Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
File:                     elJNrL4CqVkxyh1u4ps8iVek7L4.mft (raw, json)
Hash identifier:          mgk4Zte0ghJZgQrPLzWELbWhaSbjsc2WsIUQbGA9j8c=
Subject key identifier:   D9:E4:99:FD:94:29:10:EB:08:91:76:A7:0F:EA:34:03:B3:A3:F5:40
Authority key identifier: 7A:52:4D:AC:BE:02:A9:59:31:CA:1D:6E:E2:9B:3C:89:57:A4:EC:BE
Certificate issuer:       /CN=7a524dacbe02a95931ca1d6ee29b3c8957a4ecbe
Certificate serial:       0191FAEC5B5A31BF103CFA600603C4BC2F9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
Manifest number:          CC
Signing time:             Mon 16 Sep 2024 13:01:19 +0000
Manifest this update:     Mon 16 Sep 2024 13:01:19 +0000
Manifest next update:     Tue 17 Sep 2024 13:01:19 +0000
Files and hashes:         1: elJNrL4CqVkxyh1u4ps8iVek7L4.crl (hash: eUJ1qH+ADkdkmzAlqPdKV/C8Ko4/MUh27APPY9qn9AU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ec:5b:5a:31:bf:10:3c:fa:60:06:03:c4:bc:2f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a524dacbe02a95931ca1d6ee29b3c8957a4ecbe
        Validity
            Not Before: Sep 16 13:01:19 2024 GMT
            Not After : Sep 17 13:01:19 2024 GMT
        Subject: CN=d9e499fd942910eb089176a70fea3403b3a3f540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:15:b4:56:96:5c:31:65:0f:8d:7a:f6:bb:e8:
                    4e:74:46:1e:10:d2:51:52:2c:3f:e7:5e:e0:8d:12:
                    aa:f9:83:62:63:fa:7a:62:da:68:57:15:c6:21:09:
                    ef:6d:b4:7f:28:7e:ad:b3:c6:53:64:e1:e6:36:b6:
                    88:07:79:66:e3:4a:6e:0f:85:12:b8:3e:18:01:4f:
                    11:8e:d4:55:12:4e:00:4a:49:91:fc:d5:b7:21:82:
                    93:c2:45:e5:13:8e:39:21:62:1f:7b:3d:ea:87:1f:
                    32:63:b0:ac:bd:75:32:41:e2:10:3a:1e:73:bb:6c:
                    cf:4f:11:2f:08:ef:0c:34:92:74:18:fd:b7:a5:20:
                    fa:10:3d:6d:c4:b1:5b:69:6a:89:1e:05:1c:38:eb:
                    46:ab:97:d2:20:88:13:d4:cd:d7:c1:75:91:5c:27:
                    f9:3c:60:2c:07:3d:db:19:f4:8d:e8:6c:72:21:03:
                    e8:d9:c2:44:f9:3c:19:38:a3:73:d9:a6:80:0e:94:
                    4b:28:b1:f4:6f:3f:8d:1f:1e:2b:75:f5:5c:f9:d7:
                    fc:d1:08:60:d8:52:27:e5:e7:95:a8:ae:75:05:a1:
                    5d:e1:81:d2:16:67:c1:89:c0:f8:7b:74:ba:f0:cd:
                    0a:8a:99:19:e9:6b:f6:e9:04:6f:c3:12:2b:9e:42:
                    40:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E4:99:FD:94:29:10:EB:08:91:76:A7:0F:EA:34:03:B3:A3:F5:40
            X509v3 Authority Key Identifier:
                keyid:7A:52:4D:AC:BE:02:A9:59:31:CA:1D:6E:E2:9B:3C:89:57:A4:EC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:7d:78:5a:5a:da:e5:19:7b:7f:c8:2d:23:90:3e:69:c6:8d:
         dc:5e:74:5f:c0:91:67:25:a3:67:9a:d5:bc:e5:80:39:e7:93:
         2a:7b:aa:d8:66:a9:1c:c3:1f:47:a1:a9:2e:0a:53:10:b8:3b:
         65:cf:bc:39:e4:7d:ba:91:9f:77:6d:dc:c8:3a:1f:08:59:a4:
         07:40:68:3b:88:4f:2f:ee:57:dc:13:52:80:e8:cf:a5:8b:e2:
         fb:51:30:71:02:54:57:70:78:86:32:24:33:27:bc:c2:60:c4:
         13:91:ef:ef:a7:fd:d2:da:b7:58:00:08:5a:82:b8:96:e8:a8:
         6b:7c:11:72:e9:50:4a:08:be:20:80:24:f3:c4:78:81:6e:e6:
         17:be:b7:1c:4a:12:a2:14:52:bb:b1:4a:ad:6c:5b:a2:cb:ad:
         1a:12:f2:84:5f:2a:6c:f0:9f:07:d0:dc:eb:77:18:5a:2c:a2:
         5d:99:19:e7:18:9e:cc:57:9d:bf:60:a3:83:40:ab:dd:62:15:
         0a:36:30:a0:a9:0b:16:68:09:21:74:6c:e2:33:9e:d0:a2:80:
         e4:d6:02:1f:fc:1d:35:62:fe:1d:01:2b:dc:1d:8b:98:c8:3f:
         7e:1d:73:ed:8f:b1:77:72:ae:76:f7:97:56:80:cd:a7:03:77:
         69:18:73:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----