Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
File:                     zoip7Zmtl6w3FxISn-BU9pbcVn0.mft (raw, json)
Hash identifier:          qy7uZxvOgpthcjfE3lPg95mhmObDuao0rmIjjQZ3k/s=
Subject key identifier:   1C:58:A3:33:FD:A1:2F:8E:B0:CD:30:28:A7:EA:2A:AA:86:64:9F:27
Authority key identifier: CE:88:A9:ED:99:AD:97:AC:37:17:12:12:9F:E0:54:F6:96:DC:56:7D
Certificate issuer:       /CN=ce88a9ed99ad97ac371712129fe054f696dc567d
Certificate serial:       0191FAB501B6A58EF4F75CA47F1D683B8293
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
Manifest number:          B6
Signing time:             Mon 16 Sep 2024 12:00:52 +0000
Manifest this update:     Mon 16 Sep 2024 12:00:52 +0000
Manifest next update:     Tue 17 Sep 2024 12:00:52 +0000
Files and hashes:         1: zoip7Zmtl6w3FxISn-BU9pbcVn0.crl (hash: KAKqw3OTlXFsK5J35WZGlnuuBPlkjoeqdSGkaTNYpdM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 12:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:b5:01:b6:a5:8e:f4:f7:5c:a4:7f:1d:68:3b:82:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce88a9ed99ad97ac371712129fe054f696dc567d
        Validity
            Not Before: Sep 16 12:00:52 2024 GMT
            Not After : Sep 17 12:00:52 2024 GMT
        Subject: CN=1c58a333fda12f8eb0cd3028a7ea2aaa86649f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:48:55:72:a0:9a:d1:ab:22:5e:66:f3:df:13:
                    9d:60:37:91:de:a9:1c:a6:80:18:ec:9c:b0:76:db:
                    ed:6a:9f:3d:f8:25:cb:4f:f7:6d:2d:b3:16:24:41:
                    4b:75:8a:78:72:cc:80:f0:8b:32:cc:30:db:d4:86:
                    ba:78:5f:7c:9f:9c:eb:09:37:3f:47:ad:27:e2:43:
                    f5:e1:51:16:2d:a8:f0:1f:e0:e4:5f:55:66:26:b8:
                    bf:cf:8e:6f:85:60:ea:6c:19:53:bc:a1:30:e8:6c:
                    08:76:90:a4:4a:e1:14:38:9a:08:d8:1a:f1:91:21:
                    81:27:49:f8:85:60:ed:0f:32:64:95:f5:d2:d5:b3:
                    95:e9:fd:72:5e:92:97:29:d1:5a:88:07:18:b8:c2:
                    95:10:ad:23:8f:dd:62:11:fb:f7:86:25:35:cb:43:
                    8b:ee:7b:8c:1c:f1:67:ad:9c:dd:32:9d:70:5a:70:
                    7b:b6:b0:58:5e:56:7f:a0:e5:ef:40:85:30:e0:49:
                    7f:5b:df:fe:75:2f:e9:df:2b:3b:b4:3a:38:db:fa:
                    26:57:d4:96:d9:01:73:c5:31:b5:d5:61:7e:fb:64:
                    0b:44:14:35:6a:a3:85:eb:bf:5e:c2:a1:d3:c3:73:
                    57:da:af:3b:88:8c:35:cf:bc:eb:ce:6b:bc:13:96:
                    cd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:58:A3:33:FD:A1:2F:8E:B0:CD:30:28:A7:EA:2A:AA:86:64:9F:27
            X509v3 Authority Key Identifier:
                keyid:CE:88:A9:ED:99:AD:97:AC:37:17:12:12:9F:E0:54:F6:96:DC:56:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:16:e6:93:98:75:14:29:7a:54:17:c0:87:66:aa:3c:ec:91:
         9e:e2:e6:66:29:72:cc:94:d4:c0:15:fc:9f:61:4a:9f:0b:00:
         43:8a:24:7c:b7:b3:90:53:50:26:05:bb:f7:33:26:65:65:c6:
         00:8c:9b:b2:82:27:0f:5a:b6:25:06:6f:01:36:97:ae:a5:4b:
         0f:bf:d7:15:06:01:86:9e:cd:15:8d:7c:1e:cd:05:33:27:23:
         68:99:0a:71:36:f0:1f:45:1a:6a:55:be:b8:c8:e1:ad:b7:d6:
         45:f4:b4:8e:36:d6:08:99:5d:a4:aa:7f:62:29:be:6c:87:3f:
         d6:af:56:63:a0:0e:2e:83:29:34:bb:46:83:fa:bb:45:58:e5:
         c1:2a:cd:7f:b4:a1:10:1f:b3:ff:b0:48:9c:13:15:90:20:17:
         39:ab:96:92:b2:29:4f:2a:0f:17:d6:e3:00:a8:6d:7b:46:5c:
         2b:24:51:da:30:c6:53:9e:d7:18:ec:39:a8:50:0f:3c:6c:fa:
         9a:31:fe:aa:72:81:36:04:50:75:df:90:df:8b:b9:3b:bf:08:
         b6:44:b4:15:41:39:ed:69:4a:33:8c:73:0a:b2:3c:de:9b:82:
         21:55:0e:5e:7b:f6:34:6d:22:fe:e9:f1:f8:1d:3e:38:f9:a8:
         c1:f0:48:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----