Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.mft
File:                     A1mTnOHGqpvru2WA4VbuvYcd87I.mft (raw, json)
Hash identifier:          YX0mahwkBy0XyoeQa/v2FMNOu+275QZpZx0tFIaIR1k=
Subject key identifier:   E4:E9:8D:37:2F:1A:5F:3E:39:9D:A0:C5:5B:00:EC:05:70:3D:66:4B
Authority key identifier: 03:59:93:9C:E1:C6:AA:9B:EB:BB:65:80:E1:56:EE:BD:87:1D:F3:B2
Certificate issuer:       /CN=0359939ce1c6aa9bebbb6580e156eebd871df3b2
Certificate serial:       0191FB5A564700D1EDFB2E8940FF74D1C6B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A1mTnOHGqpvru2WA4VbuvYcd87I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.mft
Manifest number:          0114
Signing time:             Mon 16 Sep 2024 15:01:26 +0000
Manifest this update:     Mon 16 Sep 2024 15:01:26 +0000
Manifest next update:     Tue 17 Sep 2024 15:01:26 +0000
Files and hashes:         1: A1mTnOHGqpvru2WA4VbuvYcd87I.crl (hash: WWI7k4S69MoF2fdXEeD4nEkNBdjnnwMOjts+u08RMgM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A1mTnOHGqpvru2WA4VbuvYcd87I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:5a:56:47:00:d1:ed:fb:2e:89:40:ff:74:d1:c6:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0359939ce1c6aa9bebbb6580e156eebd871df3b2
        Validity
            Not Before: Sep 16 15:01:26 2024 GMT
            Not After : Sep 17 15:01:26 2024 GMT
        Subject: CN=e4e98d372f1a5f3e399da0c55b00ec05703d664b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6b:f2:44:b8:43:58:05:01:c3:a2:8c:d6:50:
                    18:41:e3:45:d8:82:22:90:88:1c:d7:d7:d4:05:c4:
                    14:b9:bc:10:31:7b:6c:a2:d6:dd:26:3f:ee:2a:4c:
                    b3:4b:a8:68:c3:d6:57:96:61:91:c7:5c:12:c8:6d:
                    69:d6:e0:91:32:08:ac:d2:7e:20:fe:27:6e:e2:35:
                    a1:1e:e0:e1:da:6e:65:ad:fd:37:1b:25:ca:76:c2:
                    bf:c6:1b:d1:fd:02:07:fe:1e:6d:3e:9f:f9:0e:87:
                    26:d2:f8:7b:4f:72:85:c4:37:fb:83:5d:92:f0:e8:
                    b9:29:a7:c1:cb:49:0d:10:8c:f7:53:ef:4a:c3:c0:
                    8e:97:0a:67:aa:14:ea:43:fe:d2:00:37:03:4c:2f:
                    4e:74:5f:7a:e4:47:f5:3e:78:f0:87:e6:08:f3:3f:
                    d0:8a:15:3f:50:3c:bd:e5:e3:41:d8:2f:d4:b9:c6:
                    df:b9:db:21:64:d9:30:d6:72:27:96:1d:2d:41:48:
                    2c:64:ca:55:bf:a7:bd:83:6e:7d:86:e4:f2:17:ed:
                    3e:77:cc:9b:79:87:de:e5:9a:9b:6b:e4:2a:ae:ee:
                    9a:9b:fd:cf:20:ee:d0:89:c1:8c:15:25:d8:b3:9f:
                    a4:9b:62:4a:8f:60:07:25:39:29:f4:b9:8b:0c:cd:
                    1c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E9:8D:37:2F:1A:5F:3E:39:9D:A0:C5:5B:00:EC:05:70:3D:66:4B
            X509v3 Authority Key Identifier:
                keyid:03:59:93:9C:E1:C6:AA:9B:EB:BB:65:80:E1:56:EE:BD:87:1D:F3:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1mTnOHGqpvru2WA4VbuvYcd87I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:1b:22:6d:3e:84:9d:6d:98:d5:c3:1a:29:dd:06:29:94:12:
         2d:30:42:47:a0:99:f2:6a:aa:bb:a5:d0:36:72:4f:5c:db:d2:
         e4:d3:2b:16:e0:c6:f4:88:62:55:a9:09:dd:4c:63:00:85:e7:
         8d:83:9d:1b:cb:ed:1f:ed:31:ea:00:24:20:d0:30:bc:96:a7:
         ae:38:2c:54:a2:c0:ee:91:4f:bd:42:f6:6a:f1:d1:48:37:d8:
         6a:55:50:6a:f3:12:48:be:10:65:55:11:7f:80:31:76:6f:7e:
         75:bf:43:18:4e:2b:2c:c1:44:87:3e:da:44:3b:78:29:70:0e:
         4c:72:3b:d4:fa:ea:f2:0d:10:e6:1d:6e:4f:7b:df:5e:43:97:
         84:bf:3c:be:58:1c:ed:89:ea:b0:07:4b:15:a5:ce:27:87:86:
         bc:7e:4c:93:81:6d:4a:c2:71:4b:d9:23:d9:c0:c5:68:cf:a7:
         7b:57:88:55:fa:66:b2:2d:20:bc:01:f8:38:e7:ab:39:0e:3b:
         d8:a2:bd:ab:ce:c6:24:d8:6a:ac:91:c7:85:6d:a2:27:c5:c2:
         3c:ea:f0:74:d1:3d:70:a3:bf:62:5f:6a:ec:3a:9e:60:61:d8:
         22:9e:b4:1c:6c:e4:c5:c9:69:99:0e:37:fc:9d:1c:90:05:2c:
         d2:56:83:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----