Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
File:                     Km9uXKXbQ3eec6znzhbs4O55R5k.mft (raw, json)
Hash identifier:          k0VwEsz9HmDfqPPCjBFssZ0GIUG1oRS1G71piO67M/c=
Subject key identifier:   D1:43:4E:5D:EF:82:35:B8:0B:85:35:FF:2A:15:01:9D:4F:C1:41:92
Authority key identifier: 2A:6F:6E:5C:A5:DB:43:77:9E:73:AC:E7:CE:16:EC:E0:EE:79:47:99
Certificate issuer:       /CN=2a6f6e5ca5db43779e73ace7ce16ece0ee794799
Certificate serial:       0191FB23012D208EE315079290489833F36F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
Manifest number:          013F
Signing time:             Mon 16 Sep 2024 14:01:00 +0000
Manifest this update:     Mon 16 Sep 2024 14:01:00 +0000
Manifest next update:     Tue 17 Sep 2024 14:01:00 +0000
Files and hashes:         1: Km9uXKXbQ3eec6znzhbs4O55R5k.crl (hash: 40hig/Pl5QauNphSvLJS+3ugySFFIejn61Le+z13HFY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:23:01:2d:20:8e:e3:15:07:92:90:48:98:33:f3:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a6f6e5ca5db43779e73ace7ce16ece0ee794799
        Validity
            Not Before: Sep 16 14:01:00 2024 GMT
            Not After : Sep 17 14:01:00 2024 GMT
        Subject: CN=d1434e5def8235b80b8535ff2a15019d4fc14192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e9:6b:da:07:b6:88:92:ca:a7:a3:4b:2f:63:
                    d8:bf:1a:e1:3b:56:d8:6d:3b:6e:61:15:2f:7e:e3:
                    74:48:b7:ba:4b:14:bd:3f:34:e5:41:99:b6:9b:52:
                    70:ea:03:25:b7:89:b8:80:46:f2:5a:fa:74:55:bc:
                    d0:95:e9:39:c3:6e:9d:02:ae:c3:8a:ff:53:64:9a:
                    b1:ff:5a:d0:c3:8b:e4:9b:f2:a2:a8:fa:16:bc:6c:
                    81:d9:4d:66:51:52:57:30:67:bc:8c:30:2f:33:ec:
                    88:e3:23:44:99:5f:9e:32:04:ef:a8:e3:af:73:3a:
                    2a:a6:69:38:44:29:38:13:65:43:6f:f9:1b:a3:ef:
                    ef:2d:c9:b5:95:e4:32:cd:fa:95:7b:0a:87:22:2c:
                    7c:1a:a8:42:ff:66:de:06:3e:b3:92:ff:35:a3:5f:
                    af:e8:65:c8:35:fa:63:ed:c2:2e:54:f9:f8:61:89:
                    eb:c0:2d:9b:e5:0c:d7:62:af:0c:b2:bb:81:2a:b2:
                    3d:9c:f6:e1:db:5c:85:2f:e1:0a:9a:05:77:0a:9a:
                    fa:a9:7c:11:04:9d:72:08:f0:db:a4:b5:8f:ca:df:
                    b5:13:04:b2:40:96:59:4f:88:ab:0b:47:9c:39:95:
                    41:d0:29:89:49:c2:f4:63:ff:56:0a:df:ac:76:0d:
                    70:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:43:4E:5D:EF:82:35:B8:0B:85:35:FF:2A:15:01:9D:4F:C1:41:92
            X509v3 Authority Key Identifier:
                keyid:2A:6F:6E:5C:A5:DB:43:77:9E:73:AC:E7:CE:16:EC:E0:EE:79:47:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:79:c3:87:5c:2b:f5:bb:87:e1:0d:e6:13:cc:40:9a:df:64:
         b4:06:e2:2f:41:29:51:0c:f6:1c:77:e5:05:3f:b7:4a:61:93:
         53:65:81:89:39:90:69:52:46:57:4e:4c:52:4f:5c:ea:ed:ac:
         9d:bf:e3:d3:f1:6d:5f:9f:7d:6b:d4:c6:99:2e:1a:c9:eb:6c:
         c1:e8:9e:1e:62:74:3d:2d:f3:ae:07:61:06:a2:38:86:7a:1f:
         56:d8:5d:61:92:f2:8a:54:f8:0f:0a:51:e6:bb:03:78:2a:48:
         7a:e6:4b:08:02:60:7d:83:ea:32:80:78:ac:a7:8b:f2:1b:a2:
         a5:26:43:d4:62:44:d4:3b:36:d2:00:eb:73:60:f6:66:43:f2:
         c8:37:f9:f9:32:d5:fd:64:33:71:ab:7e:63:bc:e1:03:57:77:
         9c:42:c2:00:56:e0:49:b9:b5:97:86:2b:15:e1:4c:c4:4f:f5:
         28:48:52:c8:42:e4:60:2c:2e:67:c6:d5:d6:6e:71:52:3d:02:
         5f:e6:7b:60:fa:20:8c:39:d2:4a:70:7d:64:3b:98:7e:c5:ae:
         b2:3d:73:f3:ab:ce:16:9e:d5:2d:9a:72:2a:2f:6c:5d:2a:17:
         db:dc:3d:51:6b:b8:4a:ba:69:18:1d:26:23:e5:3a:76:a5:1b:
         f7:c4:73:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----