Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
File:                     A-VjR3yiveae95Q5kflTMwV7PjY.mft (raw, json)
Hash identifier:          EJod6/vQpTlPfikHep1/OFPCiYDD2uspiSA8+EZ0blI=
Subject key identifier:   6B:93:09:2D:7D:BA:B9:59:53:9D:73:CD:F4:31:8A:73:84:26:CF:2C
Authority key identifier: 03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36
Certificate issuer:       /CN=03e563477ca2bde69ef7943991f95333057b3e36
Certificate serial:       0191FAEC6B5D96E58F054303926886F8F916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
Manifest number:          EF
Signing time:             Mon 16 Sep 2024 13:01:23 +0000
Manifest this update:     Mon 16 Sep 2024 13:01:23 +0000
Manifest next update:     Tue 17 Sep 2024 13:01:23 +0000
Files and hashes:         1: A-VjR3yiveae95Q5kflTMwV7PjY.crl (hash: QFfDkeKF4zCrWWPejovtFPg1nxveO7s0/JuVdsWMCMs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ec:6b:5d:96:e5:8f:05:43:03:92:68:86:f8:f9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e563477ca2bde69ef7943991f95333057b3e36
        Validity
            Not Before: Sep 16 13:01:23 2024 GMT
            Not After : Sep 17 13:01:23 2024 GMT
        Subject: CN=6b93092d7dbab959539d73cdf4318a738426cf2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:51:8b:20:05:9b:16:c5:0f:36:00:d2:d3:53:
                    f8:3a:43:c7:8c:6e:4c:e3:ad:3c:af:ba:24:2e:0e:
                    60:9a:13:2b:14:a8:63:88:28:6d:f1:be:0a:95:15:
                    27:35:98:90:2a:4f:36:42:59:27:a8:03:7a:4c:3e:
                    17:57:26:f4:1a:d1:7e:8a:40:e8:a6:4f:0a:be:01:
                    5a:f3:be:c8:d0:99:a9:6f:64:d9:20:a1:60:86:62:
                    5f:b0:6e:83:95:8d:0b:dd:64:a2:25:bc:21:45:9b:
                    ae:dc:c4:43:11:72:d9:4a:79:a0:a8:f3:43:dc:ae:
                    0b:8d:30:17:ac:56:a2:70:fe:e8:7a:38:6e:73:18:
                    7e:16:6c:fc:26:4a:74:00:37:db:a7:31:ab:f3:d2:
                    e7:d5:19:17:28:33:b9:0f:02:b8:18:91:28:3d:2b:
                    2b:31:2c:08:75:2a:01:94:dc:2d:c7:87:4f:02:51:
                    cc:69:b3:3a:42:c5:79:71:8f:21:fe:bf:ca:6d:0f:
                    a5:51:f9:98:e2:34:05:72:9c:23:ff:51:17:fa:0a:
                    b1:28:a6:93:d1:87:c1:f4:81:e6:de:f0:8c:8b:40:
                    72:11:63:a2:f1:62:08:de:3d:84:7d:27:34:37:aa:
                    a1:d7:59:3a:cf:84:ae:17:aa:88:b1:1d:55:5e:73:
                    94:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:93:09:2D:7D:BA:B9:59:53:9D:73:CD:F4:31:8A:73:84:26:CF:2C
            X509v3 Authority Key Identifier:
                keyid:03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:a1:e6:98:bb:fa:b8:57:e6:f8:bf:94:1e:40:5f:da:04:4c:
         02:03:d7:1a:d5:40:49:9b:d6:eb:cd:2d:d8:bf:55:33:dc:87:
         03:77:8b:d0:bf:bf:6b:b5:05:65:64:3c:1a:88:32:81:98:b2:
         90:eb:43:68:95:f7:9d:04:25:97:33:03:11:b3:8b:fc:18:0c:
         8b:10:14:dd:8b:5c:56:8d:c2:66:11:ad:bf:cd:d0:1b:9f:b9:
         5a:07:d1:8e:1e:3c:7b:44:b6:ce:9c:46:26:82:6d:7c:74:9b:
         40:a9:ca:97:d7:54:ed:9e:85:f9:18:50:30:5e:b1:ce:f6:c4:
         59:85:52:e0:f0:97:f1:8e:31:ea:53:85:4b:55:c6:44:4c:80:
         cf:e3:e0:ef:ec:91:dc:0c:95:c4:9d:6c:96:bf:ce:8d:d3:4d:
         42:48:d9:3b:0f:24:52:fd:53:c6:38:ea:d4:4d:5c:20:8e:77:
         e3:b6:83:ac:d7:57:8e:eb:aa:5c:5a:46:06:05:6a:66:03:16:
         92:a9:16:95:b1:e6:83:87:6d:3d:69:c0:87:32:40:0f:5f:4a:
         e4:e0:8e:24:4f:d9:0d:fd:ed:63:62:14:63:34:4b:93:42:f3:
         6a:b5:4b:e8:74:50:77:c0:f4:5f:a8:b4:83:70:fd:95:ed:4b:
         26:0b:33:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----