Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
File:                     cI7ctL7wrwFvBYdt285M0kx9968.mft (raw, json)
Hash identifier:          nZyQG3Hr5rQ347P1BOZ2UKoZ6nizf/rU1iKSSgxkfL0=
Subject key identifier:   4A:E7:49:FD:1C:B5:CB:35:0C:5F:60:20:77:E0:E9:B0:03:02:EE:66
Authority key identifier: 70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
Certificate issuer:       /CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Certificate serial:       0191FB59F2B9F08C15E5E2486D354A78F5A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
Manifest number:          E2
Signing time:             Mon 16 Sep 2024 15:01:01 +0000
Manifest this update:     Mon 16 Sep 2024 15:01:01 +0000
Manifest next update:     Tue 17 Sep 2024 15:01:01 +0000
Files and hashes:         1: cI7ctL7wrwFvBYdt285M0kx9968.crl (hash: 2UzQbuiBPjjvQt0DeT405wX/bLxjmhAI+13q80WhDaQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:59:f2:b9:f0:8c:15:e5:e2:48:6d:35:4a:78:f5:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
        Validity
            Not Before: Sep 16 15:01:01 2024 GMT
            Not After : Sep 17 15:01:01 2024 GMT
        Subject: CN=4ae749fd1cb5cb350c5f602077e0e9b00302ee66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c7:de:23:58:c3:6d:5d:65:83:73:1e:d7:b0:
                    8b:b4:20:41:57:3f:0a:75:d1:ed:65:70:a8:45:52:
                    c5:bf:25:40:83:e6:12:1e:ba:4b:b7:bb:49:4e:a2:
                    d1:2b:22:00:6f:9e:62:12:be:31:79:dc:81:27:fd:
                    f8:11:cd:bd:c2:ff:5d:b1:75:a3:94:41:78:3e:32:
                    5c:7b:90:dc:46:a5:31:8e:8f:c4:64:3e:f2:c1:d1:
                    ab:cf:37:24:b6:b3:7a:4f:e5:e0:99:86:bd:c6:8a:
                    bb:1e:5f:3c:30:31:eb:39:88:72:27:89:4b:d8:b9:
                    05:9a:d3:a8:38:e6:13:55:63:01:ed:da:f2:20:8b:
                    1b:2e:2c:48:2f:fe:ba:73:f0:05:e0:7c:2b:ef:06:
                    b3:08:e2:5f:e3:4c:7f:56:87:43:88:38:89:07:53:
                    56:75:26:b1:0e:49:ce:63:95:2f:f0:92:71:96:9d:
                    50:e0:bc:d1:c1:2c:76:ad:52:f0:7e:9f:6d:e5:c1:
                    fa:2a:8c:75:d0:cf:eb:e0:18:de:7d:7c:d1:58:d7:
                    09:13:cf:f6:5b:56:51:ee:2e:dc:72:55:66:d2:7e:
                    ab:24:cf:22:f6:e6:fc:8b:04:36:e4:90:af:8f:13:
                    3f:ce:46:6a:4c:87:e2:c6:b6:13:80:af:b2:77:6a:
                    98:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E7:49:FD:1C:B5:CB:35:0C:5F:60:20:77:E0:E9:B0:03:02:EE:66
            X509v3 Authority Key Identifier:
                keyid:70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:8d:0f:ff:f6:5e:f2:75:22:35:cc:f5:96:06:c4:fd:2d:d7:
         b7:24:ca:93:b9:cd:52:cc:24:69:1b:c9:8a:6a:68:86:eb:f0:
         c8:d5:1f:51:7e:e3:13:50:b9:97:e2:7d:39:59:b9:93:71:48:
         2e:5f:b5:a3:bc:9b:82:cc:ef:32:c4:fe:96:d9:83:45:c1:f6:
         12:f3:df:37:d6:30:7f:35:38:17:86:ed:be:8a:c7:87:5f:bf:
         ce:de:77:24:a9:46:92:42:4b:23:3e:32:be:ee:b2:be:52:89:
         ab:ef:3a:f1:8e:ce:71:ad:10:a8:bb:6a:8d:42:1e:d0:59:75:
         44:ed:2a:1d:64:35:5a:22:90:14:9f:96:46:32:82:64:e1:20:
         c3:55:5f:77:7f:ea:6a:e3:5b:51:42:6a:1e:e5:b8:76:76:8c:
         fb:96:59:7e:45:eb:aa:6b:97:b2:69:ad:67:ee:d7:bb:87:c6:
         e5:16:21:ac:75:39:1a:9b:0b:50:e2:7d:bd:dd:1b:82:22:de:
         2f:19:17:15:c1:49:d6:2a:f6:ec:8e:98:04:bb:a0:61:13:ec:
         c5:bb:33:a1:48:b8:34:4e:05:e1:49:76:97:97:9b:36:b9:bd:
         75:9d:ff:c2:d6:cf:fa:fe:de:89:e6:f0:36:30:e0:60:f5:eb:
         a7:c9:98:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----