Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
File:                     5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft (raw, json)
Hash identifier:          BgkJdeDKe18B+OjIr+xlQo5BTnj2YlpmMNLKF02bSJk=
Subject key identifier:   AC:97:79:77:A1:C5:39:6C:CE:2F:3A:E3:AD:EE:A9:48:E5:2A:87:D3
Authority key identifier: E4:7E:92:BF:41:A5:A7:74:51:1F:B7:23:AF:94:AF:F0:D3:51:26:02
Certificate issuer:       /CN=e47e92bf41a5a774511fb723af94aff0d3512602
Certificate serial:       0191FA10B9EA1D1A410DF2082AB48294278A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
Manifest number:          F4
Signing time:             Mon 16 Sep 2024 09:01:25 +0000
Manifest this update:     Mon 16 Sep 2024 09:01:25 +0000
Manifest next update:     Tue 17 Sep 2024 09:01:25 +0000
Files and hashes:         1: 5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl (hash: ztM2p0RtFiLTUkz75bb8/CBzVOSfh6BuCVUdlK2YxrA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:b9:ea:1d:1a:41:0d:f2:08:2a:b4:82:94:27:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47e92bf41a5a774511fb723af94aff0d3512602
        Validity
            Not Before: Sep 16 09:01:25 2024 GMT
            Not After : Sep 17 09:01:25 2024 GMT
        Subject: CN=ac977977a1c5396cce2f3ae3adeea948e52a87d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:36:1a:91:63:38:05:f2:a9:ca:a4:67:fc:17:
                    e7:b9:a3:29:2b:6e:6e:bc:19:bf:ba:19:8d:5f:11:
                    17:72:22:22:44:00:44:f4:0a:ab:ce:19:99:02:83:
                    f2:bf:98:a8:0e:bf:3d:d5:a9:d7:f7:3c:f0:5a:f1:
                    52:0c:66:82:a4:06:66:21:50:97:a6:b4:2c:0a:91:
                    14:69:b8:00:65:13:09:0d:8b:a0:2c:33:d8:63:77:
                    c5:2f:91:f1:11:ef:07:8f:48:05:dd:8a:10:22:db:
                    4e:1c:c0:52:d8:bc:d0:ee:cb:4f:a0:97:5f:bf:66:
                    8d:e2:22:96:34:e3:9f:60:42:a5:2c:41:08:ed:52:
                    fe:f4:c0:e8:22:c2:45:75:6c:33:82:b1:7b:3b:2d:
                    c6:2a:3a:1f:55:24:a9:52:90:ea:ae:7a:da:e9:3b:
                    d6:3a:8e:ab:30:d2:eb:29:36:66:7f:73:57:6b:13:
                    9d:23:56:1d:3f:ca:0c:e2:fa:af:a4:19:3b:49:2b:
                    4e:a0:c0:fa:e4:c8:1a:e8:c6:43:fc:12:8f:ff:70:
                    93:93:15:27:4c:f1:b1:d3:e4:12:6c:d4:42:ef:36:
                    c1:d1:7f:f7:cb:82:1a:9f:6e:be:a2:50:c7:64:18:
                    6a:33:49:65:32:d9:4c:48:6a:73:1e:b6:9a:44:78:
                    55:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:97:79:77:A1:C5:39:6C:CE:2F:3A:E3:AD:EE:A9:48:E5:2A:87:D3
            X509v3 Authority Key Identifier:
                keyid:E4:7E:92:BF:41:A5:A7:74:51:1F:B7:23:AF:94:AF:F0:D3:51:26:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:92:0d:e9:d8:33:bf:f1:4b:8a:f6:dc:45:3d:d2:72:ec:84:
         d5:e3:b6:78:f5:41:ca:82:71:63:b6:dd:f2:60:af:a0:8e:dc:
         85:fa:5e:25:46:9b:f0:dd:59:ca:05:d1:fe:97:a8:31:28:ac:
         24:68:ec:ee:1d:af:99:73:90:9d:2f:02:8d:7d:3c:ca:28:f7:
         3c:d9:6d:9f:7b:ff:8e:87:1b:40:b8:83:cc:9f:e7:83:b0:ff:
         1e:f5:a2:12:e1:0f:ea:a9:e7:8d:ec:9d:a2:10:6e:1d:27:fb:
         34:68:c5:f2:63:86:d0:44:57:51:1e:52:03:63:cb:c2:20:b5:
         56:44:e2:1b:ac:fc:71:9b:d4:eb:bb:37:44:b0:00:49:98:6b:
         99:fe:12:b9:3c:f7:63:cc:ea:ed:9e:46:cc:80:67:f4:5b:f9:
         cf:68:3d:e1:3b:e1:5e:e4:20:32:d4:bf:78:c6:12:20:6d:ac:
         5e:3f:57:bd:b1:bb:c4:f9:10:e9:df:06:f2:7c:6b:c9:ff:63:
         de:0b:c8:63:da:54:b7:da:0b:b5:01:33:d7:00:3c:92:00:97:
         19:37:d4:54:6c:cf:c5:1c:f1:25:49:b6:4f:69:d3:82:45:e6:
         68:dd:2c:a4:a0:3e:41:ff:3d:20:27:7f:d3:5d:10:e0:b7:3e:
         ab:1f:79:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----