Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
File:                     VDxwGANHJZY6lxyWqMqrWYyuY4o.mft (raw, json)
Hash identifier:          /8ukp2X7qwXPIjD1qZVlid1GGToCeEH+Ae1pvpq5C0Q=
Subject key identifier:   84:C7:32:B1:83:49:AE:F8:A0:28:89:32:99:C7:26:D8:7D:C4:0D:65
Authority key identifier: 54:3C:70:18:03:47:25:96:3A:97:1C:96:A8:CA:AB:59:8C:AE:63:8A
Certificate issuer:       /CN=543c7018034725963a971c96a8caab598cae638a
Certificate serial:       0191F9A2B013330B85BD490A4B47DB6A5117
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
Manifest number:          B1
Signing time:             Mon 16 Sep 2024 07:01:13 +0000
Manifest this update:     Mon 16 Sep 2024 07:01:13 +0000
Manifest next update:     Tue 17 Sep 2024 07:01:13 +0000
Files and hashes:         1: VDxwGANHJZY6lxyWqMqrWYyuY4o.crl (hash: qVu/QFiGt3+nc7trnF60iPxiYgLuN9lm38NU1M1GLcg=)
                          2: qaQWydk6FB7GEf8gIwZAiy68VWs.roa (hash: mytnFDuDw0yiy0H79vxRv/LVxQaED8L8Amgjxi3Soxc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:b0:13:33:0b:85:bd:49:0a:4b:47:db:6a:51:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543c7018034725963a971c96a8caab598cae638a
        Validity
            Not Before: Sep 16 07:01:13 2024 GMT
            Not After : Sep 17 07:01:13 2024 GMT
        Subject: CN=84c732b18349aef8a028893299c726d87dc40d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:19:dc:e8:f6:94:82:a6:64:13:4a:dc:36:7e:
                    83:a8:94:c7:cc:db:53:24:3e:3d:a3:14:76:46:49:
                    32:62:c0:8f:5f:79:bb:09:ed:69:73:b7:15:38:8d:
                    ad:3c:75:92:0e:f6:21:e0:cf:40:23:07:14:08:21:
                    34:8c:66:99:17:bc:60:6d:90:63:7e:42:6f:99:4c:
                    bd:d9:d6:60:61:03:f3:86:aa:ed:27:9c:a7:43:a7:
                    d7:4e:38:af:b0:2d:97:48:3f:43:a9:49:6f:63:bd:
                    d7:55:83:38:44:0c:99:41:ef:c4:3f:a3:f1:ad:e4:
                    0d:de:6a:bd:ba:c1:98:d5:1f:bb:8b:cc:ef:0c:fc:
                    b5:07:cf:7e:ef:da:dc:1c:d1:b7:8d:62:d8:89:d2:
                    65:33:19:0b:c8:84:0e:c9:35:81:4b:ca:ef:85:3f:
                    a3:16:9c:6d:40:af:40:15:0e:6d:87:8e:d7:a2:43:
                    99:90:40:aa:32:30:49:f7:7d:d9:9e:0d:6e:ae:5e:
                    c1:b3:4d:fc:36:e4:21:a2:e6:6d:45:b7:f6:00:71:
                    25:2d:84:91:e5:0f:f7:26:b1:b0:9d:d7:80:96:6f:
                    79:68:5d:7c:4e:cd:8c:76:33:15:48:95:e0:eb:a3:
                    14:58:50:92:fc:28:35:3b:0f:8f:ee:39:a7:b5:f2:
                    fa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C7:32:B1:83:49:AE:F8:A0:28:89:32:99:C7:26:D8:7D:C4:0D:65
            X509v3 Authority Key Identifier:
                keyid:54:3C:70:18:03:47:25:96:3A:97:1C:96:A8:CA:AB:59:8C:AE:63:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:66:b6:24:77:a3:3c:cd:a2:d3:70:1e:9c:f9:06:1b:07:b5:
         2e:89:08:5c:00:c9:ce:96:ac:61:02:87:8f:2d:2e:98:39:33:
         80:69:21:a8:89:53:65:29:a8:e0:74:40:3d:31:c4:b6:ec:2d:
         2f:76:57:39:96:32:45:5d:7b:e0:97:a6:fb:32:7d:3e:3a:60:
         39:7b:08:ed:0b:f1:19:50:09:45:b8:bd:04:e0:8c:32:65:17:
         ec:d7:53:cf:88:1f:53:05:5f:fb:2f:89:e7:0c:26:de:9d:40:
         8f:a0:b0:40:f6:48:02:e9:8b:93:55:d9:0b:32:2b:df:e4:7e:
         7b:9b:d2:a1:17:b4:f9:a8:b7:b1:f9:19:f9:32:c1:d1:b3:28:
         6e:73:01:2f:93:66:af:66:ad:8d:55:12:74:e3:74:fa:83:bd:
         58:fb:a5:b3:6b:4b:e4:23:9e:96:24:c2:71:4e:0b:6b:3b:da:
         ee:1d:07:d1:78:3e:0b:32:0b:49:e6:b4:33:c3:f5:67:b7:87:
         c9:98:1f:bb:5a:55:4f:fb:ca:9a:90:20:fc:b4:8a:eb:21:af:
         01:9e:fc:c3:38:32:94:b8:43:c0:c7:51:75:c0:d3:2a:00:62:
         53:f6:d7:85:5f:9a:74:2a:a8:0f:9b:09:d2:78:e6:31:71:5a:
         67:02:e6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----