Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
File:                     3XF0IQf16FBis-CuZa-kuuZw4Es.mft (raw, json)
Hash identifier:          7APDHkIrKXpODo70j5OD+Nr370zCQ9iMwdJ2kkQLXl0=
Subject key identifier:   E1:B8:A7:D1:A9:4A:CC:3E:AF:88:7C:1C:AC:7B:28:8D:D4:AD:32:4A
Authority key identifier: DD:71:74:21:07:F5:E8:50:62:B3:E0:AE:65:AF:A4:BA:E6:70:E0:4B
Certificate issuer:       /CN=dd71742107f5e85062b3e0ae65afa4bae670e04b
Certificate serial:       0191FA478D888F2C0C02C308D0A69361542B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3XF0IQf16FBis-CuZa-kuuZw4Es.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
Manifest number:          013D
Signing time:             Mon 16 Sep 2024 10:01:18 +0000
Manifest this update:     Mon 16 Sep 2024 10:01:18 +0000
Manifest next update:     Tue 17 Sep 2024 10:01:18 +0000
Files and hashes:         1: 3XF0IQf16FBis-CuZa-kuuZw4Es.crl (hash: Yo9foyxTCjWY81gSp+FYQh5DP7sdVxl2NO7z+S6vmfw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3XF0IQf16FBis-CuZa-kuuZw4Es.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 10:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:47:8d:88:8f:2c:0c:02:c3:08:d0:a6:93:61:54:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd71742107f5e85062b3e0ae65afa4bae670e04b
        Validity
            Not Before: Sep 16 10:01:18 2024 GMT
            Not After : Sep 17 10:01:18 2024 GMT
        Subject: CN=e1b8a7d1a94acc3eaf887c1cac7b288dd4ad324a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f2:6f:6e:f7:bf:69:62:2d:8c:d3:ba:a7:2e:
                    df:4a:3d:3d:1f:33:32:c6:c0:7d:1d:22:cc:fb:8a:
                    76:04:16:c2:85:94:b5:07:eb:6a:a4:8e:e5:d5:b2:
                    91:48:e3:1c:e4:4c:1e:de:2a:e9:8a:5c:b2:18:9d:
                    52:c8:0e:7e:0c:94:b8:33:76:8b:b8:23:e9:07:34:
                    89:21:68:17:b8:59:75:b3:cd:aa:6d:05:88:24:c1:
                    1a:e9:22:8f:ac:3e:df:d2:0a:1a:de:5e:30:25:5c:
                    21:63:b3:c0:40:26:04:e0:a8:b0:3b:39:b7:fc:7f:
                    18:80:9a:a5:65:1a:a3:5b:70:4b:9d:5d:d2:61:e3:
                    d9:e1:22:d5:bc:b2:1d:4c:a1:d3:2e:62:91:91:bd:
                    4e:be:6c:a1:e0:ef:b4:4c:9f:08:cc:3e:5b:ec:c7:
                    2a:8f:70:cb:6a:c7:3f:bd:c8:ee:33:74:ab:07:ff:
                    93:64:c0:c7:79:1e:42:72:96:77:7e:a7:3c:fd:91:
                    18:62:c3:15:f0:f8:1a:ac:a4:67:46:24:e8:fe:23:
                    13:90:fc:fe:5c:5e:7c:a0:00:df:da:93:d3:be:dc:
                    81:eb:0a:4b:d8:8b:e6:bc:0c:e3:a0:4a:c0:00:94:
                    43:c6:61:c7:1e:53:52:c8:1f:7f:2d:89:e8:8b:df:
                    07:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B8:A7:D1:A9:4A:CC:3E:AF:88:7C:1C:AC:7B:28:8D:D4:AD:32:4A
            X509v3 Authority Key Identifier:
                keyid:DD:71:74:21:07:F5:E8:50:62:B3:E0:AE:65:AF:A4:BA:E6:70:E0:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XF0IQf16FBis-CuZa-kuuZw4Es.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:14:31:05:ad:0f:8a:3e:1a:cf:bd:f6:a7:0f:75:be:37:39:
         ab:f3:66:8d:48:07:f5:a2:9c:11:c1:27:bc:23:29:ea:ad:98:
         ca:ab:43:72:ff:f4:80:dc:09:d6:94:93:92:f8:65:44:34:83:
         58:54:d8:b2:e5:a6:ff:34:9d:f0:79:d7:25:e3:c3:f0:7e:d4:
         84:01:4c:99:7a:11:a3:ae:ba:75:19:fa:c5:34:7a:10:a9:4b:
         fd:6d:5e:94:50:fb:32:e8:fa:44:65:42:81:c2:d1:23:c5:67:
         43:71:0c:41:ab:ac:9f:41:85:0b:6c:57:f4:21:f5:4e:c9:6a:
         42:27:ac:33:55:29:43:1c:15:9c:97:90:dc:25:a9:83:4c:48:
         cc:9a:46:5a:00:54:bf:6c:82:ca:29:33:e3:2f:4b:f2:f6:ef:
         6f:36:f2:0c:01:ad:f6:06:98:0a:79:99:71:d4:64:3b:14:b9:
         0f:10:1d:c4:8f:ea:f7:1d:88:5e:77:a8:27:cf:d9:84:2a:58:
         ae:7a:bb:cd:60:67:f2:f9:cf:44:42:24:c8:f5:0e:fc:b2:65:
         ed:98:d6:81:d8:09:da:7f:7a:b5:df:7c:52:6c:f9:80:18:4c:
         38:2b:0b:44:5c:e5:56:95:bd:7f:24:8b:09:49:3d:be:e6:1f:
         40:24:23:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----