Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
File:                     opYekZxsdKh1zuBhj-zF_WP5WVE.mft (raw, json)
Hash identifier:          qj8gW6y1n3WNjv9JcXWyDoAKyfQgY69gYuw+5iaX85I=
Subject key identifier:   21:DA:3A:DE:5C:86:7C:12:31:89:11:FC:03:9A:58:83:00:9E:96:C7
Authority key identifier: A2:96:1E:91:9C:6C:74:A8:75:CE:E0:61:8F:EC:C5:FD:63:F9:59:51
Certificate issuer:       /CN=a2961e919c6c74a875cee0618fecc5fd63f95951
Certificate serial:       0191FA103DF242FA441F8B967A007FB14B33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
Manifest number:          D9
Signing time:             Mon 16 Sep 2024 09:00:53 +0000
Manifest this update:     Mon 16 Sep 2024 09:00:53 +0000
Manifest next update:     Tue 17 Sep 2024 09:00:53 +0000
Files and hashes:         1: opYekZxsdKh1zuBhj-zF_WP5WVE.crl (hash: QhAl3Qxhg5wKvThi+HMawLQ6bKDcozVD08pzXAdo+pQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:3d:f2:42:fa:44:1f:8b:96:7a:00:7f:b1:4b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2961e919c6c74a875cee0618fecc5fd63f95951
        Validity
            Not Before: Sep 16 09:00:53 2024 GMT
            Not After : Sep 17 09:00:53 2024 GMT
        Subject: CN=21da3ade5c867c12318911fc039a5883009e96c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f7:be:b6:36:b3:d9:f0:3a:1d:c6:ea:78:4b:
                    c5:fb:a0:27:a9:4b:fe:d8:35:68:4d:9d:12:18:02:
                    2e:2e:40:ee:15:fd:a6:fe:0c:74:9a:2a:30:8d:05:
                    53:0b:74:45:75:64:22:d8:0b:e8:85:34:83:41:12:
                    3a:a3:d9:6e:ba:c4:0c:b8:2e:0d:a9:a8:d7:03:85:
                    70:5e:6e:7b:89:12:79:c2:24:f3:1e:30:98:0b:a1:
                    73:cf:02:2e:22:c1:ec:89:0b:af:e4:63:b1:3f:30:
                    50:38:79:4d:d4:0b:57:2c:6e:3a:42:57:90:3d:fd:
                    5c:d1:f5:81:18:9a:b5:a0:36:62:cc:2e:fa:d2:33:
                    aa:b9:0a:71:05:0c:32:14:6d:d5:37:04:77:c3:f6:
                    26:a0:78:ce:03:14:3b:4d:d2:d2:7e:e7:66:3f:34:
                    26:7d:d8:27:41:58:93:9f:db:51:bd:7b:c9:da:5c:
                    6e:c2:00:1e:a3:13:d4:31:0c:97:e6:7b:dd:1b:c9:
                    ab:48:9b:25:8b:5c:5f:ec:2e:73:a6:73:43:ed:d6:
                    b3:2b:26:77:15:8a:70:c9:57:4b:ba:0c:4c:c6:4d:
                    c9:0f:4c:3b:14:81:50:52:29:28:86:40:b9:da:9d:
                    32:8a:b2:4d:9c:28:42:7b:2f:fd:1e:c9:f7:b7:fd:
                    ac:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DA:3A:DE:5C:86:7C:12:31:89:11:FC:03:9A:58:83:00:9E:96:C7
            X509v3 Authority Key Identifier:
                keyid:A2:96:1E:91:9C:6C:74:A8:75:CE:E0:61:8F:EC:C5:FD:63:F9:59:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:08:e1:86:5e:c5:1e:94:d6:28:38:36:f0:fd:cb:b6:b5:82:
         34:c3:b5:f5:d1:48:10:10:5c:2a:34:1a:bf:04:b8:e7:d3:c8:
         06:62:64:2d:fd:c6:6f:2c:d3:62:de:47:3a:db:51:72:e0:31:
         07:65:02:10:47:a1:56:67:84:31:72:ff:92:c4:d5:d5:93:aa:
         10:ce:63:81:63:62:43:91:e8:f5:cc:5e:ac:2c:23:c5:1c:cc:
         c6:2f:dc:b8:32:bd:8b:94:d0:90:a3:c0:da:97:a5:09:f6:3a:
         2f:fe:bf:c0:eb:c1:34:1c:2c:8a:ed:97:75:04:10:4b:d4:a1:
         04:52:e5:6e:73:12:7e:e4:7a:3f:72:8f:5e:f6:33:36:9d:3d:
         d0:8b:de:0a:44:77:5b:22:b3:4c:22:4b:ad:29:56:d1:09:35:
         2f:60:c3:95:38:d5:97:65:cb:f5:ba:d4:50:3d:76:84:c3:c7:
         5b:81:54:9f:ac:ac:15:bd:fa:fa:c1:2c:4a:c8:f3:4b:fb:bb:
         7c:8f:16:75:e3:1e:92:1d:04:ca:a9:23:a4:75:c8:62:b3:34:
         02:ab:29:f3:ed:7e:c5:7f:fe:e7:86:10:d4:67:54:07:55:79:
         80:91:f0:4b:e1:22:be:43:2d:16:78:b3:7a:98:0d:68:0e:3b:
         74:48:81:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----