Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9fee8c-2c23-477e-a071-446c90923e35/1/59h-R1VDBszASGC1zD0CYf3BpcE.mft
File:                     59h-R1VDBszASGC1zD0CYf3BpcE.mft (raw, json)
Hash identifier:          ueBRjGFXZftezN8MHHKfMSjDt9cOrg/H9us9n4Rbmnk=
Subject key identifier:   5C:30:83:90:AE:51:E4:C3:30:D8:91:7B:8D:A8:7A:94:6A:2B:1A:B7
Authority key identifier: E7:D8:7E:47:55:43:06:CC:C0:48:60:B5:CC:3D:02:61:FD:C1:A5:C1
Certificate issuer:       /CN=e7d87e47554306ccc04860b5cc3d0261fdc1a5c1
Certificate serial:       0191F96BA8E1D640090A31660AEFD6F468BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59h-R1VDBszASGC1zD0CYf3BpcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/9fee8c-2c23-477e-a071-446c90923e35/1/59h-R1VDBszASGC1zD0CYf3BpcE.mft
Manifest number:          0103
Signing time:             Mon 16 Sep 2024 06:01:07 +0000
Manifest this update:     Mon 16 Sep 2024 06:01:07 +0000
Manifest next update:     Tue 17 Sep 2024 06:01:07 +0000
Files and hashes:         1: 59h-R1VDBszASGC1zD0CYf3BpcE.crl (hash: g+dMr5WavgVD/7g78bseLoA7vlCgM8XaH81oaA7UYe0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/9fee8c-2c23-477e-a071-446c90923e35/1/59h-R1VDBszASGC1zD0CYf3BpcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/9fee8c-2c23-477e-a071-446c90923e35/1/59h-R1VDBszASGC1zD0CYf3BpcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/59h-R1VDBszASGC1zD0CYf3BpcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 06:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:6b:a8:e1:d6:40:09:0a:31:66:0a:ef:d6:f4:68:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d87e47554306ccc04860b5cc3d0261fdc1a5c1
        Validity
            Not Before: Sep 16 06:01:07 2024 GMT
            Not After : Sep 17 06:01:07 2024 GMT
        Subject: CN=5c308390ae51e4c330d8917b8da87a946a2b1ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:73:8a:8f:38:f4:4f:3f:3a:44:e7:7c:58:d2:
                    75:aa:03:97:8a:1a:96:64:40:05:a6:0d:59:de:28:
                    e3:fd:ff:28:21:dd:1b:93:bb:ba:b0:7a:f3:39:bc:
                    d4:e0:47:ae:2c:c9:a6:df:42:4e:04:1f:fa:64:a1:
                    8e:7b:3b:25:55:a2:65:e7:07:c0:52:a5:3c:80:b9:
                    48:bd:25:49:d5:8d:f7:63:bb:46:27:a5:30:4a:13:
                    d9:4e:4f:a5:61:0f:cf:36:90:50:dd:ab:4e:cd:95:
                    f3:e7:e8:17:dd:e2:9f:3f:ec:c9:f6:b1:16:9e:e0:
                    c2:6a:24:9a:e3:ec:2b:8d:77:ac:e3:66:05:01:9e:
                    2d:3c:91:48:65:ba:b1:be:4b:13:6b:d5:49:9c:9f:
                    2d:54:79:4a:e1:d7:3b:a0:7f:89:b7:14:52:5e:79:
                    2e:24:e1:ae:45:54:f5:68:ca:91:de:aa:a6:6b:c5:
                    8c:a1:5b:54:25:fe:d0:10:d0:11:22:e8:ad:92:cc:
                    fb:c9:61:6b:c0:5a:f8:6e:46:9e:38:91:f1:8c:32:
                    7f:50:b7:9f:f9:de:e0:29:72:4c:11:23:7c:f5:fe:
                    1d:62:6f:3f:0b:9b:48:ac:81:2f:06:59:66:04:12:
                    e7:02:30:4f:71:68:d2:f3:9a:fa:f3:85:19:83:db:
                    ce:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:30:83:90:AE:51:E4:C3:30:D8:91:7B:8D:A8:7A:94:6A:2B:1A:B7
            X509v3 Authority Key Identifier:
                keyid:E7:D8:7E:47:55:43:06:CC:C0:48:60:B5:CC:3D:02:61:FD:C1:A5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59h-R1VDBszASGC1zD0CYf3BpcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9fee8c-2c23-477e-a071-446c90923e35/1/59h-R1VDBszASGC1zD0CYf3BpcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9fee8c-2c23-477e-a071-446c90923e35/1/59h-R1VDBszASGC1zD0CYf3BpcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:86:9b:d2:54:9e:d5:59:d5:9c:68:69:b1:3d:7b:ca:65:3c:
         ac:cf:ac:bd:e0:a5:58:25:58:3e:ec:a9:5e:39:2a:cb:72:0d:
         98:20:46:73:40:c9:53:e3:6b:86:cf:28:12:a2:8a:d5:6e:b1:
         98:f4:34:86:25:5c:9c:77:e8:48:1c:91:3f:41:74:7b:1c:99:
         18:78:03:ea:7a:bc:e5:e0:a3:3c:b5:e2:60:1a:88:1d:15:55:
         47:b5:1d:a6:db:e2:1c:87:b0:d9:c3:ad:40:fd:4b:a0:3f:f6:
         64:59:12:9f:30:fd:78:6d:6e:62:a2:d3:05:db:47:bb:d4:1f:
         3d:94:55:a8:7b:3b:e9:5a:62:4c:1c:3e:5d:45:31:74:46:fe:
         9d:66:57:d8:e2:6d:b7:0f:c8:34:cc:be:ce:d2:1a:d2:dd:e6:
         6a:d9:68:32:dc:40:d9:41:d8:e7:63:22:6e:13:05:86:80:c7:
         0e:28:86:89:f9:9d:8f:c4:aa:31:33:25:e9:18:6d:01:7f:30:
         79:97:af:98:bd:90:63:35:da:d5:9a:5c:37:4a:4a:ef:68:5d:
         40:73:77:fb:06:4c:11:b7:84:1f:b8:fd:08:36:94:39:30:14:
         67:ee:d7:46:1b:f4:3d:b3:c0:33:06:a5:3c:7b:00:39:b6:3c:
         44:ae:23:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----