Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
File:                     P1umH85V_19gjjr27FYLN67CNf8.mft (raw, json)
Hash identifier:          eBVoCSwPQYlsg7VdY4/DH8Br25RU9jG4rWKlanKI79Y=
Subject key identifier:   4B:FA:71:A9:C5:06:AB:2A:01:F4:39:C0:BF:19:C0:88:E8:9D:70:24
Authority key identifier: 3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF
Certificate issuer:       /CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff
Certificate serial:       0191F9D9CAC2B1323252B39EB2AD9952F832
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
Manifest number:          0112
Signing time:             Mon 16 Sep 2024 08:01:25 +0000
Manifest this update:     Mon 16 Sep 2024 08:01:25 +0000
Manifest next update:     Tue 17 Sep 2024 08:01:25 +0000
Files and hashes:         1: P1umH85V_19gjjr27FYLN67CNf8.crl (hash: Ov0JF/+OdsbuBSiYLKKH0Cnu3urpZY1yzJ8LnmCjy9s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:ca:c2:b1:32:32:52:b3:9e:b2:ad:99:52:f8:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff
        Validity
            Not Before: Sep 16 08:01:25 2024 GMT
            Not After : Sep 17 08:01:25 2024 GMT
        Subject: CN=4bfa71a9c506ab2a01f439c0bf19c088e89d7024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:db:d6:dd:09:f3:6b:94:a1:77:28:97:98:
                    94:30:b0:d6:a3:73:ff:7b:ad:5c:d9:9c:76:28:d1:
                    fd:4f:0f:6b:03:e1:45:c8:37:54:4a:3a:b1:f8:36:
                    1f:46:72:fb:f7:b6:9f:dc:67:3b:f7:ce:22:69:f8:
                    a3:ae:24:53:6b:bc:04:cd:c2:05:7b:6e:15:14:2f:
                    a8:f3:81:ce:da:87:b4:73:9a:7f:b8:af:b1:50:3e:
                    cd:0a:28:8f:e2:6c:2f:df:06:bf:78:19:31:0c:2d:
                    40:fe:28:91:9e:f7:18:bc:14:c7:bd:33:7a:41:4e:
                    39:10:f4:41:4b:2c:9f:46:36:c4:29:c2:3b:26:dd:
                    2d:c8:5d:03:2b:38:35:6f:5e:36:3f:9e:df:32:5b:
                    3e:e6:7d:65:98:8c:d2:0f:15:aa:f9:90:58:13:fb:
                    18:70:eb:b2:93:e8:e3:7b:01:45:3a:2d:42:2d:f3:
                    a2:59:8e:9d:fb:39:08:11:1a:4d:d2:50:d2:50:50:
                    b8:76:97:c0:69:71:a6:7d:37:b7:b7:1b:17:d0:4d:
                    29:35:a4:45:60:9f:74:49:53:ef:3e:8f:8e:9d:b3:
                    52:41:be:da:26:b0:69:00:87:9d:46:05:b0:27:79:
                    d1:e7:ec:76:be:7a:a3:5f:6f:f6:64:a9:c4:a2:9b:
                    b9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FA:71:A9:C5:06:AB:2A:01:F4:39:C0:BF:19:C0:88:E8:9D:70:24
            X509v3 Authority Key Identifier:
                keyid:3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:41:12:06:28:db:f4:d2:00:61:84:15:bb:cb:eb:b8:b3:97:
         1e:46:20:ff:81:50:65:85:c7:68:b6:b3:b5:ce:50:e2:9d:04:
         21:2f:fe:35:9d:e2:6f:3d:ba:04:85:a2:23:a3:2e:11:cd:77:
         33:9b:af:e8:d3:74:9d:94:b0:8e:1b:f1:ce:84:54:c2:63:84:
         f2:65:11:4f:ac:10:85:e2:1f:e7:61:2a:bb:90:6f:2e:59:4f:
         10:fb:09:45:e1:14:59:6d:9a:07:32:6d:e6:b1:e8:af:eb:64:
         1f:6d:18:bf:45:37:66:e1:6b:dd:54:31:06:49:d8:86:2c:6d:
         2e:f4:3d:34:99:02:04:35:69:c5:c5:e1:1c:41:af:fd:b8:4b:
         6e:55:a5:a2:22:89:d6:00:97:a6:57:d7:b2:2e:3d:76:5a:66:
         6e:65:0e:f7:cf:74:66:ed:7b:41:e4:5f:d7:25:a7:af:bb:a6:
         83:92:5b:f0:d4:fb:8b:e2:77:35:d0:b4:c6:14:de:e5:1a:35:
         a3:94:fd:be:b1:e4:6a:59:55:b4:27:3e:59:05:8e:d0:98:5a:
         f4:9e:c1:18:dc:59:20:a3:44:d3:44:33:c9:1b:f5:3b:b0:4e:
         23:b3:bc:d8:9a:29:c6:dc:a9:18:1e:83:17:a4:2a:54:ee:f8:
         48:0d:51:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----