Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
File:                     Vz6UxDzTSjuDpL2Kp79K4yRubak.mft (raw, json)
Hash identifier:          oaz57Gg0Zhog/S3q/UMHN34Nc7MKyErhhJLsOm13I8k=
Subject key identifier:   E3:7E:EA:11:3F:0D:E9:33:57:20:B3:A0:5B:DA:68:82:65:6A:2D:21
Authority key identifier: 57:3E:94:C4:3C:D3:4A:3B:83:A4:BD:8A:A7:BF:4A:E3:24:6E:6D:A9
Certificate issuer:       /CN=573e94c43cd34a3b83a4bd8aa7bf4ae3246e6da9
Certificate serial:       0191F9D9DA6ED410B5093AE905B06E7A8786
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
Manifest number:          12B9
Signing time:             Mon 16 Sep 2024 08:01:29 +0000
Manifest this update:     Mon 16 Sep 2024 08:01:29 +0000
Manifest next update:     Tue 17 Sep 2024 08:01:29 +0000
Files and hashes:         1: Vz6UxDzTSjuDpL2Kp79K4yRubak.crl (hash: vmWHQVqW0/Nj3AIjuo5PVY5dLXbflVRwA/NlCJs/4lE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:da:6e:d4:10:b5:09:3a:e9:05:b0:6e:7a:87:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573e94c43cd34a3b83a4bd8aa7bf4ae3246e6da9
        Validity
            Not Before: Sep 16 08:01:29 2024 GMT
            Not After : Sep 17 08:01:29 2024 GMT
        Subject: CN=e37eea113f0de9335720b3a05bda6882656a2d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:fb:5b:e3:db:4c:48:58:43:2b:ac:88:46:
                    ce:05:85:a0:72:32:53:9c:a1:59:26:1a:46:0f:41:
                    3b:3a:2b:c6:78:8c:b9:51:54:27:17:01:e3:20:13:
                    3e:75:83:f6:79:25:29:d7:74:2e:a1:41:b8:cb:ba:
                    a7:81:06:68:e2:8d:f0:d1:93:54:78:c8:c2:a4:fd:
                    2a:87:a1:aa:3b:c2:5e:38:ca:70:31:92:1b:e7:45:
                    e1:90:23:8a:20:5d:f5:63:a8:2e:cb:06:d1:30:7c:
                    dd:8d:97:ec:b4:f1:53:82:3a:82:41:f3:b3:66:a7:
                    a1:0f:4b:d3:d8:03:b9:ef:47:da:f9:bc:ec:41:b8:
                    ab:cf:a9:82:42:4f:d0:42:8f:b3:00:85:dc:a4:a7:
                    55:ed:02:e7:43:c6:41:fc:d8:45:ea:50:d2:60:42:
                    9b:ed:64:90:dc:43:b3:29:c0:a7:dc:2f:d9:2f:b8:
                    07:26:f2:39:35:bd:dc:b0:d3:79:99:4c:78:7b:bd:
                    50:24:a8:c3:e9:c3:bd:89:b1:99:6a:69:92:47:3b:
                    a0:65:8f:fa:4d:f0:a3:45:78:2e:66:1f:4f:35:c3:
                    fa:82:9f:b0:4e:a2:23:ec:e7:72:3f:9c:e3:9a:61:
                    06:bd:69:83:10:3e:f1:90:5d:49:1c:e4:5e:d2:73:
                    f5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:7E:EA:11:3F:0D:E9:33:57:20:B3:A0:5B:DA:68:82:65:6A:2D:21
            X509v3 Authority Key Identifier:
                keyid:57:3E:94:C4:3C:D3:4A:3B:83:A4:BD:8A:A7:BF:4A:E3:24:6E:6D:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:06:07:53:6d:42:a6:f9:1c:49:aa:c3:5e:3b:09:8d:ae:15:
         fa:72:a7:b6:59:b4:4d:a8:f2:51:45:a1:b6:d0:a9:69:7c:82:
         4e:02:83:3a:8b:30:27:c6:1e:cf:fd:ec:bd:4c:17:9f:6a:44:
         19:57:08:93:88:3b:db:8f:ae:4f:e6:79:92:30:af:02:75:d8:
         df:fe:7d:f8:af:52:4e:39:94:47:26:87:94:8b:ee:af:cd:74:
         d5:aa:49:96:74:45:f8:88:59:95:6c:f9:de:1c:0e:b6:ea:50:
         bf:96:0b:60:d0:57:f7:44:4d:c2:48:79:ba:11:40:c1:7b:10:
         69:8d:1a:09:55:ae:aa:5b:aa:da:76:6e:48:74:f3:1b:a0:43:
         6a:13:11:14:98:47:ef:61:8a:6d:d9:50:10:90:a4:9a:60:b5:
         5c:40:5b:82:b2:fe:80:b0:2d:40:f8:ba:80:02:6c:75:64:89:
         2f:c4:c2:35:85:b9:d8:59:63:36:93:54:3d:ce:fe:17:03:45:
         28:75:34:e8:11:bd:21:36:e1:03:08:11:ec:c4:e4:7c:99:6f:
         14:5f:0b:56:e6:52:9c:99:7e:9f:56:ce:8b:80:87:b7:00:2b:
         f3:ba:7f:5d:af:dc:00:5a:fc:52:12:bc:07:cd:ea:ff:ee:d5:
         95:c1:6b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----