Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
File:                     Mb9CyzMks4trh4t81W9pk263w9M.mft (raw, json)
Hash identifier:          zxHZu5x9Yho4KfiwdX3gqyRzX1BGmJfstHJR1lI0trM=
Subject key identifier:   A2:22:A0:39:5F:1C:4C:EA:B0:EB:93:63:77:81:B9:90:33:42:74:DC
Authority key identifier: 31:BF:42:CB:33:24:B3:8B:6B:87:8B:7C:D5:6F:69:93:6E:B7:C3:D3
Certificate issuer:       /CN=31bf42cb3324b38b6b878b7cd56f69936eb7c3d3
Certificate serial:       0191FA105E8F34639844FB676B9249D88D2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
Manifest number:          0101
Signing time:             Mon 16 Sep 2024 09:01:02 +0000
Manifest this update:     Mon 16 Sep 2024 09:01:02 +0000
Manifest next update:     Tue 17 Sep 2024 09:01:02 +0000
Files and hashes:         1: Mb9CyzMks4trh4t81W9pk263w9M.crl (hash: 3mGIfYRFrvFp62+kgpTQcjt3CUm6VEdF1qybgZMnPgQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:5e:8f:34:63:98:44:fb:67:6b:92:49:d8:8d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31bf42cb3324b38b6b878b7cd56f69936eb7c3d3
        Validity
            Not Before: Sep 16 09:01:02 2024 GMT
            Not After : Sep 17 09:01:02 2024 GMT
        Subject: CN=a222a0395f1c4ceab0eb93637781b990334274dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:56:ff:a7:c6:53:1e:71:8a:81:a1:79:70:85:
                    96:eb:62:11:70:49:5e:96:94:c9:f9:16:a7:bd:0e:
                    a4:6a:01:50:5a:fa:b3:e4:45:3b:f6:e1:e9:89:04:
                    30:a7:4b:f0:10:1a:ca:6d:6d:8f:83:b7:20:1e:fd:
                    11:79:17:4d:7a:25:e0:be:4e:1f:e9:42:65:81:26:
                    45:c2:48:5a:10:eb:f8:4c:92:7a:59:e1:b2:2b:9d:
                    5c:49:a5:52:0d:70:61:44:51:48:ad:48:12:6d:f9:
                    17:7a:02:21:53:aa:9b:68:68:e3:c3:a9:4e:ac:e4:
                    11:c7:31:c2:71:55:22:1e:31:8b:fb:bc:eb:fb:2b:
                    72:c3:82:d8:7d:38:66:c1:94:8b:1c:5e:b2:db:a1:
                    e9:98:49:8b:0d:5b:8d:21:56:d5:6f:a5:1f:02:81:
                    66:00:f3:82:d3:3f:7d:aa:3f:18:d2:7f:1d:01:dc:
                    a4:04:e5:63:2a:f5:11:49:d3:d7:bf:21:c9:c6:e0:
                    91:f9:c0:6d:ac:aa:bf:e0:29:a7:16:05:e6:bc:36:
                    db:58:da:b1:90:a6:1a:74:f4:84:2e:7c:b4:5d:7f:
                    69:1f:8c:0a:91:13:fd:ac:ae:70:ee:ef:a7:6b:c7:
                    6e:91:01:ef:00:4b:d4:e5:b5:d7:5e:a2:ab:bf:6f:
                    4b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:22:A0:39:5F:1C:4C:EA:B0:EB:93:63:77:81:B9:90:33:42:74:DC
            X509v3 Authority Key Identifier:
                keyid:31:BF:42:CB:33:24:B3:8B:6B:87:8B:7C:D5:6F:69:93:6E:B7:C3:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:32:a7:ac:e6:3f:1e:32:e4:65:35:08:ef:5a:3e:8f:fc:6b:
         eb:f1:73:ad:82:b6:98:69:ac:41:11:c0:67:54:41:c7:0b:3d:
         68:23:aa:52:5a:de:e9:c0:f3:db:91:25:5b:08:e7:6a:4e:fd:
         ee:8a:c5:f0:fa:99:e9:3c:58:f3:e3:00:84:c3:1b:f0:b9:23:
         25:8b:a5:38:e5:22:6e:49:db:ef:98:ee:6c:62:0e:a6:15:79:
         ea:46:b4:60:30:3c:8c:ae:bd:c7:33:6c:fa:9f:2a:65:0a:7a:
         6e:31:90:b8:f3:46:a8:aa:3d:fd:74:d0:4d:7a:0a:f4:2c:b9:
         e4:82:87:63:ee:52:ef:d0:22:07:d4:19:15:29:aa:f8:e3:bd:
         3b:03:83:cb:a0:e3:6c:e1:db:7e:10:e0:1f:7e:38:a8:40:c5:
         f7:99:1f:ea:fa:5f:c1:ce:bb:dd:b0:47:6e:b2:fb:98:b1:22:
         11:07:4a:a1:23:72:84:17:ac:83:73:03:55:5b:71:22:4f:f6:
         e9:ae:02:ac:ee:7e:42:11:12:71:3b:bc:d4:aa:80:18:e8:a2:
         a1:25:da:d5:67:34:73:a5:15:41:68:9d:76:10:2e:16:44:6a:
         e1:63:5c:06:25:1c:17:df:e3:e3:75:84:f9:f4:a9:76:45:96:
         05:d8:a2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----