Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
File:                     evOlFiiU19GsKvgy16vPHb4RCuE.mft (raw, json)
Hash identifier:          8VRRj7YyVE4EE8tk+5uHhQcvxb17jv2sw7mdvFS5rBI=
Subject key identifier:   B8:38:18:CD:B8:96:AC:1C:E0:63:17:3E:9B:66:31:3A:5A:91:70:4C
Authority key identifier: 7A:F3:A5:16:28:94:D7:D1:AC:2A:F8:32:D7:AB:CF:1D:BE:11:0A:E1
Certificate issuer:       /CN=7af3a5162894d7d1ac2af832d7abcf1dbe110ae1
Certificate serial:       0191F9D95408BF99448D38436DFAA55FEEEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
Manifest number:          0120
Signing time:             Mon 16 Sep 2024 08:00:55 +0000
Manifest this update:     Mon 16 Sep 2024 08:00:55 +0000
Manifest next update:     Tue 17 Sep 2024 08:00:55 +0000
Files and hashes:         1: evOlFiiU19GsKvgy16vPHb4RCuE.crl (hash: xtrZszKlhgQ4IGJdJ87txVpKmFzHk+JwmTF+EQxwhh8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:54:08:bf:99:44:8d:38:43:6d:fa:a5:5f:ee:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7af3a5162894d7d1ac2af832d7abcf1dbe110ae1
        Validity
            Not Before: Sep 16 08:00:55 2024 GMT
            Not After : Sep 17 08:00:55 2024 GMT
        Subject: CN=b83818cdb896ac1ce063173e9b66313a5a91704c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:83:3b:95:57:a0:72:10:97:c2:b5:82:46:79:
                    11:1d:3b:48:ac:18:0c:05:0e:6f:27:cb:39:48:42:
                    ae:8f:42:79:8b:84:0e:04:99:3d:80:ab:c2:63:01:
                    97:a0:9b:bc:97:1c:38:2a:72:ed:b5:f8:24:a5:13:
                    a7:c1:cb:c4:a7:0c:a1:46:f4:48:19:85:c3:59:e0:
                    03:aa:d5:5c:11:cc:ec:c8:b0:8d:5f:df:e1:9b:d6:
                    cb:42:87:7b:7f:4c:5e:6d:0f:88:53:a9:f7:1d:98:
                    e3:b6:d0:27:5f:32:d0:c9:6c:89:08:f2:04:93:2a:
                    a0:81:12:3f:4d:a5:d2:51:98:5e:46:0e:e1:79:8e:
                    1f:ba:18:9e:06:b9:2c:c7:c4:c2:8b:dc:51:78:54:
                    40:f3:c6:74:3d:bc:4c:12:87:6f:7e:54:7f:c6:3b:
                    ea:0a:87:bd:97:e6:82:77:a5:57:9e:c9:53:76:2c:
                    53:13:7d:3c:c7:6f:79:99:f6:3b:d3:99:a4:e1:a1:
                    f9:d5:b2:a4:81:0d:8e:80:2a:bd:db:aa:6a:29:37:
                    0e:72:a4:1e:28:81:a4:93:e4:d6:11:ae:f7:35:0c:
                    43:b9:63:43:13:f1:23:bb:d1:fc:e0:54:8a:26:ba:
                    4c:4a:c7:d2:60:11:49:a2:43:c3:f4:0e:9f:4b:02:
                    26:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:38:18:CD:B8:96:AC:1C:E0:63:17:3E:9B:66:31:3A:5A:91:70:4C
            X509v3 Authority Key Identifier:
                keyid:7A:F3:A5:16:28:94:D7:D1:AC:2A:F8:32:D7:AB:CF:1D:BE:11:0A:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:fc:d9:4f:bb:a9:73:23:7f:c8:51:a0:79:6c:b1:d6:d2:79:
         1e:77:c0:ac:97:30:27:05:f1:cd:55:c3:dc:f9:29:b2:22:85:
         da:56:8a:8f:10:2f:2c:5d:69:c3:67:9d:ad:73:ef:f3:81:21:
         02:e7:a4:98:b0:eb:10:f0:d1:40:2c:f2:33:5d:7b:78:47:e1:
         a5:02:db:bc:4b:0d:d1:ce:0f:2a:17:de:de:e5:5f:9f:fe:be:
         ea:b4:0f:87:73:86:1b:38:17:1c:71:96:64:e4:2d:60:6a:4b:
         2e:9a:b8:79:27:4e:75:6d:07:ff:86:02:70:cf:5c:ed:a1:49:
         fc:93:77:b9:44:9e:e6:3d:79:2c:04:11:27:2f:4f:15:1a:07:
         89:f0:57:7c:5b:fb:89:ee:0c:6c:15:90:ed:e8:4f:19:c5:b0:
         20:d6:26:2e:e2:ac:be:07:96:ef:7d:5e:a8:70:4e:2a:d2:01:
         c7:91:1e:0d:6a:f5:0e:a8:13:3d:68:f7:38:73:20:4f:8a:20:
         a2:43:1f:bf:87:74:2c:98:be:06:0f:bf:00:91:92:0e:75:9f:
         78:be:2d:12:e2:e1:42:53:6f:2c:8a:3f:a6:c4:ab:51:4c:a3:
         82:0c:12:93:a9:0f:c1:52:2c:58:49:8f:4a:ba:6e:34:b6:67:
         1b:42:5c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----