Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
File:                     MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft (raw, json)
Hash identifier:          tUZnwxSqEzXu1dEkRQa4ECULAL98Qbd9HirfQNEO2RM=
Subject key identifier:   51:6E:BD:96:26:8A:E0:B5:8E:04:E9:67:07:F9:D6:E4:C9:09:53:B3
Authority key identifier: 31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C
Certificate issuer:       /CN=31f124bd8f14bb98a48849c5205837323bfcf84c
Certificate serial:       0191F9D9DFAAA2226C5F5DE458F86E1757D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
Manifest number:          DD
Signing time:             Mon 16 Sep 2024 08:01:30 +0000
Manifest this update:     Mon 16 Sep 2024 08:01:30 +0000
Manifest next update:     Tue 17 Sep 2024 08:01:30 +0000
Files and hashes:         1: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl (hash: IsN7tTb0vQUNJ4ksQd+CrgQWAbcdWoAcTMp+kH9IKFg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:df:aa:a2:22:6c:5f:5d:e4:58:f8:6e:17:57:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31f124bd8f14bb98a48849c5205837323bfcf84c
        Validity
            Not Before: Sep 16 08:01:30 2024 GMT
            Not After : Sep 17 08:01:30 2024 GMT
        Subject: CN=516ebd96268ae0b58e04e96707f9d6e4c90953b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:32:d5:99:2c:21:53:73:76:55:33:31:c5:5a:
                    ce:4c:b1:2a:38:bd:81:b7:30:3c:6c:79:fe:4a:ba:
                    2d:de:ec:33:76:de:81:91:88:4c:a8:c8:23:09:e3:
                    41:8e:13:4e:74:ed:30:f3:30:72:2b:e1:ee:9d:4c:
                    a3:6c:5a:43:60:1f:d0:63:cd:7b:53:7b:f6:af:7e:
                    65:23:26:bc:8c:e8:7f:5c:b2:6d:d1:59:b7:a2:ec:
                    87:e6:52:e4:24:dd:18:78:5d:5a:59:27:9f:65:07:
                    6e:48:e0:5f:f3:a8:fd:cd:ab:c2:bb:d1:f1:07:26:
                    ee:3b:09:ce:27:42:fa:1d:d1:cc:ec:e6:fe:d1:f9:
                    5b:d6:ce:74:05:a2:98:63:04:16:f3:3f:e2:c2:a2:
                    3c:c0:ab:e8:47:85:db:05:9e:6b:14:22:ce:ad:59:
                    a2:f6:8e:ff:9d:8a:57:98:b7:4e:18:e9:fe:98:91:
                    35:2f:3c:6c:12:02:15:0d:64:50:84:88:37:bc:30:
                    ae:63:0a:b5:ef:29:92:ad:dd:37:bf:d7:4f:0e:14:
                    1f:27:b1:22:a3:22:0e:a1:ff:c0:9a:c3:6a:63:be:
                    ee:60:60:1f:88:ec:60:67:fe:7c:23:47:54:8c:66:
                    61:df:11:82:68:37:af:6c:18:f3:6f:c6:e8:64:57:
                    08:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6E:BD:96:26:8A:E0:B5:8E:04:E9:67:07:F9:D6:E4:C9:09:53:B3
            X509v3 Authority Key Identifier:
                keyid:31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:17:54:1b:2e:24:f6:da:16:b0:24:08:a6:14:ad:df:86:72:
         18:1e:25:b2:b3:b8:ce:39:0d:4b:73:a9:85:e3:bc:91:1d:b3:
         20:0a:49:02:9c:42:78:e5:0b:c1:1a:79:ff:8a:39:e9:42:7d:
         7c:20:fb:2b:d4:71:12:06:f2:5d:a6:8e:88:f2:98:08:cc:ca:
         a2:66:6e:94:85:f1:bc:28:d0:86:28:13:61:5c:1b:41:0d:be:
         34:5f:8e:5c:56:35:5e:de:a7:6e:b3:86:f9:7e:df:3c:7f:32:
         6e:bb:49:c0:d4:d3:45:ed:fe:6c:6f:25:d5:90:38:cf:92:f6:
         1a:8c:13:c1:b3:56:45:96:82:78:41:c3:23:d8:c9:7d:61:bd:
         c8:c9:08:e9:c4:82:6e:2e:2b:13:59:eb:2a:f0:14:45:58:4e:
         07:58:b5:e3:51:6f:96:0c:14:9f:87:bf:c0:5b:79:cc:b9:6a:
         1f:ea:7c:1e:01:81:02:e1:1b:3f:82:a4:d5:16:6f:c9:b8:7a:
         38:dc:4a:aa:66:41:18:7a:8f:d9:61:e2:56:dd:af:7f:dd:4d:
         e0:b9:4a:5f:70:47:77:dc:c9:4d:a7:18:23:40:1f:dc:c9:69:
         fd:43:39:78:f3:a3:26:9d:f8:24:e2:d9:e7:3b:15:bb:cf:b6:
         62:d6:04:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----