Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/a92992-da77-4c17-8c4d-7e62bf2629a3/1/qR70Z6wYY1XKUofRv6NigE9Psk4.mft
File:                     qR70Z6wYY1XKUofRv6NigE9Psk4.mft (raw, json)
Hash identifier:          AkCoUm2jz+EP3Zm1K41hwhObME9vy+beEsOvlUXSEMI=
Subject key identifier:   3C:FA:E5:90:CA:38:35:F7:39:A9:D4:31:6B:91:C3:4E:A0:74:2C:2C
Authority key identifier: A9:1E:F4:67:AC:18:63:55:CA:52:87:D1:BF:A3:62:80:4F:4F:B2:4E
Certificate issuer:       /CN=a91ef467ac186355ca5287d1bfa362804f4fb24e
Certificate serial:       0191F96C20C19FA50E6320D35442D2B2B135
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qR70Z6wYY1XKUofRv6NigE9Psk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/a92992-da77-4c17-8c4d-7e62bf2629a3/1/qR70Z6wYY1XKUofRv6NigE9Psk4.mft
Manifest number:          A8
Signing time:             Mon 16 Sep 2024 06:01:38 +0000
Manifest this update:     Mon 16 Sep 2024 06:01:38 +0000
Manifest next update:     Tue 17 Sep 2024 06:01:38 +0000
Files and hashes:         1: qR70Z6wYY1XKUofRv6NigE9Psk4.crl (hash: KW725RY1e7DwRT3ovjaIYpBafkTWHJNRYVSJsUiJhxI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/a92992-da77-4c17-8c4d-7e62bf2629a3/1/qR70Z6wYY1XKUofRv6NigE9Psk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/a92992-da77-4c17-8c4d-7e62bf2629a3/1/qR70Z6wYY1XKUofRv6NigE9Psk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qR70Z6wYY1XKUofRv6NigE9Psk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 06:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:6c:20:c1:9f:a5:0e:63:20:d3:54:42:d2:b2:b1:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a91ef467ac186355ca5287d1bfa362804f4fb24e
        Validity
            Not Before: Sep 16 06:01:38 2024 GMT
            Not After : Sep 17 06:01:38 2024 GMT
        Subject: CN=3cfae590ca3835f739a9d4316b91c34ea0742c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:19:7f:09:bf:aa:8c:88:33:4c:e8:1a:6b:b5:
                    12:45:ab:b4:49:c4:e4:ac:12:1e:78:60:05:b4:5b:
                    25:9c:4a:b2:c0:26:d9:f1:04:b2:1c:6d:59:5d:3f:
                    be:23:e8:9d:c3:dd:c0:9c:6c:1a:8b:73:16:9f:e6:
                    c8:1e:16:ae:69:85:c6:18:8d:bd:41:03:64:47:fd:
                    b3:bd:06:11:a0:54:7f:73:f3:2e:f8:50:c0:14:e4:
                    9b:cf:66:c5:ff:fe:d1:af:e7:4f:02:ba:68:38:40:
                    a3:00:8f:b0:dd:82:b7:7b:b5:36:75:98:25:83:e7:
                    38:d5:cd:44:d2:17:69:ea:2b:8f:85:1c:fe:0c:dd:
                    a6:8b:d4:cb:99:5c:45:08:a0:3b:fe:26:4c:29:cc:
                    f7:6b:5c:8e:68:85:5c:cf:d4:ea:65:72:ef:b5:94:
                    58:9f:9e:9c:ba:d8:58:34:94:56:ff:44:b4:d8:5f:
                    87:4c:12:58:a4:53:b4:9b:0a:0d:1a:be:40:c1:3d:
                    c7:52:35:37:b8:23:78:45:37:74:14:6d:c0:ca:36:
                    86:06:28:11:53:45:39:29:39:f6:56:66:30:05:26:
                    2c:9a:99:84:ad:99:4d:a0:a9:bc:46:dd:f9:16:25:
                    4f:15:e4:ea:bf:88:99:a4:4c:38:49:65:06:25:28:
                    db:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FA:E5:90:CA:38:35:F7:39:A9:D4:31:6B:91:C3:4E:A0:74:2C:2C
            X509v3 Authority Key Identifier:
                keyid:A9:1E:F4:67:AC:18:63:55:CA:52:87:D1:BF:A3:62:80:4F:4F:B2:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qR70Z6wYY1XKUofRv6NigE9Psk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a92992-da77-4c17-8c4d-7e62bf2629a3/1/qR70Z6wYY1XKUofRv6NigE9Psk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a92992-da77-4c17-8c4d-7e62bf2629a3/1/qR70Z6wYY1XKUofRv6NigE9Psk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:81:6b:37:1c:b4:dd:23:43:a0:0b:d8:e9:39:d3:c1:aa:68:
         83:07:0d:1f:1b:c6:56:f3:70:b8:2b:d5:4e:fa:01:23:ab:a3:
         8f:b4:ed:c4:6c:f1:29:ad:4d:76:df:7f:93:08:e8:15:9c:f9:
         34:ca:17:37:6e:5e:a4:1f:66:9e:32:5e:f5:2f:71:53:e1:87:
         e4:99:09:ee:bc:a3:e9:5f:f7:dc:d9:b2:01:e0:42:c6:f8:d9:
         a1:47:63:fd:78:03:a1:20:1a:33:a1:b4:89:31:fb:23:c4:dd:
         57:96:0d:fb:80:48:f7:08:50:0b:dc:08:d3:6c:36:58:79:f9:
         9e:53:07:02:1e:39:22:c6:82:36:48:27:ad:e6:4d:29:ab:c1:
         85:17:b2:e2:3e:d4:3d:e4:b6:31:46:1f:af:71:50:01:3f:5a:
         76:62:b4:a9:2d:4c:91:f3:d8:28:15:81:78:cc:d6:b1:6f:c1:
         b7:85:f2:95:ef:73:51:ac:d4:47:ac:22:4c:15:6c:40:fe:dc:
         96:a0:d6:c0:97:a1:d3:a4:4b:f0:6d:00:d0:f2:7c:a1:b3:e2:
         ec:3d:20:30:c9:b4:15:6d:f6:ef:50:c0:8e:dc:02:ba:22:fa:
         ba:a4:bb:71:79:05:21:7d:0a:03:2f:d1:32:8c:9a:91:92:0d:
         04:4f:bc:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----