Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
File:                     dUE1hHAyFWSttCp213OuPK57vVY.mft (raw, json)
Hash identifier:          hCrwsQU8xJTZYVaQlbOJdThAXZ2rIfxgSjyoKBLRTRA=
Subject key identifier:   36:D9:07:05:29:5D:0B:69:40:7B:55:23:A2:F8:11:A2:9A:05:69:72
Authority key identifier: 75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
Certificate issuer:       /CN=7541358470321564adb42a76d773ae3cae7bbd56
Certificate serial:       0191FAB5131D0E5570800A0D4B51E32F018A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
Manifest number:          0108
Signing time:             Mon 16 Sep 2024 12:00:56 +0000
Manifest this update:     Mon 16 Sep 2024 12:00:56 +0000
Manifest next update:     Tue 17 Sep 2024 12:00:56 +0000
Files and hashes:         1: dUE1hHAyFWSttCp213OuPK57vVY.crl (hash: tL+ZZ1wHjrcLmL2Jfs2YUgwj1R+Xuz3pyPejJKMGWh0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 12:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:b5:13:1d:0e:55:70:80:0a:0d:4b:51:e3:2f:01:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7541358470321564adb42a76d773ae3cae7bbd56
        Validity
            Not Before: Sep 16 12:00:56 2024 GMT
            Not After : Sep 17 12:00:56 2024 GMT
        Subject: CN=36d90705295d0b69407b5523a2f811a29a056972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ed:fa:96:ba:d8:9e:b7:92:c6:d1:c9:22:f3:
                    ff:f1:a5:4b:55:76:b2:80:bf:f4:ed:98:d1:e7:ca:
                    cb:b5:31:eb:22:9b:5e:b0:c3:b1:11:b3:ff:34:24:
                    58:f9:67:4e:85:c3:3a:f4:a5:46:29:b6:53:d4:39:
                    94:f3:0e:09:60:e3:cc:89:7a:0b:a2:e1:72:07:cd:
                    93:80:f0:be:3d:b4:cf:ce:27:51:aa:60:bd:db:e1:
                    25:09:79:26:9e:15:19:b6:b8:a3:e3:63:d9:11:48:
                    e4:1e:5c:1d:96:7d:53:20:d7:8b:72:c4:1e:e4:a8:
                    21:03:62:12:c0:ae:bd:4e:6b:b5:a8:26:ef:a1:30:
                    27:76:9b:cb:4b:95:9d:aa:cd:ad:a7:87:bb:93:48:
                    40:67:65:11:c7:f7:8c:13:39:46:45:6a:d8:1d:9b:
                    e5:c7:87:94:f8:45:a8:66:d5:17:93:a9:fc:c3:73:
                    72:3c:88:5f:65:b1:16:cc:3a:05:a3:e7:28:da:35:
                    c9:9b:b9:d0:09:67:0b:9c:dc:48:89:70:52:c0:07:
                    cd:af:d2:37:4b:2e:0f:57:08:79:71:28:4d:51:99:
                    89:e8:80:5f:52:4d:99:0a:cb:36:ea:95:6a:48:95:
                    aa:9d:ea:85:00:fa:86:74:55:3d:9f:5b:09:21:b0:
                    ea:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D9:07:05:29:5D:0B:69:40:7B:55:23:A2:F8:11:A2:9A:05:69:72
            X509v3 Authority Key Identifier:
                keyid:75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e4:73:05:a6:23:5b:d9:c6:eb:57:70:b9:3e:1d:41:3f:4f:
         75:f0:b6:1e:d8:0f:fe:b1:cd:f4:5b:c3:bf:77:16:51:34:7b:
         d3:0a:ff:5b:d1:ae:e1:83:6c:85:9d:51:ec:5e:00:d8:24:64:
         b0:3f:21:60:f9:10:a2:d8:0c:40:79:2b:a0:e7:5d:a9:b2:46:
         24:3d:c1:66:85:e6:29:bb:e0:0f:20:01:a3:f2:5f:19:11:0b:
         2b:aa:b2:ab:e7:67:e7:52:46:49:a9:4e:37:32:a3:c4:d7:9b:
         5c:5a:34:36:41:86:44:d0:d9:6a:04:03:8e:66:ef:5b:dd:1d:
         e4:ad:d8:f4:2f:3c:e3:c4:bf:34:96:25:ad:13:b5:62:bc:8f:
         5e:af:03:dc:69:3b:da:dc:02:53:08:c5:ab:db:ce:68:6d:a0:
         0b:60:ee:a4:63:12:ee:6a:a2:f5:c7:9f:ed:6b:3e:89:d6:ed:
         35:ed:32:77:d1:e0:ad:2d:f8:81:3d:4a:4d:86:73:5c:14:b5:
         1a:b9:40:3b:78:19:d9:c0:f6:3d:d1:fe:12:8e:d0:a3:a7:03:
         91:16:b1:f0:02:75:5e:3e:e2:b6:fa:40:33:e1:4e:d0:9f:c3:
         e8:68:f0:78:93:85:fb:12:49:47:64:98:d7:92:88:79:2e:1c:
         37:59:cb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----