39a133-f939-49e2-a17f-974c95a789b6/1/7F4esePUCDzQChwAfbeS9xRLTQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/39a133-f939-49e2-a17f-974c95a789b6/1/7F4esePUCDzQChwAfbeS9xRLTQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:a2:23:8a:a0:12:49:e7:d9:0a:7c:9b:76:b8:6a:1b:de:04:
         77:06:fa:9c:77:0b:45:7b:8d:5b:32:fe:20:9d:97:e4:03:41:
         e6:a0:e9:4d:5b:5c:4a:0d:78:7c:bc:5b:00:0a:d4:c9:7d:7e:
         5e:a9:04:02:15:07:03:0e:56:e1:b1:6c:c0:60:49:3f:59:23:
         fd:60:12:3e:a5:c2:94:7a:0e:c1:d4:c9:01:02:d1:89:ca:f4:
         97:0b:34:a5:bc:62:6a:b3:25:6e:67:de:b7:33:3b:e4:8e:32:
         6a:2d:d1:0c:c0:03:2c:5d:ab:82:34:4e:0a:84:36:84:46:ec:
         76:27:6f:89:48:0d:75:77:55:14:5f:f4:53:e6:3f:1b:b5:4e:
         fc:22:0a:c8:2f:67:9e:5b:a6:22:e1:3b:b9:db:1c:29:33:e6:
         bd:43:3e:92:ca:d9:42:fb:14:9f:d4:a1:e8:d1:14:44:a4:21:
         96:31:0f:22:f3:a3:37:6f:a4:d6:dc:a9:f1:e5:be:dd:a9:4e:
         ef:ae:a8:9a:d0:1d:bf:73:63:7e:dd:35:4a:84:be:92:7d:06:
         7c:48:87:19:ae:bd:d1:e3:5a:f0:58:2d:fd:b1:32:bb:89:c4:
         aa:0b:a0:fb:38:c4:72:a9:34:5b:c5:34:45:61:76:ae:f3:31:
         48:6c:39:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----