Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c3db2f-43e7-4214-a3dd-a4f075255791/1/54BIQXwQsaoWhmVVa6jEh-9k_74.mft
File:                     54BIQXwQsaoWhmVVa6jEh-9k_74.mft (raw, json)
Hash identifier:          QsCmAu6Q2DvVmJE5wjtPcGc8uN8wbU4xVY4g/QL5hH8=
Subject key identifier:   48:69:40:09:5B:85:A8:3E:11:75:B5:72:47:11:56:ED:8C:33:2F:F8
Authority key identifier: E7:80:48:41:7C:10:B1:AA:16:86:65:55:6B:A8:C4:87:EF:64:FF:BE
Certificate issuer:       /CN=e78048417c10b1aa168665556ba8c487ef64ffbe
Certificate serial:       0191FAED93F24FC393FE95BF9854BE677769
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54BIQXwQsaoWhmVVa6jEh-9k_74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/c3db2f-43e7-4214-a3dd-a4f075255791/1/54BIQXwQsaoWhmVVa6jEh-9k_74.mft
Manifest number:          0653
Signing time:             Mon 16 Sep 2024 13:02:39 +0000
Manifest this update:     Mon 16 Sep 2024 13:02:39 +0000
Manifest next update:     Tue 17 Sep 2024 13:02:39 +0000
Files and hashes:         1: 54BIQXwQsaoWhmVVa6jEh-9k_74.crl (hash: BRIyTdqO22NEtJgeODSiuAL/JelYGVj5BSvHilx3lgY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/c3db2f-43e7-4214-a3dd-a4f075255791/1/54BIQXwQsaoWhmVVa6jEh-9k_74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/c3db2f-43e7-4214-a3dd-a4f075255791/1/54BIQXwQsaoWhmVVa6jEh-9k_74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54BIQXwQsaoWhmVVa6jEh-9k_74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ed:93:f2:4f:c3:93:fe:95:bf:98:54:be:67:77:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e78048417c10b1aa168665556ba8c487ef64ffbe
        Validity
            Not Before: Sep 16 13:02:39 2024 GMT
            Not After : Sep 17 13:02:39 2024 GMT
        Subject: CN=486940095b85a83e1175b572471156ed8c332ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:84:a2:77:9a:47:2a:be:60:5c:9e:7f:ee:a8:
                    c9:e8:05:e8:b5:6c:ba:f7:ef:4c:d9:2c:f9:ba:bd:
                    4b:1e:ea:dc:63:91:ca:13:9d:37:c7:b2:e1:99:fb:
                    ed:33:1f:7d:7b:48:62:a7:88:09:e6:cb:fd:98:ea:
                    f2:b7:01:78:c2:21:9e:6d:11:d4:34:a9:a4:b2:b2:
                    72:97:49:1a:ed:25:b9:65:b6:46:ea:85:1c:68:12:
                    75:bd:76:05:be:bc:a1:82:55:64:e7:d5:f2:e6:da:
                    f6:d7:60:ad:38:9a:71:60:c5:28:6d:e5:46:1f:23:
                    42:5e:70:f7:c8:af:fe:97:e7:0c:fd:c4:ab:c0:cc:
                    5f:a4:27:b9:2a:41:0b:d6:c5:49:ff:c2:f6:33:22:
                    46:7d:85:d8:2b:48:e0:14:2b:01:4e:93:0d:21:41:
                    42:3d:57:60:48:02:64:ff:4d:04:82:a8:f4:43:f8:
                    c1:83:f1:88:3a:3f:3d:73:d0:48:71:17:46:46:65:
                    23:b7:b7:95:ff:65:89:de:a0:de:74:66:c3:54:e3:
                    7e:2a:6b:c1:fc:ac:1b:e6:5d:69:ff:ec:11:0d:5c:
                    5c:c1:d2:d3:76:d7:a0:7a:5f:87:79:80:3c:f4:d8:
                    fc:db:65:e6:8b:a7:48:4f:f3:0a:65:a6:11:fc:e2:
                    9f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:69:40:09:5B:85:A8:3E:11:75:B5:72:47:11:56:ED:8C:33:2F:F8
            X509v3 Authority Key Identifier:
                keyid:E7:80:48:41:7C:10:B1:AA:16:86:65:55:6B:A8:C4:87:EF:64:FF:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54BIQXwQsaoWhmVVa6jEh-9k_74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3db2f-43e7-4214-a3dd-a4f075255791/1/54BIQXwQsaoWhmVVa6jEh-9k_74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3db2f-43e7-4214-a3dd-a4f075255791/1/54BIQXwQsaoWhmVVa6jEh-9k_74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:6f:83:15:06:7a:1a:48:78:c5:7f:44:74:23:09:e1:61:b2:
         e9:55:17:a9:1d:4a:a6:41:e7:1b:3a:8b:3a:22:65:60:f9:d9:
         a4:58:9f:f9:96:b5:50:46:ee:cd:74:bd:b6:74:bc:73:56:b1:
         8b:74:fe:0f:9d:78:3f:5a:3b:a9:14:a1:a2:92:c1:5d:1d:9f:
         06:ea:1e:1f:f0:15:38:b9:e0:3b:ca:4d:95:0f:c9:3d:b6:26:
         04:78:14:a1:a2:43:ee:89:4b:a0:89:f7:35:b5:0a:90:cc:fd:
         f4:71:90:7c:34:d4:d0:da:0b:6f:65:a1:69:ce:71:5a:20:31:
         d9:ea:43:ec:97:42:ae:06:b7:fb:c2:87:15:f8:5f:83:30:81:
         37:dc:da:74:74:e6:83:34:54:6a:97:73:cb:39:95:46:c6:91:
         86:67:4d:cd:61:87:b3:ff:78:51:b7:61:4b:df:db:6b:d5:46:
         98:d4:54:01:db:23:e9:68:6d:6c:c4:41:f0:76:41:b8:4d:cf:
         10:70:33:6a:47:73:04:95:48:6f:7f:af:fc:d2:fa:03:1e:d5:
         84:bf:c4:bf:28:e8:59:71:c7:c4:84:e2:b8:4e:e3:d3:8b:77:
         a0:3b:af:79:4e:51:1c:b0:66:65:27:ea:60:47:5c:68:b4:7e:
         7d:29:af:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----