Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/x8AThitsVvQ950jt8kqTGRudFhw.mft
File:                     x8AThitsVvQ950jt8kqTGRudFhw.mft (raw, json)
Hash identifier:          KuD5y01VonqI7CruXu2m8pO5REi+wzPvmcSml2eGgd8=
Subject key identifier:   9D:9A:F4:4B:21:47:F8:90:0C:2B:59:E0:40:6B:47:0D:58:95:BA:44
Authority key identifier: C7:C0:13:86:2B:6C:56:F4:3D:E7:48:ED:F2:4A:93:19:1B:9D:16:1C
Certificate issuer:       /CN=c7c013862b6c56f43de748edf24a93191b9d161c
Certificate serial:       0191FA7E18BFA8A6275DE7F2FA9E30D873D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x8AThitsVvQ950jt8kqTGRudFhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/x8AThitsVvQ950jt8kqTGRudFhw.mft
Manifest number:          8E
Signing time:             Mon 16 Sep 2024 11:00:53 +0000
Manifest this update:     Mon 16 Sep 2024 11:00:53 +0000
Manifest next update:     Tue 17 Sep 2024 11:00:53 +0000
Files and hashes:         1: x8AThitsVvQ950jt8kqTGRudFhw.crl (hash: 33HnCG/ub7lWQ06Q9+Q6qq+3y5JiDkJnY5oZkZoTS2U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/x8AThitsVvQ950jt8kqTGRudFhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/x8AThitsVvQ950jt8kqTGRudFhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x8AThitsVvQ950jt8kqTGRudFhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:7e:18:bf:a8:a6:27:5d:e7:f2:fa:9e:30:d8:73:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7c013862b6c56f43de748edf24a93191b9d161c
        Validity
            Not Before: Sep 16 11:00:53 2024 GMT
            Not After : Sep 17 11:00:53 2024 GMT
        Subject: CN=9d9af44b2147f8900c2b59e0406b470d5895ba44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2e:33:0c:79:1e:61:e0:de:76:91:68:b6:95:
                    e9:36:88:96:77:98:63:18:94:6f:d5:13:00:d5:fe:
                    61:2e:c7:43:94:59:17:fe:75:a1:1e:91:7b:fd:a0:
                    6a:29:59:db:17:31:17:31:12:70:d5:ed:c4:14:4c:
                    ca:8c:cf:7b:95:0f:19:80:96:f6:b0:2b:99:b0:9f:
                    5b:dc:df:45:26:7d:10:bb:32:a1:ae:0e:1a:10:df:
                    b6:48:1f:d8:7f:d7:ac:25:67:d9:a6:06:47:92:a6:
                    49:48:f8:fd:89:54:36:e6:a9:5d:b3:20:e5:be:cc:
                    f3:a4:88:17:ab:30:93:e6:bd:ce:04:ea:d5:5e:c8:
                    3a:f8:db:47:5c:a6:66:a4:85:ba:a4:f6:dc:23:4e:
                    e1:66:e8:4c:41:85:90:74:84:32:d9:98:e0:7d:9a:
                    c5:b4:54:a6:01:cc:c1:02:3f:71:82:69:63:44:77:
                    37:e6:19:26:23:72:ee:e5:87:da:8e:66:51:8d:98:
                    2b:83:ea:ef:d1:2a:f0:fa:e7:d3:0a:b5:59:77:19:
                    e7:fc:6f:ab:b6:ab:0d:66:d2:37:e3:eb:8c:9d:08:
                    2f:06:58:e4:92:bf:31:32:e7:8b:13:86:7b:98:6f:
                    17:7c:41:f4:e4:4a:08:1a:6d:e3:93:96:f1:b3:31:
                    71:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9A:F4:4B:21:47:F8:90:0C:2B:59:E0:40:6B:47:0D:58:95:BA:44
            X509v3 Authority Key Identifier:
                keyid:C7:C0:13:86:2B:6C:56:F4:3D:E7:48:ED:F2:4A:93:19:1B:9D:16:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8AThitsVvQ950jt8kqTGRudFhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/x8AThitsVvQ950jt8kqTGRudFhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/x8AThitsVvQ950jt8kqTGRudFhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:35:e5:5e:95:93:4f:16:0a:64:0a:ba:a9:70:b9:e3:3f:a8:
         ab:91:31:53:b6:cf:25:f2:e4:eb:6f:d0:e9:c4:cf:bd:b9:23:
         23:97:e2:0e:9f:88:5f:92:7f:8a:7b:4d:55:10:a6:61:01:1f:
         33:1d:52:db:41:78:09:4c:47:7b:18:78:cb:84:ae:1c:49:d3:
         2e:96:b3:7f:6f:fa:09:10:65:99:d7:51:aa:b9:7e:b1:a5:ad:
         4b:d8:ce:e0:a0:32:a5:b8:68:9f:db:b7:95:57:16:97:b9:21:
         7c:99:b0:97:4b:53:3f:14:bd:01:fb:2a:14:fb:c4:f7:b8:05:
         12:97:b3:3a:18:05:ac:78:7e:74:17:cc:3a:d0:03:fd:63:99:
         e6:6c:c9:fb:36:83:0a:f9:f4:06:46:a6:bd:89:74:68:3d:55:
         a1:e3:dd:c3:75:f6:e4:4f:b2:cd:11:12:66:89:7e:1b:2c:c0:
         9b:b0:a2:b3:d8:0f:d4:01:39:7d:49:c0:48:28:e4:74:54:f4:
         a2:b3:d2:85:f7:b8:24:39:17:70:19:7e:c8:05:17:2e:07:9c:
         0e:c8:5d:6f:c9:86:ec:af:56:6c:0a:e7:bd:fc:3b:16:1f:fe:
         37:f1:6d:19:d8:fc:c7:e8:f0:e8:ba:ed:02:b0:28:82:b0:16:
         50:fb:9e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----