Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/634122-c611-4fec-8046-7c3e48863608/1/vxfVoihiEhe4cYVdRhG8pGTg5iA.mft
File:                     vxfVoihiEhe4cYVdRhG8pGTg5iA.mft (raw, json)
Hash identifier:          QN6zwc+3HEhg7hT9rXSk/bbdWHNjjn8QHL0/G7137Ls=
Subject key identifier:   3E:65:59:D7:00:33:A0:13:41:45:BB:E6:60:EE:55:17:5F:33:17:52
Authority key identifier: BF:17:D5:A2:28:62:12:17:B8:71:85:5D:46:11:BC:A4:64:E0:E6:20
Certificate issuer:       /CN=bf17d5a228621217b871855d4611bca464e0e620
Certificate serial:       0191F9D95715FBDC342C333E6F07610249BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vxfVoihiEhe4cYVdRhG8pGTg5iA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/634122-c611-4fec-8046-7c3e48863608/1/vxfVoihiEhe4cYVdRhG8pGTg5iA.mft
Manifest number:          ED
Signing time:             Mon 16 Sep 2024 08:00:55 +0000
Manifest this update:     Mon 16 Sep 2024 08:00:55 +0000
Manifest next update:     Tue 17 Sep 2024 08:00:55 +0000
Files and hashes:         1: vxfVoihiEhe4cYVdRhG8pGTg5iA.crl (hash: dRiROMI+u1IqMoBBbPCRmAANWypeOYqJ8tOBdHXpMZs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/634122-c611-4fec-8046-7c3e48863608/1/vxfVoihiEhe4cYVdRhG8pGTg5iA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/634122-c611-4fec-8046-7c3e48863608/1/vxfVoihiEhe4cYVdRhG8pGTg5iA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vxfVoihiEhe4cYVdRhG8pGTg5iA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:57:15:fb:dc:34:2c:33:3e:6f:07:61:02:49:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf17d5a228621217b871855d4611bca464e0e620
        Validity
            Not Before: Sep 16 08:00:55 2024 GMT
            Not After : Sep 17 08:00:55 2024 GMT
        Subject: CN=3e6559d70033a0134145bbe660ee55175f331752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f9:90:14:58:2e:ab:cb:55:10:d6:7e:12:ae:
                    56:17:1d:3c:3f:9b:0d:ca:13:4f:f8:60:9e:d8:56:
                    dd:c3:df:f9:3b:f4:d6:b9:1c:97:87:b7:9a:ff:53:
                    90:fc:ae:ae:12:55:f3:57:4c:c5:61:8c:73:ff:7b:
                    ed:1a:71:7d:3d:5d:ae:a6:63:d5:13:7a:45:91:aa:
                    0d:88:10:43:82:da:3e:29:4e:d7:54:5c:d5:37:81:
                    17:b4:d7:cc:90:7d:53:93:a6:57:b7:29:ee:de:7a:
                    09:c4:73:ee:76:32:70:a7:c2:43:f5:c7:b7:7d:aa:
                    47:9f:20:30:0c:11:bc:ab:f1:f2:ee:77:0c:9b:0f:
                    6b:18:0b:3b:f5:f6:24:54:98:0e:fd:98:88:df:6e:
                    c7:9d:01:6c:e5:8b:78:80:e2:3d:7b:b0:b5:73:b0:
                    5d:a3:e7:1d:1d:c4:48:c8:1b:1e:1d:58:af:8c:36:
                    c1:95:db:8f:fa:35:ad:cf:22:54:d7:56:4c:97:9a:
                    f4:24:d4:66:93:56:cc:5c:c3:82:76:09:95:fd:f2:
                    c4:22:26:1e:cb:ee:68:e4:09:7f:14:63:a5:c8:94:
                    3e:99:de:7e:33:46:80:35:28:0e:6c:4a:78:1d:b4:
                    1c:a2:9a:56:07:c9:25:fe:67:99:fc:84:90:64:f1:
                    bf:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:65:59:D7:00:33:A0:13:41:45:BB:E6:60:EE:55:17:5F:33:17:52
            X509v3 Authority Key Identifier:
                keyid:BF:17:D5:A2:28:62:12:17:B8:71:85:5D:46:11:BC:A4:64:E0:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxfVoihiEhe4cYVdRhG8pGTg5iA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/634122-c611-4fec-8046-7c3e48863608/1/vxfVoihiEhe4cYVdRhG8pGTg5iA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/634122-c611-4fec-8046-7c3e48863608/1/vxfVoihiEhe4cYVdRhG8pGTg5iA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:3d:91:5a:23:26:d4:94:f0:5c:ee:4e:04:55:e1:0d:df:d7:
         dc:df:14:17:95:40:aa:56:a5:01:c0:98:69:d0:e7:c9:62:7d:
         4c:8c:58:69:78:72:a6:c6:bb:05:22:a3:c0:f7:35:54:8e:2e:
         66:15:ee:6c:b5:91:59:50:79:ba:ce:b9:57:ff:50:9d:e9:36:
         95:fb:ac:a6:2f:a0:94:fb:33:65:10:ed:6b:12:03:d6:27:3f:
         a5:dd:01:8a:58:3a:5b:e7:88:9e:c2:c9:95:28:38:f8:c0:34:
         5d:f3:ad:2f:f0:a4:d4:c1:fb:1c:dd:2c:2c:90:62:ef:d7:e9:
         9a:f8:08:cf:7a:ea:83:e9:04:59:73:fc:4b:fc:0f:b7:ef:06:
         83:19:6a:d1:87:3e:30:b5:90:9d:77:51:11:7c:1a:d3:67:74:
         22:90:bb:24:e9:90:af:6f:e4:22:2b:6e:93:65:cc:44:e8:92:
         c6:b7:49:6a:54:84:21:78:22:ce:75:54:32:36:73:7a:57:77:
         1f:ed:47:a9:bc:7c:0d:40:c6:a2:bc:02:6e:24:4c:43:ac:3a:
         dc:6c:85:dc:2d:21:e4:1b:e8:37:ca:7a:50:b4:24:ca:c4:78:
         b5:32:96:ab:a0:d1:42:9a:e9:f4:ec:09:3b:c4:b9:5b:de:54:
         f4:9c:e5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----