Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
File:                     3x4tS9NitiuARQIdw1CxIOVTAmU.mft (raw, json)
Hash identifier:          u/Kwp6YQbVvdQHwhdRYWqD/sj9Au/BZQQVR4Lqp2xTs=
Subject key identifier:   CB:B7:71:2B:B6:BD:E0:DD:6C:48:44:61:21:14:D3:B5:50:93:9E:EF
Authority key identifier: DF:1E:2D:4B:D3:62:B6:2B:80:45:02:1D:C3:50:B1:20:E5:53:02:65
Certificate issuer:       /CN=df1e2d4bd362b62b8045021dc350b120e5530265
Certificate serial:       0191F96C0C434C567431EE1BB3DA852567A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
Manifest number:          109B
Signing time:             Mon 16 Sep 2024 06:01:33 +0000
Manifest this update:     Mon 16 Sep 2024 06:01:33 +0000
Manifest next update:     Tue 17 Sep 2024 06:01:33 +0000
Files and hashes:         1: 3x4tS9NitiuARQIdw1CxIOVTAmU.crl (hash: GCuH/Q0aHD1YzOuLpZOibCiRk6xFnGpowO8Ulo4tbpE=)
                          2: mgcsv3O5U7xPrUvsdzUJt0rQvCU.roa (hash: jvko7W6gAOU+XPPkllkVRjHgYmqpJTEHOlhDfoEqqUg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 06:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:6c:0c:43:4c:56:74:31:ee:1b:b3:da:85:25:67:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df1e2d4bd362b62b8045021dc350b120e5530265
        Validity
            Not Before: Sep 16 06:01:33 2024 GMT
            Not After : Sep 17 06:01:33 2024 GMT
        Subject: CN=cbb7712bb6bde0dd6c4844612114d3b550939eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:91:22:bb:03:84:cd:51:65:fd:75:a7:89:15:
                    b8:15:8b:b2:06:bc:45:ec:39:25:ac:93:c7:6b:2b:
                    e3:ea:5d:00:18:30:7c:ec:9d:67:82:c2:62:60:b5:
                    64:47:06:59:a4:82:33:dd:32:b1:d8:d1:35:3d:96:
                    96:84:89:a2:86:1e:d3:08:22:d2:dd:ff:68:dc:71:
                    61:99:b4:0c:06:f7:0d:b3:07:14:6b:6f:c2:25:45:
                    c1:5e:0d:e2:fb:f6:d3:9a:11:eb:a0:55:a5:ad:22:
                    7d:dc:7c:f5:f5:b7:9d:92:80:8a:b0:9a:86:c9:92:
                    70:85:62:39:6f:20:c3:1b:65:67:6d:ed:8e:4d:5f:
                    90:d8:c0:43:5e:c2:22:00:82:ad:56:15:21:97:bc:
                    fc:8f:64:65:75:5a:ff:e2:d0:8b:8b:dc:51:13:98:
                    3e:3e:66:11:ec:44:4a:92:6e:ec:a9:32:d3:2c:6a:
                    06:56:b7:5d:86:26:22:da:79:8e:6a:78:7f:66:47:
                    3b:d3:c2:bc:5b:93:f8:4c:07:b3:30:9a:11:7c:b6:
                    7f:c3:7c:74:5c:c4:81:69:2b:9d:43:81:3e:33:e1:
                    ee:91:bc:db:cb:cf:9e:d6:38:62:a9:13:f6:d4:1c:
                    3a:fe:5b:db:26:13:20:cc:6c:16:47:5b:28:02:8b:
                    7c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B7:71:2B:B6:BD:E0:DD:6C:48:44:61:21:14:D3:B5:50:93:9E:EF
            X509v3 Authority Key Identifier:
                keyid:DF:1E:2D:4B:D3:62:B6:2B:80:45:02:1D:C3:50:B1:20:E5:53:02:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:bf:4b:9c:54:54:d5:39:c6:e5:a7:55:9d:c7:db:ed:c3:3b:
         ef:df:8a:f5:83:76:07:99:a8:81:57:31:b0:0d:96:5c:6b:18:
         75:5e:97:0f:0c:73:79:53:57:4a:73:f6:30:8d:12:c8:5c:44:
         e0:db:38:66:b0:69:a1:d0:f0:cf:36:6c:8a:5c:db:8d:15:5e:
         fc:f5:d1:8d:91:6b:6a:8c:3b:d5:12:6a:d9:4a:4f:29:46:f6:
         11:09:79:09:ea:d4:58:74:7e:3f:3d:1c:30:9a:ee:81:a7:63:
         50:78:36:98:cd:b3:0a:40:1a:27:c8:25:78:52:b2:ee:2f:08:
         d3:bb:a6:ac:9c:6e:86:e6:94:5c:d3:75:da:e7:e2:78:ce:76:
         e7:17:04:3b:66:06:8f:d9:e8:8d:ec:13:e3:63:ed:bc:45:fc:
         bd:fd:d2:d5:ca:ad:22:20:00:96:d6:95:45:0d:fd:6b:66:56:
         16:a1:cf:18:cb:3b:c1:61:b5:07:c4:08:e8:6a:8a:49:de:8c:
         5c:56:3c:ec:18:b5:f9:1c:59:52:6c:e2:a6:94:ff:db:7d:0e:
         da:e3:b1:3a:04:bf:01:5c:d8:1e:8f:82:5b:86:c5:8f:ae:59:
         5b:78:30:2a:b7:93:5b:ac:b2:82:05:90:61:60:98:a1:18:9f:
         f6:d2:b4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----