Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7042af-31aa-44a3-a636-fb6ab2ef23e5/1/psP-xo0utonX0ElSISvQrWOdkA8.mft
File:                     psP-xo0utonX0ElSISvQrWOdkA8.mft (raw, json)
Hash identifier:          3zKMQbnilKOasbNHuesfRvYup+upLZOnAA5ypqaa+o4=
Subject key identifier:   5E:AE:B0:1B:15:00:1C:44:A7:FC:1E:5C:C0:21:4F:05:1D:40:2E:37
Authority key identifier: A6:C3:FE:C6:8D:2E:B6:89:D7:D0:49:52:21:2B:D0:AD:63:9D:90:0F
Certificate issuer:       /CN=a6c3fec68d2eb689d7d04952212bd0ad639d900f
Certificate serial:       0191FAED9D279284A8CB04A4442B384F2D1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psP-xo0utonX0ElSISvQrWOdkA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/7042af-31aa-44a3-a636-fb6ab2ef23e5/1/psP-xo0utonX0ElSISvQrWOdkA8.mft
Manifest number:          EC
Signing time:             Mon 16 Sep 2024 13:02:41 +0000
Manifest this update:     Mon 16 Sep 2024 13:02:41 +0000
Manifest next update:     Tue 17 Sep 2024 13:02:41 +0000
Files and hashes:         1: psP-xo0utonX0ElSISvQrWOdkA8.crl (hash: j2AMUM54w8PW8G0Ey9kF4U9GXnDh1LlzUmpL266jMhQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/7042af-31aa-44a3-a636-fb6ab2ef23e5/1/psP-xo0utonX0ElSISvQrWOdkA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/7042af-31aa-44a3-a636-fb6ab2ef23e5/1/psP-xo0utonX0ElSISvQrWOdkA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/psP-xo0utonX0ElSISvQrWOdkA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ed:9d:27:92:84:a8:cb:04:a4:44:2b:38:4f:2d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c3fec68d2eb689d7d04952212bd0ad639d900f
        Validity
            Not Before: Sep 16 13:02:41 2024 GMT
            Not After : Sep 17 13:02:41 2024 GMT
        Subject: CN=5eaeb01b15001c44a7fc1e5cc0214f051d402e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0a:2a:f8:33:4a:4b:db:37:54:83:98:a5:19:
                    a3:85:6a:b0:f4:fc:66:f3:85:c0:71:06:7c:ea:cc:
                    8d:4e:c1:c3:8c:15:7e:4a:75:40:d1:93:2b:7d:20:
                    46:1f:65:8e:b4:3e:90:bd:73:a0:cb:75:b2:c7:23:
                    0b:c5:cc:b2:54:75:ea:65:1f:36:b9:fc:62:70:93:
                    f5:e8:f7:29:4e:a7:f9:49:4e:8e:87:ca:1a:24:22:
                    97:ca:38:69:bf:92:f1:33:f3:fa:f6:08:bb:19:19:
                    c6:33:e6:65:2f:4d:f1:14:71:87:b1:70:70:bb:2b:
                    cd:00:37:da:48:70:1d:1e:d2:67:e7:99:58:b2:65:
                    f3:cb:82:e9:7e:4a:4b:df:c1:13:74:90:af:00:3c:
                    13:08:98:e1:e1:85:8c:4f:91:ce:dc:b6:3e:ae:63:
                    da:9e:99:89:3d:d2:70:1f:36:38:43:b3:ba:c9:eb:
                    0b:b2:98:46:69:7d:d3:b9:cd:a4:6f:c1:22:85:3f:
                    24:94:3c:ed:32:5f:27:dc:bd:b2:b6:5d:b9:f2:44:
                    4f:b0:26:d6:45:9a:0e:7e:a6:55:08:0e:3f:ae:22:
                    36:83:b8:dc:48:e5:fc:d0:23:64:a5:fa:5d:a7:ed:
                    e0:aa:c5:26:fa:7b:53:06:4e:bf:9b:de:6a:0f:c1:
                    1c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AE:B0:1B:15:00:1C:44:A7:FC:1E:5C:C0:21:4F:05:1D:40:2E:37
            X509v3 Authority Key Identifier:
                keyid:A6:C3:FE:C6:8D:2E:B6:89:D7:D0:49:52:21:2B:D0:AD:63:9D:90:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psP-xo0utonX0ElSISvQrWOdkA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7042af-31aa-44a3-a636-fb6ab2ef23e5/1/psP-xo0utonX0ElSISvQrWOdkA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7042af-31aa-44a3-a636-fb6ab2ef23e5/1/psP-xo0utonX0ElSISvQrWOdkA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f6:f1:a1:4a:8f:f7:26:09:cd:3b:dd:e5:2b:1c:6f:cb:df:
         1a:0c:3d:03:14:4c:a4:53:29:6d:16:d6:56:ce:ca:8e:e9:3c:
         0d:6b:14:16:fa:5f:3f:81:0c:b3:32:b3:45:d8:6e:ee:39:8a:
         7e:95:2c:fc:1e:6d:32:ec:99:87:63:81:7c:f4:04:15:76:43:
         be:24:dd:bf:3f:df:7c:88:46:0a:01:f4:ea:98:0a:e4:3c:c5:
         96:d0:17:74:a0:28:a2:a2:1e:d0:c2:0e:34:42:a9:f1:27:7f:
         0e:a7:64:3d:af:eb:be:c9:ab:72:31:29:43:34:37:1f:91:ce:
         fc:67:2d:d1:cd:7b:ec:89:32:7f:09:28:8b:4a:91:aa:4e:2f:
         fd:c6:b1:6a:20:59:99:83:35:e1:2f:71:fa:39:22:71:be:2f:
         2c:95:26:ae:d2:2e:ba:8e:ce:a3:37:07:4e:bc:a8:24:c0:a6:
         c0:fd:29:8d:4c:aa:57:8d:6a:10:b6:7d:ac:9c:5c:c5:40:e1:
         99:13:42:50:f3:78:c3:08:01:27:51:9e:3a:a6:12:24:f9:3e:
         16:16:8a:6b:56:f4:05:a5:88:36:c2:7f:e8:ac:87:d7:7d:8c:
         2c:60:a4:3c:6b:5e:c7:ca:eb:28:d9:64:96:ac:29:70:a3:dd:
         bf:9e:c5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----