Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
File:                     Xm0H9Lv9HbNwmWp192soq8TWs-o.mft (raw, json)
Hash identifier:          NEomQFx18wnOyoV/W9oKFtO+uo5g+wGJv/7hEdAS3EM=
Subject key identifier:   57:C7:2B:2D:F9:83:DA:CF:F1:C0:0A:F7:0B:B9:6B:30:48:08:F8:ED
Authority key identifier: 5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
Certificate issuer:       /CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Certificate serial:       0191F9A2A1C8C9E30461A4299137C764EE10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
Manifest number:          A1
Signing time:             Mon 16 Sep 2024 07:01:10 +0000
Manifest this update:     Mon 16 Sep 2024 07:01:10 +0000
Manifest next update:     Tue 17 Sep 2024 07:01:10 +0000
Files and hashes:         1: Xm0H9Lv9HbNwmWp192soq8TWs-o.crl (hash: A0fLYk0ymjhU5hSilCiDE4b6wgYPnOgiB10fqCYPqdo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:a1:c8:c9:e3:04:61:a4:29:91:37:c7:64:ee:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
        Validity
            Not Before: Sep 16 07:01:10 2024 GMT
            Not After : Sep 17 07:01:10 2024 GMT
        Subject: CN=57c72b2df983dacff1c00af70bb96b304808f8ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:53:fd:72:f7:1a:fb:a1:02:c3:3f:56:14:c2:
                    3e:f8:f5:a8:ad:0f:8a:e7:85:0d:39:fc:1e:95:b8:
                    74:e5:19:5f:d7:7e:85:38:19:41:eb:e2:12:30:40:
                    15:c5:ed:ae:c7:f0:23:63:69:2d:bc:79:9b:f0:a2:
                    ba:57:38:55:3c:09:b3:82:ce:3a:f6:08:d9:b8:22:
                    a5:7c:ac:b4:05:0c:89:9b:43:14:80:30:23:5f:4d:
                    52:c7:3f:2e:28:e9:0b:53:84:fd:04:81:dd:0e:d8:
                    36:a4:05:fe:99:4c:6b:65:aa:a7:fe:21:cb:8a:2e:
                    f8:ca:44:7d:e3:af:10:cb:fe:87:18:1a:26:fc:29:
                    b5:74:7e:68:e7:82:9b:05:95:17:cc:91:97:bb:a7:
                    d3:a7:18:2e:3f:aa:94:1b:65:ad:bd:7b:52:32:f7:
                    b5:df:3d:7f:71:cc:33:af:0d:33:5f:a4:51:18:e3:
                    5e:93:0d:54:a7:fd:33:24:58:e3:1a:07:ba:10:f4:
                    76:53:c8:f8:68:6b:71:30:aa:06:a7:87:d0:0a:c3:
                    10:bc:37:f7:b4:d3:e4:9c:12:f5:1d:32:55:a2:65:
                    37:05:60:ff:63:a9:c1:3b:41:1b:c4:4d:63:fd:0a:
                    ad:a4:bb:02:8e:3f:98:48:8e:74:cb:10:fe:34:ce:
                    cd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C7:2B:2D:F9:83:DA:CF:F1:C0:0A:F7:0B:B9:6B:30:48:08:F8:ED
            X509v3 Authority Key Identifier:
                keyid:5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:03:52:58:25:4a:8c:61:b4:11:c4:c9:50:03:3a:f8:64:97:
         6f:8f:96:ab:9c:c0:1a:85:a4:c9:f4:97:6b:d2:2c:5c:5e:c3:
         bf:f4:6f:b1:3c:67:65:c1:6d:53:07:8b:65:e4:f2:34:04:40:
         ee:2e:f8:4d:42:08:6f:97:2f:a2:e4:ae:4d:b8:8e:6b:93:b9:
         53:6e:fa:e8:47:c7:80:51:40:c9:15:4f:8b:0a:59:04:10:00:
         9b:5a:4a:68:b9:5f:61:3c:ee:73:16:c7:f8:9f:70:6c:37:45:
         fc:4a:c0:86:70:5b:4c:f8:6a:31:7d:dc:0c:e4:a1:e6:4d:4c:
         02:33:18:b2:36:fc:63:1a:f1:01:5e:85:9b:d0:b4:7e:ea:d0:
         49:09:62:b5:a7:4a:e8:bf:c4:53:66:a5:5e:e4:88:ee:1c:2e:
         8c:79:da:d6:b8:b9:22:5f:2f:17:a4:4a:87:dc:13:bb:81:77:
         ca:fe:b8:c9:b6:89:49:70:d1:fd:98:e6:f6:d5:ea:5c:70:ec:
         1a:26:58:69:9a:2c:dc:26:59:7b:f1:b6:71:6a:44:46:fd:b0:
         87:82:ed:18:df:63:c4:68:58:6d:dd:02:49:51:d5:c0:85:67:
         7e:50:2d:f3:3d:bf:29:fa:9e:5c:61:54:0e:1b:d8:ea:f1:6d:
         65:08:c1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----