Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft
File:                     1e6pLEJFQFBGvpuMpsDCDmorFA0.mft (raw, json)
Hash identifier:          rktiHHGKHfSp/fUA+OxzZ49WPd63R0I09Ii7KUnhiZI=
Subject key identifier:   68:A3:B4:D3:98:B1:6C:DF:93:23:5A:9B:44:20:2D:D7:7D:BF:9A:0A
Authority key identifier: D5:EE:A9:2C:42:45:40:50:46:BE:9B:8C:A6:C0:C2:0E:6A:2B:14:0D
Certificate issuer:       /CN=d5eea92c4245405046be9b8ca6c0c20e6a2b140d
Certificate serial:       0191F9D9E1337C11C0EEAB75095983CB3563
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft
Manifest number:          A7
Signing time:             Mon 16 Sep 2024 08:01:31 +0000
Manifest this update:     Mon 16 Sep 2024 08:01:31 +0000
Manifest next update:     Tue 17 Sep 2024 08:01:31 +0000
Files and hashes:         1: 1e6pLEJFQFBGvpuMpsDCDmorFA0.crl (hash: QCTSZGsS99Tk/wp+xXXsgzD3Up5F669l7zEhztEH+yw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:e1:33:7c:11:c0:ee:ab:75:09:59:83:cb:35:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5eea92c4245405046be9b8ca6c0c20e6a2b140d
        Validity
            Not Before: Sep 16 08:01:31 2024 GMT
            Not After : Sep 17 08:01:31 2024 GMT
        Subject: CN=68a3b4d398b16cdf93235a9b44202dd77dbf9a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7e:40:00:4f:f8:fd:12:06:95:79:16:5d:fe:
                    f6:c0:8f:41:1e:79:92:dd:5d:6a:4c:47:91:08:bf:
                    42:c1:98:bd:c7:92:74:1d:10:47:d2:3e:2b:55:bd:
                    19:65:ca:6a:e5:8e:31:7c:93:77:56:b1:f6:27:ab:
                    fa:24:13:ff:1a:2b:a0:16:43:1d:03:58:4f:b8:3e:
                    14:d5:14:3c:78:83:6a:06:46:d3:9a:c1:f8:e5:fe:
                    d3:09:96:38:4c:bf:89:1a:5f:10:c6:31:4d:73:0b:
                    c1:89:4e:bc:41:43:83:fa:3d:0d:f7:ed:68:ec:61:
                    6f:82:1c:39:95:bf:94:a2:c1:84:53:5a:fa:ea:f8:
                    a2:eb:02:1e:6a:4c:e7:16:f4:a8:b1:36:d1:07:57:
                    86:36:8c:f2:f9:d7:ae:a9:a1:77:23:94:1a:4b:7c:
                    3f:aa:58:aa:31:81:38:8b:d2:2d:a4:ec:9c:c9:ec:
                    24:0b:a0:c4:f2:7c:42:b0:2a:c5:4f:af:de:38:98:
                    90:40:d0:6b:ea:c0:6b:0c:6e:e4:b2:f2:aa:55:c4:
                    54:39:5d:6d:3d:6a:e0:53:4c:7d:7d:e3:37:a3:a5:
                    c3:9e:6b:c5:81:92:80:e4:c1:6a:c0:64:54:2e:96:
                    55:07:0d:8c:db:fa:d4:14:a3:fe:c1:3c:4e:1e:5a:
                    d2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A3:B4:D3:98:B1:6C:DF:93:23:5A:9B:44:20:2D:D7:7D:BF:9A:0A
            X509v3 Authority Key Identifier:
                keyid:D5:EE:A9:2C:42:45:40:50:46:BE:9B:8C:A6:C0:C2:0E:6A:2B:14:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:52:b0:bf:3a:7f:48:1d:43:08:cc:92:44:56:c7:15:49:f8:
         82:b7:d5:71:66:a0:b9:a5:4d:c7:1f:60:14:7f:76:87:05:12:
         51:54:7c:a6:c4:99:41:1f:91:93:f9:52:05:d5:24:5c:35:2e:
         65:ae:a7:63:02:20:94:bf:95:5b:11:c2:ab:51:65:b1:e7:f4:
         5d:27:87:fb:78:5b:49:26:d3:23:31:1d:c6:ae:41:4d:a5:24:
         b3:09:56:a9:40:0f:e2:1e:c8:16:81:a2:39:aa:ff:16:52:27:
         0e:8d:5c:a9:76:a0:71:4c:94:2e:73:4a:c5:84:d6:64:25:fc:
         04:5e:a3:72:94:3d:a0:13:40:d1:50:99:a4:f8:e6:e7:43:45:
         5a:56:fd:ec:8a:46:b5:2a:e8:0f:03:0c:d4:c1:0f:80:35:c3:
         e5:2b:90:73:fa:bb:b5:ba:7f:f4:f0:f8:b5:67:6d:ce:1c:9e:
         0f:78:67:a3:21:bf:b7:8d:57:0c:74:7e:ff:9c:11:51:0c:bb:
         11:60:b4:91:ab:74:24:26:1c:f5:1b:ec:01:29:1f:cb:0a:37:
         53:4d:2a:f8:cb:f0:85:6f:e5:0c:cf:6e:d1:57:6f:c9:10:0c:
         72:3c:9e:80:c7:f6:1f:05:60:e6:49:d1:5d:9e:a3:24:85:9e:
         e4:d1:74:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----