Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
File:                     8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft (raw, json)
Hash identifier:          H4+vEfgEnunAh4PqjDVMK4+O5K4qRe8THyuswkM8LXI=
Subject key identifier:   B1:AF:F6:B8:7A:06:8D:37:CE:52:47:D3:B0:FF:6A:CF:6B:21:91:F3
Authority key identifier: F0:37:74:A2:76:21:4B:86:E0:A5:B4:FA:77:21:BD:B0:E3:22:E0:80
Certificate issuer:       /CN=f03774a276214b86e0a5b4fa7721bdb0e322e080
Certificate serial:       0191F9A2AB8D0178705902947A11FE2CBE62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
Manifest number:          079C
Signing time:             Mon 16 Sep 2024 07:01:13 +0000
Manifest this update:     Mon 16 Sep 2024 07:01:13 +0000
Manifest next update:     Tue 17 Sep 2024 07:01:13 +0000
Files and hashes:         1: 8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl (hash: 7yhNzP6HrKrH0on5Dc7vIgXR319Xou4zmPKYnHPbeY0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:ab:8d:01:78:70:59:02:94:7a:11:fe:2c:be:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03774a276214b86e0a5b4fa7721bdb0e322e080
        Validity
            Not Before: Sep 16 07:01:13 2024 GMT
            Not After : Sep 17 07:01:13 2024 GMT
        Subject: CN=b1aff6b87a068d37ce5247d3b0ff6acf6b2191f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:31:b6:cb:0c:78:5f:9a:ca:70:80:9f:35:3b:
                    34:27:44:ad:25:1a:45:56:16:c7:ae:3f:a4:42:9f:
                    50:2f:9b:a8:04:92:60:42:a9:83:09:a6:ad:e7:8b:
                    48:63:5d:9e:21:b9:79:1d:cd:b6:fe:dd:9d:de:ea:
                    92:e9:ff:cb:c4:71:e8:11:bd:f3:7d:19:c1:12:da:
                    8d:ef:cf:6e:d8:a3:2e:9b:7e:00:99:1e:2f:6a:00:
                    60:cc:55:90:bf:f1:d3:6f:03:17:d2:11:4b:95:c3:
                    7e:03:14:c9:fd:cb:2e:22:69:f5:2f:89:40:b9:1a:
                    7e:d5:c0:88:2c:0d:be:09:73:e2:66:c0:1d:5d:fc:
                    35:c4:a5:ff:40:98:f8:7b:fd:8d:e8:98:a8:51:e6:
                    05:22:c5:1a:33:0f:a9:3c:61:e7:7b:2d:19:0c:9e:
                    bb:36:45:d9:9f:da:c0:05:24:1c:b7:6d:54:b6:2d:
                    cb:d8:c7:18:95:77:24:72:40:89:f7:24:5a:55:bf:
                    00:24:85:21:f2:f4:ca:38:8e:5c:8c:b0:67:73:4b:
                    39:87:91:a7:cb:98:a0:94:f5:e0:33:97:bf:06:b6:
                    96:12:2a:fb:cf:fb:71:01:49:d0:4d:15:13:d8:d4:
                    52:8d:f4:de:b4:d6:5e:ab:7d:da:90:35:fe:a6:41:
                    58:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AF:F6:B8:7A:06:8D:37:CE:52:47:D3:B0:FF:6A:CF:6B:21:91:F3
            X509v3 Authority Key Identifier:
                keyid:F0:37:74:A2:76:21:4B:86:E0:A5:B4:FA:77:21:BD:B0:E3:22:E0:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:4d:41:4d:c2:78:b7:9d:57:55:06:c1:83:13:ca:fc:83:91:
         05:10:fc:ae:0d:9c:53:97:76:9f:a1:60:59:56:07:10:57:7e:
         9f:29:e9:fd:4b:b5:31:ed:16:2b:b2:5b:8f:72:b0:b3:4e:c3:
         8c:88:06:bd:fd:c0:77:cc:49:dc:70:f8:87:0f:93:71:12:8a:
         48:5d:e5:b8:74:22:71:16:fa:ef:84:fe:67:ee:51:1e:03:74:
         c9:35:96:48:f8:16:63:a7:b9:28:37:d9:f7:a2:22:3e:ca:69:
         89:4e:a2:9c:1b:2a:51:77:be:92:81:c8:95:72:ef:85:d2:94:
         b1:6d:f9:5b:bb:7e:77:64:ac:54:d8:01:d6:f4:43:82:6b:37:
         eb:04:c8:ab:fb:4e:d0:1e:cd:9f:bb:03:ec:c4:f0:72:95:ea:
         b3:c8:f1:82:10:19:4f:a0:ab:76:6b:fb:d0:a1:50:14:ef:ba:
         d3:5a:a5:d9:ad:7b:7e:ef:05:1c:6b:84:11:ab:62:22:82:7f:
         92:7e:63:6c:59:10:d6:1d:f0:1b:93:be:26:21:ca:49:86:c4:
         99:e9:2b:8f:0a:36:38:d3:de:8e:2f:6c:f1:f1:51:39:ea:21:
         a3:2b:37:c6:38:2a:cd:46:b5:29:d8:74:ee:53:c5:f0:8c:92:
         e6:08:32:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----