Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3a6650-32c9-405f-8510-da491957b015/1/y3K6uX16K5Z1xzVOVhxdakiA0ds.mft
File:                     y3K6uX16K5Z1xzVOVhxdakiA0ds.mft (raw, json)
Hash identifier:          tXyMhb/+flP59JsOSUgLIv/RmVh2DQx8LTflInC/HwI=
Subject key identifier:   B8:C4:EF:EC:A7:4B:97:E8:C8:7C:FD:6E:AD:9E:31:FB:72:C4:44:EB
Authority key identifier: CB:72:BA:B9:7D:7A:2B:96:75:C7:35:4E:56:1C:5D:6A:48:80:D1:DB
Certificate issuer:       /CN=cb72bab97d7a2b9675c7354e561c5d6a4880d1db
Certificate serial:       0191F9D9A257DE79948D8D7D1A2348BF18FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y3K6uX16K5Z1xzVOVhxdakiA0ds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/3a6650-32c9-405f-8510-da491957b015/1/y3K6uX16K5Z1xzVOVhxdakiA0ds.mft
Manifest number:          A8
Signing time:             Mon 16 Sep 2024 08:01:15 +0000
Manifest this update:     Mon 16 Sep 2024 08:01:15 +0000
Manifest next update:     Tue 17 Sep 2024 08:01:15 +0000
Files and hashes:         1: y3K6uX16K5Z1xzVOVhxdakiA0ds.crl (hash: hWDBwgaNGL2OTLq0JzIZdVF9oidoLcxWL+Yek+iNom4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/3a6650-32c9-405f-8510-da491957b015/1/y3K6uX16K5Z1xzVOVhxdakiA0ds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/3a6650-32c9-405f-8510-da491957b015/1/y3K6uX16K5Z1xzVOVhxdakiA0ds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y3K6uX16K5Z1xzVOVhxdakiA0ds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:a2:57:de:79:94:8d:8d:7d:1a:23:48:bf:18:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb72bab97d7a2b9675c7354e561c5d6a4880d1db
        Validity
            Not Before: Sep 16 08:01:15 2024 GMT
            Not After : Sep 17 08:01:15 2024 GMT
        Subject: CN=b8c4efeca74b97e8c87cfd6ead9e31fb72c444eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:9f:67:71:2f:13:0d:57:b7:a0:68:41:cf:
                    e4:4b:d4:98:b5:25:89:41:a9:1b:ef:b3:b8:b3:cb:
                    30:3a:f6:78:cf:e1:3f:77:f8:f6:02:b2:be:ca:5f:
                    b3:bf:94:b9:6e:0e:e6:37:16:14:c2:d2:a1:19:52:
                    0a:d7:6b:69:15:e2:a0:23:54:95:c9:37:38:5a:b8:
                    90:39:9e:19:db:43:ba:e5:5c:80:f7:f9:ed:c0:87:
                    00:9e:6b:e3:b3:fb:39:9a:bf:40:30:9f:29:6a:b5:
                    d9:12:4e:99:95:ba:b4:e2:e0:95:42:c8:1b:aa:09:
                    86:b5:9e:99:01:83:37:4b:b3:c7:5a:c9:35:66:05:
                    0f:4a:15:3f:d8:b6:dc:59:34:da:6d:de:bd:fb:7f:
                    bb:33:8f:17:fc:cc:cb:3b:69:ac:b0:40:7f:76:ea:
                    fe:1b:66:65:2c:4b:10:4c:31:b7:22:66:f0:5e:36:
                    b8:f2:fa:94:bb:3a:f8:11:54:5a:06:bf:e7:8e:45:
                    ab:bc:ca:29:b8:68:17:e9:1d:80:f6:b3:de:0a:da:
                    c9:5c:11:1a:0f:63:b1:e9:60:f1:5c:12:e6:5c:2c:
                    32:58:0a:85:df:cc:c5:d4:85:e2:cc:cf:b1:09:b2:
                    6a:5c:22:1b:c4:e1:1a:00:75:13:7f:47:a1:fa:df:
                    6e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C4:EF:EC:A7:4B:97:E8:C8:7C:FD:6E:AD:9E:31:FB:72:C4:44:EB
            X509v3 Authority Key Identifier:
                keyid:CB:72:BA:B9:7D:7A:2B:96:75:C7:35:4E:56:1C:5D:6A:48:80:D1:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y3K6uX16K5Z1xzVOVhxdakiA0ds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3a6650-32c9-405f-8510-da491957b015/1/y3K6uX16K5Z1xzVOVhxdakiA0ds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3a6650-32c9-405f-8510-da491957b015/1/y3K6uX16K5Z1xzVOVhxdakiA0ds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:75:c9:5b:ab:e5:b3:a3:97:f2:f4:bc:87:9e:48:1d:a3:a8:
         da:17:be:d9:73:63:fc:cd:e9:a8:4a:72:a3:92:0f:4a:06:f2:
         87:7c:49:0d:a3:04:12:3c:b8:99:0c:ed:8b:69:2d:fe:64:02:
         d2:c7:09:68:b2:ad:bb:80:cb:f2:1f:cb:58:05:a1:20:bc:95:
         f5:d8:56:13:36:fb:fe:36:43:17:e6:09:01:bd:03:28:a4:87:
         52:2d:cc:d6:0d:62:5c:b6:00:8b:a9:32:db:4d:ad:8b:44:93:
         92:8a:6a:88:b8:5a:5f:80:9b:7e:0c:d6:89:75:ed:b4:28:de:
         c7:d2:e9:53:6e:26:fa:fe:06:45:c3:cd:23:3a:05:4d:0d:5f:
         d2:dd:36:c1:49:37:f5:20:33:98:ec:23:cf:dd:56:d2:c9:0a:
         eb:9c:c6:33:1b:7e:3a:b9:ca:02:ce:7c:b7:ce:49:38:82:01:
         25:6a:1f:d7:ac:29:8a:2b:60:50:70:48:ed:e5:b0:c0:ad:53:
         ca:ba:b6:b4:6d:69:a2:bc:07:b1:e5:a1:47:ac:f5:9a:e0:6d:
         e2:e2:41:e7:7a:e7:63:69:f7:1d:70:02:c7:90:be:1c:5e:e5:
         d6:62:47:29:55:cc:c6:b8:c2:ae:fb:39:b6:e1:54:0f:d7:59:
         51:98:32:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----