Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
File:                     hCIIK4U0vXrmP6gAimhbZfTNJZM.mft (raw, json)
Hash identifier:          IKMs3m3pHbzDuevwRzfx889CsJxIAqHPzwd8UUmqMgE=
Subject key identifier:   01:09:3A:21:D1:EA:A4:99:D2:D1:9C:68:36:7D:08:E3:9F:38:5B:02
Authority key identifier: 84:22:08:2B:85:34:BD:7A:E6:3F:A8:00:8A:68:5B:65:F4:CD:25:93
Certificate issuer:       /CN=8422082b8534bd7ae63fa8008a685b65f4cd2593
Certificate serial:       0191FA108509FD3968C500BE088E4619850D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
Manifest number:          C8
Signing time:             Mon 16 Sep 2024 09:01:12 +0000
Manifest this update:     Mon 16 Sep 2024 09:01:12 +0000
Manifest next update:     Tue 17 Sep 2024 09:01:12 +0000
Files and hashes:         1: hCIIK4U0vXrmP6gAimhbZfTNJZM.crl (hash: 6DAJXlr/TJeHzIqyXmPZL80LYHRKFUcU7Nw6qnJOPyk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:85:09:fd:39:68:c5:00:be:08:8e:46:19:85:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8422082b8534bd7ae63fa8008a685b65f4cd2593
        Validity
            Not Before: Sep 16 09:01:12 2024 GMT
            Not After : Sep 17 09:01:12 2024 GMT
        Subject: CN=01093a21d1eaa499d2d19c68367d08e39f385b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dd:e0:95:01:a7:b9:52:39:5f:0a:11:41:30:
                    7c:dc:74:68:35:93:c1:93:8d:12:31:85:48:de:8c:
                    d0:d4:df:a7:0c:13:8d:d0:84:ab:b8:36:ff:6e:6c:
                    02:c8:56:a1:32:a8:6e:ee:22:a1:a8:d9:67:f0:23:
                    dd:92:2b:72:73:bf:f5:6b:95:ca:f2:4a:cd:ac:ff:
                    f9:83:13:9b:d5:f7:93:19:ab:7f:4b:96:52:5c:39:
                    0a:86:9f:56:ef:f0:81:cb:38:4c:87:80:03:6f:db:
                    86:8e:f3:d0:0d:5d:d5:02:78:40:02:eb:44:69:80:
                    2e:95:38:bd:de:cd:0f:e3:6b:38:cf:96:b0:3e:b4:
                    6f:21:f1:84:b0:c2:64:35:0f:64:72:89:e1:89:16:
                    11:3b:1e:7b:e3:7c:f3:9e:5c:68:ab:e4:00:84:03:
                    ec:55:96:d6:ba:69:e5:f3:b4:ac:41:22:9b:1f:0c:
                    a8:68:8f:d4:77:a4:8f:ba:5f:1a:9c:a0:42:d9:01:
                    28:01:be:75:5a:62:d9:dd:70:de:c4:cb:c1:b0:3d:
                    f3:85:aa:38:20:dd:7d:d5:55:9f:ef:7c:f4:c2:ba:
                    2b:0a:21:b1:51:54:37:fd:d2:f5:3d:e7:26:b2:8e:
                    34:8a:96:bf:19:b0:ff:4d:a4:41:00:94:9a:3a:a0:
                    ca:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:09:3A:21:D1:EA:A4:99:D2:D1:9C:68:36:7D:08:E3:9F:38:5B:02
            X509v3 Authority Key Identifier:
                keyid:84:22:08:2B:85:34:BD:7A:E6:3F:A8:00:8A:68:5B:65:F4:CD:25:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:03:23:ea:5f:27:a2:2b:0c:22:a7:09:a2:89:84:d2:52:6e:
         11:5f:19:4e:b6:ce:a2:74:a7:8c:4b:68:67:da:c1:60:66:a3:
         3d:a8:db:a9:ae:16:8e:cc:a0:0e:9e:fe:fb:bd:94:3f:4a:81:
         09:cb:df:cd:e9:34:25:2f:66:2a:e2:64:6a:78:8b:8a:b7:85:
         74:fb:33:25:ae:23:da:5c:87:e5:8b:0f:cf:be:69:6a:c2:18:
         fb:ff:34:fa:d0:6a:ea:f2:66:98:55:8a:47:02:99:86:b3:6f:
         18:db:50:f2:3e:1d:f3:c1:1b:30:a4:18:36:91:d6:d4:93:f7:
         f1:c6:92:84:38:73:4e:1f:f1:1e:6e:89:92:b6:d6:94:fc:bb:
         85:fa:fa:8d:78:37:6d:3c:68:31:f8:df:9c:b5:aa:47:a1:45:
         39:21:e8:7d:7d:b8:9a:34:0b:ae:9f:d4:44:e2:a9:ec:52:7e:
         51:c4:98:d4:1a:29:8a:77:18:7e:1d:df:34:d1:4d:b1:22:76:
         d1:a0:55:c4:e8:9b:37:ce:5f:65:9d:59:41:8f:ce:68:8c:3c:
         89:2f:1a:e1:4b:66:ed:9f:7d:62:34:a5:e7:89:0e:dd:ef:24:
         e8:4b:d3:53:8f:78:27:dd:95:b8:cf:0d:42:4e:9e:81:69:14:
         55:37:38:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----