Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
File:                     eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft (raw, json)
Hash identifier:          XSJq05pU4YFepBMpUu1wPMX7DMKpqnLF6yqhk2Qh/wc=
Subject key identifier:   66:91:D0:8A:AE:45:DE:58:E1:0D:ED:10:D2:AF:68:8B:15:ED:15:D3
Authority key identifier: 78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED
Certificate issuer:       /CN=78fd422a1ddee016ee5f5a23101b93043af764ed
Certificate serial:       0191FAB4F67EDB7E94EAD9B1778BD26A74F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
Manifest number:          011F
Signing time:             Mon 16 Sep 2024 12:00:49 +0000
Manifest this update:     Mon 16 Sep 2024 12:00:49 +0000
Manifest next update:     Tue 17 Sep 2024 12:00:49 +0000
Files and hashes:         1: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl (hash: m1GTsyCfEUvBUoq4b8Gvz89CQ8A9krwO/yUyE0SxmkE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 12:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:b4:f6:7e:db:7e:94:ea:d9:b1:77:8b:d2:6a:74:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78fd422a1ddee016ee5f5a23101b93043af764ed
        Validity
            Not Before: Sep 16 12:00:49 2024 GMT
            Not After : Sep 17 12:00:49 2024 GMT
        Subject: CN=6691d08aae45de58e10ded10d2af688b15ed15d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:70:41:40:c2:6e:d8:0c:39:b1:c4:4e:3b:f6:
                    cc:2e:8c:6f:5b:00:37:78:f8:98:61:79:f9:57:68:
                    48:88:c9:91:73:e6:64:74:a9:70:1e:29:df:29:f4:
                    b7:27:b7:26:36:a4:8d:cc:b0:87:cb:ad:58:20:41:
                    cb:cf:5a:0e:6d:ef:af:79:07:eb:38:b9:22:6a:00:
                    36:8b:69:cd:3a:ee:f2:da:c0:54:44:55:a0:58:d4:
                    8b:4c:eb:9d:b4:cd:46:fc:7d:55:72:1f:92:fc:fc:
                    34:60:f2:76:43:8c:d8:79:0e:f7:e5:70:ee:05:12:
                    aa:bc:08:78:75:c1:34:c2:1c:e1:59:2b:9d:a7:71:
                    80:e1:06:48:4b:12:f3:71:a5:04:53:cf:8c:d8:04:
                    42:65:f0:81:dc:5a:41:5a:03:2b:f4:23:99:cf:9e:
                    9f:e4:68:f5:37:a2:48:b9:0f:02:4d:80:56:f0:13:
                    46:77:86:86:6e:f9:49:6f:bd:1a:83:61:cf:2f:da:
                    b6:0f:6b:62:c5:71:ec:4d:54:47:96:d4:11:e6:64:
                    64:29:f3:f8:1f:1b:a8:a3:e8:39:83:f9:9d:1f:5f:
                    48:f8:e7:1c:c0:54:af:d6:63:ac:fa:af:40:71:29:
                    27:12:7d:de:90:de:b6:69:cf:80:2a:5a:21:41:50:
                    98:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:91:D0:8A:AE:45:DE:58:E1:0D:ED:10:D2:AF:68:8B:15:ED:15:D3
            X509v3 Authority Key Identifier:
                keyid:78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:09:d2:46:87:a0:ca:2a:7a:b7:15:bb:65:67:16:8d:81:b4:
         c2:0a:a3:d9:6d:43:e1:6e:9f:5e:bc:32:2f:f1:05:15:27:b1:
         44:b8:a1:a5:c9:ef:1f:0f:14:0c:40:12:aa:93:bc:82:d0:e8:
         0e:57:17:c1:ef:8e:61:f5:c1:ca:5c:15:3c:d0:b8:6f:d6:c1:
         33:cb:e5:c5:e8:53:18:d3:09:4a:c7:d5:22:ed:76:80:1a:c7:
         b4:9b:76:11:a6:c8:fc:57:bb:78:f3:ff:88:cc:3f:02:64:32:
         89:2b:e4:0a:49:a9:81:72:29:7f:9e:01:73:2a:57:eb:6b:b3:
         27:ff:09:df:f0:ce:58:86:90:1c:f2:67:f1:84:d3:77:0a:48:
         78:a3:c6:46:04:d6:f8:e2:79:94:f2:85:83:a9:45:6f:93:ca:
         26:a3:db:6e:9a:91:d5:b5:2c:8f:55:11:ad:de:8f:11:44:7e:
         f7:eb:de:af:28:12:5a:ce:f7:bc:69:4c:e0:22:1b:fb:cd:7f:
         4d:19:65:7f:3e:70:a6:1b:58:97:41:64:3a:c4:13:0c:ee:46:
         61:f0:09:ee:13:37:12:67:a7:66:c5:fa:80:6e:de:9f:12:e3:
         84:b3:dd:88:8c:b4:ea:bb:34:2d:28:be:62:ee:dd:ad:a1:90:
         6d:92:f6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----