Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft
File:                     dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft (raw, json)
Hash identifier:          sk5cuZ/F1BERt2/CBNpXXMMSbwET4q0w+wq9OxAARHw=
Subject key identifier:   EF:65:C9:3F:C0:9F:1D:D1:05:C4:A7:96:C3:16:82:2B:C7:84:75:FC
Authority key identifier: 76:07:F6:9D:EE:43:AC:01:D7:DF:EA:CA:9B:76:A2:40:EA:6E:F3:66
Certificate issuer:       /CN=7607f69dee43ac01d7dfeaca9b76a240ea6ef366
Certificate serial:       0191FAEC382D09F509D52C8FF8E01127E8BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dgf2ne5DrAHX3-rKm3aiQOpu82Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft
Manifest number:          E8
Signing time:             Mon 16 Sep 2024 13:01:10 +0000
Manifest this update:     Mon 16 Sep 2024 13:01:10 +0000
Manifest next update:     Tue 17 Sep 2024 13:01:10 +0000
Files and hashes:         1: dgf2ne5DrAHX3-rKm3aiQOpu82Y.crl (hash: 9Q+mpcA1QA/Cg0M9n/8HNflXR2FuGg/vpqiub7HX+co=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dgf2ne5DrAHX3-rKm3aiQOpu82Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ec:38:2d:09:f5:09:d5:2c:8f:f8:e0:11:27:e8:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7607f69dee43ac01d7dfeaca9b76a240ea6ef366
        Validity
            Not Before: Sep 16 13:01:10 2024 GMT
            Not After : Sep 17 13:01:10 2024 GMT
        Subject: CN=ef65c93fc09f1dd105c4a796c316822bc78475fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:92:4a:39:3d:31:5b:40:e4:31:7a:5e:7e:ed:
                    a0:f3:8e:d8:63:1e:a8:af:ce:50:0f:07:c0:52:b4:
                    70:7d:c2:67:60:05:ce:bc:35:0f:a2:b1:89:cb:9f:
                    22:21:64:27:75:a1:b6:e2:c6:02:64:18:e9:64:92:
                    ba:65:d5:25:02:31:8b:4f:b9:c9:19:7b:f0:45:d9:
                    3a:7b:ab:75:28:96:7f:99:a6:e6:02:23:a8:aa:20:
                    58:69:a5:ed:d2:43:e1:7c:05:29:4d:a8:4b:dd:85:
                    69:6f:9c:33:d6:4b:b0:da:9b:b5:3c:f8:cd:87:0a:
                    ae:2b:7b:69:20:a7:15:0a:51:28:28:4e:23:fb:26:
                    5b:41:23:35:a2:e2:e3:14:ab:14:f9:a4:19:b5:a4:
                    fe:07:a5:d3:b2:13:27:7b:ec:d6:48:2e:11:7a:e5:
                    14:7c:1b:c0:8b:4a:c3:63:5f:b2:15:10:85:35:a1:
                    57:38:b4:0d:db:98:b0:77:9a:a5:36:be:09:3a:28:
                    27:6a:6d:49:2b:4e:3d:15:f5:d2:82:8b:a0:8c:e4:
                    b4:dd:92:d2:54:8b:f3:4f:e6:b6:12:4c:57:2e:40:
                    ba:a0:dd:6e:a0:36:b5:85:0d:9b:44:87:2a:60:6b:
                    fa:9d:3d:75:f2:98:a9:19:66:b2:ea:5b:e0:89:73:
                    e9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:65:C9:3F:C0:9F:1D:D1:05:C4:A7:96:C3:16:82:2B:C7:84:75:FC
            X509v3 Authority Key Identifier:
                keyid:76:07:F6:9D:EE:43:AC:01:D7:DF:EA:CA:9B:76:A2:40:EA:6E:F3:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgf2ne5DrAHX3-rKm3aiQOpu82Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:53:7b:5b:c0:28:5f:3e:bc:36:8b:e5:b3:17:7d:57:3e:7f:
         45:3e:3e:d1:e8:a5:e4:5d:c6:5e:aa:67:04:9e:bc:ad:1d:67:
         74:9b:91:48:54:d8:00:56:9b:2d:b6:02:1c:79:97:6d:a3:31:
         9d:51:e4:72:b5:0d:c8:0b:74:02:86:4b:25:2c:2b:f2:ad:d4:
         ea:be:cc:18:e1:60:97:49:e6:60:aa:a4:12:79:3e:3d:dd:b4:
         11:fd:8b:07:9a:03:91:aa:93:9e:8b:cb:96:15:94:33:c2:fc:
         b7:20:99:fb:18:6c:21:f5:a2:cb:12:d7:5d:db:e8:ee:21:62:
         40:cc:5f:43:78:38:ee:2f:51:ac:50:5b:9d:d2:f6:6e:21:d1:
         26:88:a2:db:d9:9e:68:e8:41:db:e1:07:96:df:16:e7:19:5a:
         74:e3:d3:51:22:c5:a7:a7:65:c9:bd:1e:b3:ad:39:b1:6e:d3:
         6f:eb:ce:51:d1:49:69:07:20:92:d5:85:4d:ef:b5:d8:9f:11:
         7f:f9:96:4a:84:9c:37:9a:fa:99:53:77:00:0c:b5:44:54:8b:
         66:51:ee:7f:b6:79:7b:c1:1c:4b:fc:db:0a:68:27:9a:1e:94:
         04:3c:1d:1b:a3:73:67:82:9d:e7:ab:43:ed:3a:27:c8:fc:ca:
         ab:65:c6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----